Who we are
Abnova Limited is a company registered in New Zealand, trading as ABNOVA Digital. Our headquarters are in Wellington, New Zealand, and we operate an engineering centre in Goa, India. In this policy, “we”, “us” and “our” refer to Abnova Limited.
We are the “agency” responsible for personal information under the New Zealand Privacy Act 2020 for information collected through this website and in the course of our business. Where we process personal information on behalf of a client as part of a software project, the client is usually the agency and we act on their instructions — see section 12.
Scope of this policy
This policy applies to personal information we collect when you:
- visit abnovadigital.co.nz or any of our web pages;
- contact us by form, email, phone or social media;
- engage us as a client, supplier or partner;
- apply for a job with us; or
- attend an event or meeting with us.
It does not apply to third-party websites we link to, which have their own privacy policies.
Information we collect
Information you give us
- Contact details — name, email address, phone number, company name, job title, location.
- Enquiry and project information — what you tell us about your business, goals, budget range, timelines and existing systems when you send a brief or talk with us.
- Commercial information — contract, billing and payment details if you become a client or supplier.
- Recruitment information — CV, work history, references and interview notes if you apply for a role.
- Correspondence — the content of emails, messages and meeting notes.
Information collected automatically
- Website usage data — pages viewed, referring site, approximate location (country/city), device and browser type, and timestamps, collected through privacy-respecting analytics (see section 8).
- Technical data — IP address and server logs used for security and troubleshooting.
- Preferences — such as your light/dark theme choice, stored locally in your browser only.
Information from third parties
Occasionally we receive personal information from referrers, partners, publicly available sources such as LinkedIn or company websites, or recruitment agencies. We only use it for the purpose it was shared.
Every field on our contact form other than name, email and message is optional. You can always choose not to give us information — it may just limit how well we can help.
How we use personal information
| Purpose | Examples |
|---|---|
| Responding to you | Replying to enquiries, scheduling discovery calls, preparing proposals and estimates. |
| Delivering services | Managing projects, communicating with your team, providing support and invoicing. |
| Running our business | Accounting, record-keeping, contract management, insurance and legal compliance. |
| Improving our website | Understanding which pages are useful, fixing errors, measuring performance. |
| Security | Detecting and preventing fraud, abuse or unauthorised access. |
| Recruitment | Assessing applications and communicating with candidates. |
| Marketing (limited) | Occasionally sharing relevant insights or updates with existing contacts — always with an easy way to opt out. We do not buy lists or send unsolicited bulk email. |
Lawful basis and consent
Under the Privacy Act 2020, we collect personal information only for lawful purposes connected with our functions, and only where collection is necessary for those purposes. Where we rely on your consent — for example, to keep your details for future opportunities after a recruitment process — you can withdraw that consent at any time by contacting us.
For clients based in Australia, the EU/UK or elsewhere, we also take account of the Australian Privacy Principles, the UK/EU GDPR and other applicable laws where they apply to our processing. Where GDPR applies, our lawful bases are typically contract, legitimate interests (running and promoting our business in ways you’d reasonably expect) and consent.
Who we share information with
We do not sell personal information, and we do not share it with third parties for their own marketing. We share personal information only:
- Within our team — including our staff in Wellington and Goa, on a need-to-know basis and under confidentiality obligations.
- With professional advisers — lawyers, accountants, insurers — where necessary.
- Where required by law — to comply with a legal obligation, court order or lawful request from a public authority, or to protect our rights or someone’s safety.
- In a business transfer — if we merge with or are acquired by another organisation, personal information may transfer as part of that transaction, subject to this policy.
Overseas disclosure
Because we operate in both New Zealand and India, and use international cloud services, personal information may be accessed from or stored in countries other than New Zealand — principally India (our engineering centre) and Australia, the United States or the European Union (cloud providers’ data-centre regions).
