Privacy Policy

1. Introduction

Welcome to Bedrock Systems ("we", "our", or "us"). We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you visit our website (getbedrock.co.nz), contact us, or request a meeting or enquiry through our website or booking flow, in accordance with the New Zealand Privacy Act 2020.

This Privacy Policy applies to website visitors and business enquiries. It does not attempt to set out all privacy terms that may apply when Bedrock provides paid client services, operates client systems, or handles data on behalf of a client under a separate services agreement.

2. Information We Collect

We only collect personal information that is necessary for a lawful purpose. We may collect personal information from you in a variety of ways, including:

• Information you provide directly: Name, email address, phone number, business details, and any other information you choose to provide when you contact us or book a chat.
• Automatically collected information: We use Google Analytics to collect data on how you interact with our website. This may include your IP address, browser type, operating system, referring URLs, and pages viewed.

If you do not provide information: Where we request personal information to respond to an enquiry or schedule a meeting, and you do not provide it, we may be unable to respond fully or arrange that meeting.

3. Purpose of Collection

We rely on the information we collect to:

• Respond to your enquiries and booking requests
• Assess whether our services are suitable for your business
• Conduct introductory reviews, audits, or business assessments before a formal engagement
• Understand and analyze how you use our website via Google Analytics
• Communicate with you about a potential or existing business relationship
• Improve our website performance, marketing strategies, and user experience

4. Use of AI and Third-Party Tools

We may use third-party service providers to operate our website, measure website usage, and manage enquiries or booking requests. We may also use AI-assisted tools internally to help us review enquiries, prepare recommendations, or support our communications.

Where we do this, we take reasonable steps to ensure the tools are used appropriately and only for legitimate business purposes. In particular:

• information is used only for purposes related to your enquiry, booking request, website analytics, or our business operations;
• we take reasonable steps to use reputable providers with appropriate privacy and security safeguards; and
• we do not sell your personal or business data to third parties.

5. Cookies

We use essential cookies for site functionality and analytics technologies, including Google Analytics, to understand and improve activity on our website. These tools may collect technical and usage information such as your IP address, device and browser information, pages viewed, and referring website information.

You can manage cookies through your browser settings, including refusing or deleting cookies, and you can opt out of Google Analytics using available browser tools provided by Google.

6. Disclosure & Overseas Transfers

We do not sell, trade, or rent your personal information. We may share personal information with service providers that help us run our website, analytics, communications, booking flow, hosting, and business operations, as well as professional advisers and contractors where reasonably necessary.

Some of those providers may be located outside New Zealand. Where we disclose personal information overseas, we take steps required by the Privacy Act 2020 to ensure the recipient is subject to privacy protections that, overall, provide comparable safeguards, or that another lawful basis for the disclosure applies.

7. Data Security and Retention

We implement reasonable security safeguards to protect your personal information against loss, unauthorized access, use, modification, or disclosure. We retain your information only as long as necessary:

• Website and enquiry records: Retained only for as long as reasonably necessary for follow-up, administration, and record-keeping.
• Client records: If your enquiry becomes a client relationship, additional retention terms may apply under our client agreement and legal obligations.
• Analytics data: Retained according to our service provider settings.

Privacy breaches: If we experience a privacy breach that has caused, or is likely to cause, serious harm, we will notify affected people and the Privacy Commissioner as soon as practicable.

8. Your Rights & Complaints

Your rights: You have the right to ask for a copy of any personal information we hold about you, and to ask for it to be corrected if you think it is wrong. If we do not agree to a requested correction, you may ask us to attach a statement of correction to the relevant information.

Privacy complaints: If you have a privacy concern, please contact us first. If you are unhappy with our response, you may make a complaint to the Office of the Privacy Commissioner at www.privacy.org.nz.

Privacy Officer: Bedrock Systems has appointed a Privacy Officer for privacy-related questions and requests. You can contact our Privacy Officer at info@getbedrock.co.nz.