Privacy Policy

This policy applies when people visit Eastward websites, make enquiries, become clients, use an Eastward-operated portal or system, interact with content or otherwise communicate with Eastward. Client-controlled personal information inside a system built for a client may be governed primarily by that client’s privacy obligations.

• Names, roles, business names and contact details.
• Enquiry, discovery, proposal, contract, project and support information.
• Billing and transaction references.
• Content, files, brand assets and project access information supplied by a client.
• Website/device information where analytics or security tools are used.
• Communications, feedback, approvals and support records.

For enquiries, project delivery, account administration, security, support, service improvement, legal compliance and other purposes that are connected with the reason the information was collected or are otherwise authorised by law.

Information may be supplied directly through forms, email, meetings, project tools or client systems, or collected automatically through approved website, analytics and security services.

Eastward may use appropriate employees, contractors, advisers, payment providers, hosting/cloud providers, domain/email providers, analytics/security services and other suppliers where reasonably necessary. Eastward does not sell personal information.

Some providers may process or store information outside New Zealand. The final published policy should identify material providers and describe the safeguards Eastward relies on where overseas disclosure rules apply.

Eastward should use reasonable technical and organisational safeguards and retain personal information only for as long as there is a lawful business, contractual, security or record-keeping need.

Individuals may request access to or correction of personal information held about them, subject to the Privacy Act 2020 and any lawful grounds for withholding information.

The final policy should identify the analytics, cookies or similar technology actually used by Eastward rather than listing tools that are not in operation.

Where Eastward processes personal information on behalf of a client, responsibilities should also be documented in the relevant project agreement, privacy schedule or system terms.

Eastward will assess privacy breaches under the Privacy Act 2020. A breach that has caused or is likely to cause serious harm may require notification to the Office of the Privacy Commissioner and affected people as soon as practicable, subject to the Act’s exceptions. Privacy concerns should be raised with Eastward first at info@eastward.co.nz until a dedicated privacy contact is formally adopted.

The current published version should show its effective date. Material changes may be communicated directly where appropriate.