--- title: Privacy Policy date: 2026-02-04T09:09:00+13:00 author: thecohorts_admin canonical_url: "https://thecohorts.com/privacy-policy" section: Pages --- ## Privacy Policy The Cohorts Limited ("The Cohorts", "we", "us") is a New Zealand digital agency. This policy explains what personal information we collect through our website, thecohorts.com, why we collect it, and what you can do about it. We handle personal information in line with the New Zealand Privacy Act 2020 and its Information Privacy Principles. If you're a customer of one of our clients and you've reached us through a website we built for them, that site's own privacy policy applies. We process that information on the client's behalf and on their instructions. #### What we collect **Information you give us.** When you use our contact or enquiry form, we collect your name, email address, company name and whatever you put in your message. If you sign up to our newsletter, we collect your name and email address. **Information collected automatically.** When you visit the site, our analytics and marketing tools record technical information such as your IP address, browser and device type, the pages you view, how you got here and how long you stay. Some of this is collected through cookies and similar technologies, covered below. We don't collect any more than we need, and we don't ask for sensitive personal information through the website. #### Why we collect it We use personal information to: - respond to your enquiry and talk with you about work you've asked about - send you our newsletter, if you've signed up for it - understand how the site is used so we can improve it - measure whether our marketing is working and show you relevant content on other platforms - keep the site secure and prevent misuse We won't use your information for a purpose that isn't connected to the reason we collected it, unless you agree or the law allows it. #### Cookies and tracking Our website uses cookies and similar technologies for analytics and marketing: - **Analytics.** We use Google Analytics 4 to see how people use the site. The data is aggregated and we don't use it to identify you personally. - **Marketing.** We use advertising and social media tags (such as the LinkedIn Insight Tag and Meta Pixel) so we can measure our campaigns and reach people who've shown interest in what we do. These providers may set their own cookies and collect information under their own privacy policies. You can control cookies through your browser settings, and most analytics and advertising providers offer their own opt-outs. Blocking cookies won't stop the site working, though a few things may be less convenient. #### Marketing emails We'll only send you marketing emails if you've signed up or asked us to. Every email includes an unsubscribe link, and you can opt out at any time by using it or by emailing us. We comply with the Unsolicited Electronic Messages Act 2007. #### Who we share it with We don't sell, rent or trade personal information. We share it only with: - **Service providers** who help us run the business and the website, such as Microsoft 365 (email and documents), our hosting and content delivery providers, our email marketing platform, and our analytics and advertising providers. They handle your information on our behalf and under their own data protection terms. - **Professional advisers**, where we need their help. - **Authorities**, where the law requires it. Some of these providers store or process information outside New Zealand, including in the United States and Australia. Where that happens, we take reasonable steps to make sure your information is protected to a standard comparable with New Zealand privacy law. #### How we keep it safe Personal information is protected by the same controls we apply across the agency: access limited to the people who need it, multi-factor authentication, encryption in transit, and secured hosting with regular backups. Our internal Information Security Policy and Privacy & Personal Information Handling Policy set out these controls in more detail, and we can share them with clients on request. No system is completely secure. If a privacy breach happens and is likely to cause serious harm, we'll notify the Office of the Privacy Commissioner and the people affected as soon as practicable, as the Privacy Act requires. #### How long we keep it We keep personal information only as long as we need it for the purpose we collected it, or as the law requires. As a guide: - enquiries that don't lead to work are deleted within two years - client records are kept for seven years after the engagement ends, to meet our contractual and tax obligations - website analytics data is kept for up to 26 months - newsletter details are kept until you unsubscribe Once information is no longer needed, it's securely deleted and allowed to age out of our backups. #### Your rights Under the Privacy Act 2020 you can ask us for a copy of the personal information we hold about you, and ask us to correct it if it's wrong. To do either, email support@thecohorts.com. We'll respond within 20 working days, and we may ask you to confirm your identity first. You can also ask us to delete your information or stop contacting you. We'll do so unless we need to keep it for a legal or contractual reason, in which case we'll tell you why. If you're not happy with how we've handled your personal information, tell us first and we'll do our best to put it right. You can also complain to the Office of the Privacy Commissioner at [privacy.org.nz](https://privacy.org.nz). #### Changes to this policy We'll update this policy when our practices or the law change. The date at the top tells you when it was last revised. If a change is significant, we'll flag it on the site. #### Contact us **The Cohorts Limited** Email: