Privacy Policy

About this policy

This Privacy Policy explains how Enlite Limited, trading as Enlite Partners (“Enlite”, “we”, “us” or “our”), collects, uses, stores and discloses personal information in connection with our website and related business enquiries.

This policy applies to personal information collected through our website, website analytics, contact forms and related business enquiries.

It does not govern personal information that Enlite processes on behalf of a client in delivering professional services. That information is handled in accordance with the applicable engagement terms, client instructions and confidentiality obligations.

We handle personal information in accordance with the New Zealand Privacy Act 2020 and its information privacy principles.

Information we collect

The personal information we collect will depend on how you interact with us.

How we use your information

We may use personal information to:

• respond to enquiries and communicate with you;
• assess and discuss potential professional engagements;
• provide information you have requested;
• operate, maintain, secure and improve the website;
• understand website usage and visitor engagement;
• maintain records relating to website enquiries and prospective engagements;
• manage our relationships with prospective clients, website users and business contacts;
• comply with legal, regulatory, insurance and professional obligations;
• prevent, detect or investigate fraud, misuse or security incidents;
• establish, exercise or defend legal claims, and protect the security and integrity of Enlite’s systems and operations.

We will generally use personal information only for the purpose for which it was collected, a directly related purpose, or another purpose authorised or required by law.

Cookies and website analytics

The website may use cookies and similar technologies, including browser local storage, to operate and secure the website, remember preferences, understand website activity and improve our content and services.

Cookies are small data files stored on your device. Essential technologies may be used where necessary to provide, secure or maintain the website. Where analytics or marketing technologies are enabled, we will obtain consent before using them where required by applicable law.

You can manage non-essential technologies through the cookie controls available on the website and can also control or disable cookies through your browser settings. Withdrawing or changing your consent will not affect any processing that was lawful before the change. Disabling certain technologies may affect how the website operates.

We may use third-party analytics providers to produce aggregated information about website traffic and usage. These providers may process technical information on our behalf in New Zealand or overseas. The technologies used may change as our website tools are updated, and current details will be reflected in the website’s cookie controls where applicable.

How we share information

We do not sell personal information.

We may disclose or provide access to personal information where reasonably necessary to:

• website hosting, analytics, email, customer relationship management, data storage and IT service providers;
• professional advisers, including accountants, lawyers, insurers and auditors;
• contractors or service providers supporting Enlite’s business operations;
• a regulator, government agency, court or law-enforcement body where disclosure is authorised or required by law;
• prevent, detect or investigate fraud, misuse or security incidents; establish, exercise or defend legal claims; or protect the security and integrity of Enlite’s systems and operations; or
• support a proposed or completed sale, restructuring or transfer of all or part of Enlite’s business.

We take reasonable steps to ensure that service providers handling personal information on our behalf are subject to appropriate confidentiality, security and data-processing obligations, having regard to the nature of the information and the services being provided.

Overseas storage and processing

Some of the technology and service providers we use may store or process information outside New Zealand.

Where personal information is disclosed to an overseas organisation, we will take reasonable steps to ensure the information is protected in a way that provides safeguards comparable to those under the New Zealand Privacy Act 2020, unless another lawful exception applies.

In some circumstances, an overseas provider may process or store information solely as Enlite’s agent rather than receiving it for its own purposes.

Data security

We take reasonable technical and organisational measures to protect personal information against loss, unauthorised access, misuse, modification or disclosure.

These measures may include access controls, password protection, multi-factor authentication, secure cloud services, staff access restrictions and appropriate contractual arrangements with service providers.

However, no website, email system or method of electronic storage is completely secure. You should take care when deciding what information to send through a website form or general email.

If a privacy breach occurs, we will assess and respond to it in accordance with our obligations under the Privacy Act 2020, including notifying affected individuals and the Office of the Privacy Commissioner where required.

Data retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, to maintain appropriate business records, or to meet legal, contractual, insurance or professional obligations.

When information is no longer required, we will take reasonable steps to securely delete it, anonymise it or otherwise dispose of it.

Accessing and correcting your information

You may ask us to confirm whether we hold personal information about you and request access to that information.

You may also ask us to correct personal information that you believe is inaccurate, incomplete or out of date.

We will make and communicate a decision on an access or correction request as soon as reasonably practicable and generally within 20 working days, subject to any extension permitted under the Privacy Act 2020.

If we do not make a correction you have requested, you may ask us to attach a statement of the requested correction to the information.

You may ask us to delete personal information. We will consider the request and delete the information where it is no longer reasonably required, although we may retain it where necessary to comply with legal or professional obligations, resolve disputes or maintain legitimate business records.

We may need to verify your identity before responding to a request. In some circumstances, the Privacy Act 2020 permits or requires us to withhold information.

To make a request, contact us at info@enlitepartners.co.nz.

Privacy concerns and complaints

Please contact our Privacy Officer if you have a question or concern about how we have handled your personal information.

We will consider and respond to privacy concerns within a reasonable period.

You may also make a complaint to the New Zealand Office of the Privacy Commissioner if you are not satisfied with our response.

Third-party websites

Our website may contain links to third-party websites, social media platforms or client portals.

Enlite does not control those third parties and this Privacy Policy does not apply to their collection or handling of personal information. You should review their privacy policies before providing information to them.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes to our website, technology, business practices or legal obligations.

The updated policy will take effect when it is published on the website. The “Last updated” date above will show when the policy was most recently revised.

Where a material change would involve using personal information already collected for a new purpose that is not consistent with, or directly related to, the purpose originally communicated, we will provide additional notice or obtain any authority required by law before making that use.