First Marketing NZ Limited (“we”, “our”, “us”) is committed to protecting your privacy. This policy explains how we collect, use, store, and protect personal and business information in accordance with the New Zealand Privacy Act 2020.
NZBN: 94‑29053833594
To deliver clear, accurate advice and the best possible results, we rely on high‑quality information. Depending on the nature of our engagement, we may collect contact details (name, email, phone), business information provided during enquiries or engagements, marketing performance data, website analytics and usage data, information submitted through forms, downloads, or subscriptions, and financial information relevant to your marketing activity (e.g., budgets, spend levels, revenue ranges, investment parameters). We only request financial information when it is necessary to provide accurate strategic recommendations, modelling, or capability assessments.
Clear financial information allows us to assess the feasibility of marketing strategies, recommend appropriate budget levels, model outcomes, provide advice aligned with your commercial reality, and prevent overspending or misallocation of resources. We do not collect financial information for any purpose unrelated to your engagement with First Marketing NZ Limited and all information is confined to working with your business only with the purpose of optimising your activity.
We use personal and business information to respond to enquiries, deliver services and recommendations, improve our website and content, send relevant updates or resources, manage billing and administration, and develop accurate strategic, financial, and capability insights for your organisation. We do not use your information for automated decision‑making or profiling. We only send marketing emails to people who have agreed to receive them or where the law otherwise allows it. Every marketing email we send includes a way to unsubscribe.
We use reputable platforms to operate our business, including HubSpot (CRM, forms, communication), Xero (invoicing and financial administration), Microsoft 365 (email, document storage, collaboration), and Canva (design and content production). These providers may store information on our behalf. We ensure they meet reasonable security and privacy standards. We hold our own subscriptions to the analytics and research tools we use to deliver our services. Where we need information from your own analytics, advertising or platform accounts, we usually ask you to export it and send it to us, and we ask for summary or de-identified data where that is enough. Where you give us access to your accounts instead, you remain the owner of those accounts and we access them only for the purposes of our engagement with you. Some of these providers store information outside New Zealand. Where they do so on our behalf, we remain responsible for that information under the Privacy Act 2020.
We store information within our own business domain, using a dedicated Microsoft 365 environment (including OneDrive) that is kept separate from any personal accounts. Client information is kept in a defined workspace for each client. Access is restricted to authorised personnel, and we use reasonable security safeguards to protect information from loss, unauthorised access, use, modification or disclosure. Financial information is protected with the same level of care as all other sensitive business information.
We keep personal and business information only for as long as we need it for the purposes for which it was collected, or for as long as the law requires.
As a guide, we keep financial and tax records for at least seven years, as New Zealand law requires. We keep a core record of each client engagement for 15 years after it ends so that we can respond to any later question or claim, and other working files for seven years. Personal information that clients provide to us, such as customer lists, is returned or deleted within six months after the engagement ends unless we still need it for a lawful purpose. We keep subscriber details until you unsubscribe or ask us to remove them, and records of your consent for two years after that. If you contact us but do not become a client, we keep your contact details and our correspondence with you for two years after our last contact, unless you ask us to delete them sooner. We may keep information for longer where there is a complaint, dispute, claim, audit or investigation.
When information is no longer required, we securely delete or destroy it. At the end of an engagement you can ask us to return or delete information you provided to us, subject to any records we are required by law to keep.
We may use artificial intelligence (AI) tools to support our internal processes, including organising our work and checking and validating research. The AI tool we currently use is Microsoft 365 Copilot, under our Microsoft business licence, which does not use the content we enter to train Microsoft’s models. We will only use another AI tool on a client engagement if the client agrees.
We do not use AI tools to analyse your data unless you, or the client who provided it, agree. We do not enter personal information, financial information or other confidential client information into AI tools that use that information to train their models or that do not keep it confidential.
All AI-assisted work is reviewed by us before it is used. We do not use AI tools for automated decision-making or profiling.
If a privacy breach occurs that has caused, or is likely to cause, serious harm, we will notify the Privacy Commissioner and affected individuals as required by the Privacy Act 2020. Where we hold information on behalf of a client, we will notify that client promptly so that it can meet its own obligations.
Our website may use cookies, tracking pixels (e.g., LinkedIn, Meta), and analytics tools (e.g., HubSpot, Microsoft Clarity, Google Analytics). These tools help us understand how visitors engage with our content and improve user experience. You can adjust your browser settings to manage or block cookies.
We do not sell personal or business information. We may share information with trusted service providers solely for operational purposes. We do not disclose financial information to third parties unless required by law or explicitly authorised by you.
You may request access to or correction of your personal or business information at any time by contacting us.
For privacy enquiries, contact:
Privacy Officer: Jonathan Sykes
Email: jonathan@firstmarketing.nz
