Privacy Policy

Last updated:

1. Data Controller

The data controller responsible for your personal data is:

Hedgefundiebonds
1066 Great North Road, Point Chevalier, Auckland 1022, New Zealand
Email: help@hedgefundiebonds.world
Phone: +64 27 334 1953

2. New Zealand Privacy Act 2020

We are an agency for the purposes of the Privacy Act 2020 (New Zealand). We handle personal information in line with the Information Privacy Principles (IPPs) in that Act, including: collecting information lawfully and fairly; telling you why we collect it; using and disclosing it only for purposes connected to our activities (or as the Act allows); keeping it accurate and secure; and giving you access to, and correction of, your personal information except where the Act permits us to withhold information.

If you want to know more about privacy rights in New Zealand, visit the Office of the Privacy Commissioner.

3. Information We Collect

We collect personal data that you voluntarily provide to us when you use our contact form or interact with our website. This includes:

  • Full name
  • Email address
  • Message content
  • Consent records (date and time of consent)

We also collect certain data automatically when you visit our website:

  • IP address (anonymised where possible)
  • Browser type and version
  • Operating system
  • Referring URL
  • Pages visited and time spent
  • Cookie data (as described in our Cookie Policy)

4. Legal Basis for Processing

New Zealand: We collect and use personal information where that is necessary for our functions or activities (for example, responding to your enquiry), where you authorise us, or as otherwise permitted under the Privacy Act 2020.

European Union / EEA / UK (where GDPR applies): We also rely on the following legal grounds under the General Data Protection Regulation (GDPR), in addition to complying with the Privacy Act 2020 where it applies:

  • Consent (Article 6(1)(a) GDPR): When you submit the contact form, you consent to us processing your data to respond to your inquiry.
  • Legitimate Interests (Article 6(1)(f) GDPR): We may process certain data (such as aggregated analytics) to understand how our website is used and to improve our services, where those interests are not overridden by your rights.

5. Purpose of Data Processing

We use your personal data for the following purposes:

  • Responding to your inquiries submitted via the contact form
  • Providing you with information you have requested
  • Improving our website functionality and user experience
  • Analysing website usage patterns (with anonymised or aggregated data where applicable)
  • Measuring the effectiveness of online advertising where you have consented to marketing or analytics cookies
  • Complying with legal obligations, including obligations under the Privacy Act 2020 and other New Zealand law

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy:

  • Contact form data: Retained for up to 12 months after your inquiry has been resolved, unless a longer retention period is required by law.
  • Analytics data: Retained in anonymised form for up to 26 months.
  • Consent records: Retained for as long as the consent is valid, and for a reasonable period thereafter to demonstrate compliance.

7. Data Sharing

We do not sell, trade, or rent your personal data to third parties. We may share your data with:

  • Service providers: Third-party companies that assist us in operating our website and providing services (e.g., hosting providers, analytics services). These providers are contractually obligated to protect your data.
  • Legal requirements: When required by law, regulation, or legal process.

8. International Data Transfers and Overseas Disclosure

Some of our service providers may store or process information outside New Zealand. Where we disclose personal information to an overseas person or entity, we take steps that are reasonable in the circumstances to ensure the recipient meets safeguards comparable to those in the Privacy Act 2020, or we rely on an exception permitted by the Act (for example, where you authorise the disclosure after clear notice).

If you are in the EU/EEA and data is transferred outside the EEA, we use appropriate safeguards where required (such as Standard Contractual Clauses approved by the European Commission) in addition to the steps above.

9. Your Rights

New Zealand (Privacy Act 2020): You may ask whether we hold personal information about you, request access to it, and request correction. If we refuse an access or correction request, we will explain why as required by the Act. You may also ask us to attach a statement of correction to information we hold if we do not agree to change it.

GDPR (where applicable): You may also have the following rights regarding personal data:

  • Right of access: Request a copy of the personal data we hold about you.
  • Right to rectification: Request correction of inaccurate or incomplete data.
  • Right to erasure: Request deletion of your personal data where there is no compelling reason for continued processing.
  • Right to restrict processing: Request that we limit processing under certain circumstances.
  • Right to data portability: Request your data in a structured, commonly used, machine-readable format.
  • Right to object: Object to processing based on legitimate interests.
  • Right to withdraw consent: Where processing is based on consent, withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

To exercise these rights, contact us at help@hedgefundiebonds.world. Under the Privacy Act 2020 we will decide on access requests as soon as reasonably practicable and within 20 working days unless an extension applies under the Act. For GDPR requests we aim to respond within 30 days where that law applies.

10. Notifiable Privacy Breaches (New Zealand)

If we become aware of a privacy breach that it is reasonable to believe has caused serious harm to you (or is likely to do so), we will notify the Office of the Privacy Commissioner and affected individuals as required by the Privacy Act 2020, unless an exception in the Act applies.

11. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

  • SSL/TLS encryption for all data transmitted through our website
  • Regular security assessments and updates
  • Access controls limiting data access to authorised personnel only
  • Secure data storage with appropriate backup procedures

12. Children's Privacy

Our website is not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child under 16, we will take steps to delete that information promptly.

13. Complaint Rights

If you are concerned about how we have handled your personal information, please contact us first using the details below. You may also complain to the Office of the Privacy Commissioner (New Zealand). If you are in the EU/EEA, you may contact your local data protection authority.

14. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically to stay informed about how we protect your data.

15. Contact Us

If you have any questions about this privacy policy or our data practices, please contact us:

Hedgefundiebonds
1066 Great North Road, Point Chevalier, Auckland 1022, New Zealand
Email: help@hedgefundiebonds.world
Phone: +64 27 334 1953