Privacy Policy

1. Information We Collect

1.1 Information you give us directly

• Contact form: when you send us a message through our website, we collect your name, email address, subject, company/organisation (optional), and the content of your message.
• Newsletter sign-up: when you subscribe to our newsletter, we collect your email address (and name, if you provide one).
• Discovery calls and workshop registrations: if you book a "Let's Chat" call or register for a workshop, we collect the details you provide as part of that booking or registration (such as your name, email, company, and any information you share about your business or goals).
• Client engagements: if you become a client, we collect the additional information reasonably needed to deliver our consulting services (for example, business information relevant to B Corp Certification or sustainability strategy work).

1.2 Information collected automatically

We use a privacy-focused, cookie-free analytics tool (Umami) to understand how visitors use our website. This may include your approximate location (derived from IP address, which we do not store), device and browser type, pages visited, and how you arrived at our site. This data is aggregated and is not used to personally identify you.

2. How We Use Your Information

We use personal information to:

• Respond to your enquiries and messages;
• Send the newsletter you've subscribed to, and manage unsubscribes;
• Schedule and deliver discovery calls, workshops, and consulting services;
• Improve our website and understand how it is used, on an aggregated basis;
• Meet our legal, accounting, or regulatory obligations.

We do not sell your personal information, and we do not use it for purposes other than those described here without asking you first.

3. Our Newsletter (EcoSend)

We use EcoSend, an email marketing platform operated by Go Squared Ltd (UK), to manage and send our newsletter. When you subscribe, your email address (and name, if given) is stored on EcoSend's systems and processed under EcoSend's own privacy policy. EcoSend primarily stores data within the UK and the European Economic Area, with appropriate safeguards (such as Standard Contractual Clauses) applied to any other transfers.

You can unsubscribe from our newsletter at any time using the link at the bottom of every email, or by contacting us directly.

4. Cookies

Our website does not currently use tracking or advertising cookies. The analytics tool we use (Umami) is designed to operate without cookies and without collecting personally identifiable information. If this changes in the future, we will update this Policy and, where required, ask for your consent.

5. Sharing Your Information

We do not sell or rent your personal information. We share it only with:

• Service providers who help us run our business — for example, our newsletter platform (EcoSend), website hosting provider, and any scheduling or payment tools we use for calls or workshop registrations — and only to the extent needed for them to provide that service to us;
• Professional advisers (such as accountants or lawyers), where necessary;
• Authorities, if required by law.

6. International Data Transfers

Because we use overseas service providers (such as EcoSend, based in the UK), some personal information may be stored or processed outside New Zealand. Where this happens, we take reasonable steps to ensure it receives a comparable standard of protection to that required under New Zealand law.

7. Data Retention

We keep personal information only for as long as reasonably necessary for the purpose it was collected — for example, newsletter details until you unsubscribe, and contact form or client enquiries for as long as needed to respond to you and meet our legal and accounting obligations, after which it is deleted or anonymised.

8. Security

We take reasonable technical and organisational steps to protect the personal information we hold from loss, misuse, or unauthorised access. No method of storage or transmission over the internet is completely secure, but we work to keep your information safe.

9. Your Rights

If you are in New Zealand: under the Privacy Act 2020, you have the right to ask us what personal information we hold about you and to request that it be corrected. To do this, contact us using the details below. If you're unhappy with how we've handled your information, you can also complain to the Office of the Privacy Commissioner.

If you are in the EEA or UK: you have the right to access, correct, delete, or restrict the use of your personal information, to receive a copy of it in a portable format, and to object to certain processing (such as marketing emails). You can exercise these rights by contacting us below, and you have the right to lodge a complaint with your local data protection authority.

10. Children's Privacy

Our website and services are intended for businesses and business owners. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time, for example as our services or the tools we use change. We'll update the "Last updated" date above whenever we do.

12. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal information, please contact us:

• Email: belen.matias@oceansbydrops.com
• Address: New Plymouth, Taranaki, New Zealand