Privacy Policy

Cole Digital Limited (“we”, “us”, “our”) operates coledigital.co.nz. This Privacy Policy explains what personal information we collect, how we use it, and your rights under the New Zealand Privacy Act 2020 and applicable data protection law including the GDPR.

1. Information We Collect

We collect personal information when you:

• Submit the contact form — name, email address, company name (optional), service interest (optional), budget range (optional), and message.
• Use the chat widget — the conversation content, your name, email address, company name (optional), project description, and any other details you share during the conversation.

We do not use cookies, tracking pixels, or fingerprinting technologies. We do not collect sensitive personal information.

2. How We Use Your Information

We use the information you provide solely to:

• Respond to your enquiry or project request.
• Send you a notification email summarising your lead information.
• Store your enquiry details so we can follow up appropriately.

We do not sell, rent, or share your personal information with third parties for marketing purposes.

3. Third-Party Services

We use the following third-party services to operate this website:

• Supabase — cloud database (hosted in the EU/US) where enquiry data is stored. Supabase Privacy Policy.
• Resend — transactional email provider used to deliver lead notification emails to us. Resend Privacy Policy.
• Cloudflare Turnstile — bot protection on our contact form. Turnstile is privacy-preserving and does not use intrusive tracking. Cloudflare Privacy Policy.
• Vercel Analytics — cookieless, privacy-first website analytics. No personal data is stored; only aggregated, anonymised traffic data is collected. Vercel Privacy Policy.
• OpenAI — powers the chat widget. Messages you send via the chat widget are processed by OpenAI's API. OpenAI Privacy Policy.

4. Data Retention

Enquiry data submitted via the contact form or chat widget is stored in our database for as long as necessary to fulfil the purpose for which it was collected, or until you request deletion.

5. Your Rights

Under the New Zealand Privacy Act 2020 and the GDPR (where applicable), you have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your personal information.
• Object to or restrict processing of your information.
• Withdraw consent at any time (where processing is based on consent).

To exercise any of these rights, contact us at hello@coledigital.co.nz. We will respond within 20 working days as required by the Privacy Act 2020.

6. Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, disclosure, alteration, or destruction. All data is transmitted over HTTPS.

7. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page reflects the most recent revision. Continued use of the site after changes constitutes acceptance of the updated policy.

8. Contact

For any privacy-related questions or requests, please contact us at: hello@coledigital.co.nz