Where we disclose personal information overseas, we take the steps required by Information Privacy Principle 12 of the Privacy Act 2020: we use providers subject to comparable privacy safeguards, or we put contractual protections in place requiring the recipient to protect the information to a standard comparable to New Zealand law. Our Goa team accesses information under the same policies, access controls and confidentiality obligations as our Wellington team.
Cookies and analytics
This website uses the minimum necessary:
| Type | Purpose | Duration |
|---|---|---|
Local storage: theme |
Remembers your light/dark preference. Never leaves your browser. | Until cleared |
| Analytics | Aggregated page-view statistics to improve the site. | Until cleared |
| Form handling | Security tokens to prevent spam when you submit a form. | Session |
We do not use advertising or cross-site tracking cookies. If we introduce any cookies that require consent, we will ask for it clearly before setting them. You can control cookies through your browser settings.
How we keep information secure
We apply the same engineering discipline to our own data that we apply to our clients’:
- Encryption in transit (TLS) and at rest for our systems and cloud storage.
- Least-privilege, role-based access with multi-factor authentication on all business systems.
- Access removed promptly when staff change roles or leave.
- Secrets and credentials kept in managed secret stores — never in code or documents.
- Regular software updates, dependency scanning and backups.
- Confidentiality obligations in every employment and supplier contract.
No system is perfectly secure. If we become aware of a privacy breach that is likely to cause serious harm, we will notify the Office of the Privacy Commissioner and affected individuals as required by the Privacy Act 2020.
How long we keep information
We keep personal information only as long as needed for the purpose it was collected, or as required by law. As a guide:
- Enquiries that don’t become projects — up to 24 months, then deleted.
- Client and supplier records — for the duration of the relationship and 7 years after, to meet New Zealand tax and record-keeping obligations.
- Unsuccessful job applications — up to 12 months, unless you ask us to delete sooner or agree to a longer period.
- Website analytics — aggregated data only; raw logs are rotated regularly.
Your rights and choices
Under the Privacy Act 2020 you have the right to:
- Access the personal information we hold about you;
- Correct it if it is wrong or out of date;
- Ask us to delete it where we no longer need it;
- Opt out of any marketing communications at any time;
- Withdraw consent where processing is based on consent.
If you are in the EU/UK or Australia you may have additional rights, such as data portability or the right to object to certain processing — we will honour these where they apply.
Email info@abnovadigital.com. We will respond within 20 working days as required by New Zealand law — and usually much faster. We may need to verify your identity first. There is no charge for reasonable requests.
Client project data
When we build or support software for a client, we may have access to personal information held in the client’s systems — for example customer records in a SaaS application or data in a warehouse we’re building. In those cases:
- The client remains responsible for that information and we process it only on their documented instructions.
- Access is limited to team members working on that project and removed when the work ends.
- We use production data only where necessary and agreed, and prefer anonymised or synthetic data for development and testing.
- Data residency, security and processing terms are set out in our service agreement or a separate data processing agreement where required.
Job applicants
If you apply for a role, we use your information to assess your application and communicate with you. We may contact referees you nominate. Interview notes and assessments are kept confidential to the hiring team. If your application is unsuccessful we retain your details for up to 12 months in case a suitable role arises, unless you ask us not to.
Children
Our website and services are directed at businesses and are not intended for children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.
Changes to this policy
We may update this policy from time to time to reflect changes in our practices or the law. The “last updated” date at the top shows the current version. For significant changes we will provide a clearer notice on this website or by email to affected contacts. Continued use of our website or services after changes take effect means you accept the updated policy.
Contact us and complaints
If you have a question, request or concern about privacy, please contact our Privacy Officer first — we take every concern seriously and will work with you to resolve it.
Level 4, 12 Lambton Quay
Wellington 6011, New Zealand
info@abnovadigital.com
+64 22 302 4618
Office of the Privacy Commissioner
PO Box 10094, Wellington 6143
www.privacy.org.nz · 0800 803 909