Privacy Policy

Last updated: 22 July 2026

Ironstein Consulting Limited (“Ironstein”, “we”, “us” or “our”) respects your privacy and handles personal information in accordance with the New Zealand Privacy Act 2020.

This Privacy Policy explains how we collect, use, disclose and protect personal information when you use our website, contact us, engage our services or make an invoice payment.

1. Information we collect

We may collect:
• Your name, work email address, company and contact details
• Information included in enquiries, correspondence and service requests
• Information required to prepare proposals, deliver services and manage client relationships
• Invoice numbers, payer details, payment amounts and payment references
• Basic technical information such as browser type, device information, IP address and website activity
• Any other information you choose to provide to us

Please do not send bank-account credentials, internet-banking credentials, card details or unnecessary sensitive information through our website forms.

2. How we collect information

We may collect personal information:
• Directly from you through website forms, email, correspondence or service engagements
• When you use the Pay an Invoice page
• Automatically through website hosting, security and basic technical logs
• From your organisation or authorised representatives where reasonably necessary for an engagement
• From service providers or publicly available sources where permitted by law

3. Why we use your information

We may use personal information to:
• Respond to enquiries and communicate with you
• Assess, scope and deliver professional services
• Prepare quotations, engagement documents and invoices
• Administer and reconcile invoice payments
• Maintain business, compliance and accounting records
• Operate, secure and improve our website
• Meet legal, regulatory and risk-management obligations
• Prevent fraud, misuse or security incidents

We will not use personal information for a purpose that is unrelated to the purpose for which it was collected unless permitted or required by law.

4. Payment information

If online invoice payment is enabled, payment processing will be completed through an approved third-party payment provider.

Ironstein may receive and retain information such as the invoice number, payer name, contact email, payment amount, reference and payment status.

We do not ask you to enter bank-account credentials, internet-banking credentials or card details directly into the Ironstein website. Information entered into a payment provider’s service is handled under that provider’s own privacy policy and security practices.

5. Disclosure of information

We may disclose personal information to:
• Website hosting, form-processing, email and technology providers
• Payment, banking, accounting and professional-service providers
• Contractors supporting an agreed client engagement
• Regulators, government agencies, courts or law-enforcement bodies where required or permitted by law
• Other parties where you have authorised the disclosure

We do not sell personal information.

6. Overseas service providers

Some technology or service providers may store or process information outside New Zealand.

Where personal information is disclosed to an overseas recipient, we will take reasonable steps to ensure the disclosure is permitted under applicable New Zealand privacy law and that appropriate safeguards are in place.

7. Cookies and technical information

Our website may use essential cookies or similar technologies required for security, functionality and performance.

We do not use personal information for third-party advertising. If analytics or additional non-essential cookies are introduced, this policy and any required consent mechanism will be updated.

You may control cookies through your browser settings, although disabling essential cookies may affect website functionality.

8. Storage and security

We take reasonable safeguards to protect personal information against loss, misuse, unauthorised access, disclosure, alteration or destruction.

No internet transmission or storage system is completely secure. You should avoid sending confidential information through the website unless it is reasonably necessary.

9. Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including service delivery, record-keeping, dispute resolution and legal or regulatory requirements.

Information that is no longer required will be securely deleted or anonymised where reasonably practicable.

10. Access and correction

You may request access to personal information we hold about you and ask us to correct information you believe is inaccurate.

We may need to verify your identity before responding. We will process requests in accordance with applicable New Zealand privacy law.

11. Privacy breaches

If a privacy breach occurs, we will assess and respond to it in accordance with applicable law. Where required, we will notify affected individuals and the Office of the Privacy Commissioner.

12. Third-party links

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices or content of those third parties.

13. Children’s privacy

Our website and professional services are intended for businesses and are not directed to children. We do not knowingly collect personal information from children through this website.

14. Changes to this policy

We may update this Privacy Policy to reflect changes to our services, technology or legal obligations.

The updated version will be published on this page with a revised “Last updated” date.

15. Contact us

For privacy enquiries, access requests or correction requests, please contact Ironstein through the Contact page.

Once an official privacy email address is established, it may also be published here.

IRONSTEIN

Payment Infrastructure & Compliance

Ironstein Consulting Limited

NAVIGATION

LEGAL

Aotearoa New Zealand