Privacy Policy

This privacy policy sets out how Ambitious Aotearoa Limited collects, processes and uses your Personal Information through your use of our Services.

Last updated June 14, 2024

Definitions

Anonymized Data: Anonymous information collected by us through your use of this Website or our Services for statistical and/or demographic purposes. Anonymized Data may be derived from Personal Information.
Data Processor: Each of the following: Webflow.
DPO: Data Protection Officer, and is the person specifically appointed by us to deal with your enquiries with respect to this privacy policy and your Personal Information.
Personal Information: Any identifying information about you. This includes, but is not limited to: address; email address; name; username/passwords; debit and credit card number; cookies and usage data; and phone number.
Services: All services provided by Ambitious Aotearoa Limited to you, including (but not limited to) this Website and the following: Delivery of product and service; Marketing and communications; and User management.
Website: https://www.ambitious.co.nz/

Personal Information Collection

We only collect and use Personal Information to the extent necessary to provide you with the Services. We collect Personal Information for the Website to provide you with a better online experience.

Delivery of product and service — To deliver the Services, fulfil and manage customer orders and provide customer support.
Marketing and communications — To send marketing and promotional materials and other information that may be of interest to you.
User management — To allow users to create and manage their accounts so they can use the Services.

Personal Information Retention

We keep Personal Information for the shortest time necessary to provide you with Services and to meet all our legal and compliance obligations. To determine this retention period, we take into account (i) the nature of the Personal Information gathered; and (ii) the nature of our legal and compliance obligations. All Personal Information no longer required by us is destroyed and/or erased.

Anonymized Data

We may use, collect and share Anonymized Data for any purpose at our discretion. Anonymized Data cannot be used to reveal your identity. We may retain all Anonymized Data indefinitely. Anonymized Data includes:

Device data: Information about the device used to interact with our Services.
Location data: Geolocation data (based on your IP address).
Log and usage data: Usage and performance information with respect to our Services.

Personal Data from Third Parties

We may, from time to time, obtain Personal Information from third parties to enable us to better tailor our Services to you. When we obtain Third Party Personal Information, we will notify you within one month.

If we use or share Third Party Personal Information, we will notify you immediately.

Your Rights

With respect to Personal Information we hold, you have the following rights:

Access: You may request from us access to your data that we hold on you.
Rectification: If the data we hold is inaccurate or incomplete, you may request that we correct or complete it.
Erasure: Subject to certain conditions, you may request that we erase all of the data we hold on you.
Restrictions: Subject to certain conditions, you may request that we restrict the processing of data we hold on you.
Portability: Subject to certain conditions, you may request that we transfer all the data we hold on you to a third party (including yourself).
Objections: Subject to certain conditions, you may object to us processing the data we hold on you.

Data Processors

We engage Data Processors to assist us in providing you with Services. Data Processors are contractually obligated to us, and must:

Comply with, and act only on, our instructions with respect to the data that they process on our behalf.
Notify us if they believe we are acting in breach of the GDPR (where applicable).
First obtain our consent prior to sub-contracting data processing services.
Comply with their obligations under the GDPR (where applicable).

Social Media

You may choose to engage with our Services through a variety of social media sites and platforms, for example Facebook, Instagram and Twitter. When you interact with our Services through these platforms, you may allow us to receive Personal Information and Anonymized Data on how you are interacting with our Services. This will depend on your privacy settings on each platform.

For further information on how you can customise your privacy settings on social media sites, please refer to the privacy policy of each particular social media site.

Minors

We do not knowingly collect information on children under the age of 16 ("Child"). If you become aware that a Child has provided us with Personal Information, please contact us. If we become aware that we have collected Personal Information from a Child without their parent's verifiable authorisation, we will take steps to remove that information from our servers.

Third Party Links

Our website contains links to other third-party websites not owned or managed by Ambitious Aotearoa Limited. This privacy policy applies to this website only. If you click a link to a third-party website, the privacy policy of that website will apply. We highly recommend that you read the privacy policies of other websites as they may be different from ours.

Merger, Acquisition or Asset Sale

If we or our subsidiaries are involved in a merger, acquisition, or asset sale, your Personal Information may be transferred.

Updates

We are constantly reviewing our privacy policy and procedures to ensure that they meet best practices. This policy was last updated on June 14, 2024.

Contact Us

If you have any questions or suggestions about our privacy policy or want to know more information about Personal Information we hold, please contact us at accounts@ambitious.co.nz or write to us at Level 2, 9 Tory Street, Wellington 6011, New Zealand.

Complaints

If you believe that we have breached our obligations to you under this privacy policy or relevant privacy laws, please contact us at accounts@ambitious.co.nz or write to us at Level 2, 9 Tory Street, Wellington 6011, New Zealand.

If you are not satisfied with our response, you have the right to lodge a complaint at any time to your relevant authority.

Definitions

Anonymized Data: Anonymous information collected by us through your use of this Website or our Services for statistical and/or demographic purposes.
Data Processor: Each of the following: Webflow.
DPO: Data Protection Officer, appointed by us to deal with your enquiries with respect to this privacy policy and your Personal Information.
Personal Information: Any identifying information about you including address; email address; name; username/passwords; debit and credit card number; cookies and usage data; and phone number.
Services: All services provided by Ambitious Aotearoa Limited including Delivery of product and service; Marketing and communications; and User management.
Website: https://www.ambitious.co.nz/

Personal Information Collection

We only collect and use Personal Information to the extent necessary to provide you with the Services.

Delivery of product and service — To deliver the Services, fulfil and manage customer orders and provide customer support.
Marketing and communications — To send marketing and promotional materials.
User management — To allow users to create and manage their accounts.

Personal Information Retention

We keep Personal Information for the shortest time necessary to provide you with Services and meet all legal and compliance obligations. All Personal Information no longer required by us is destroyed and/or erased.

Anonymized Data

We may use, collect and share Anonymized Data for any purpose. Anonymized Data includes:

Device data: Information about the device used to interact with our Services.
Location data: Geolocation data (based on your IP address).
Log and usage data: Usage and performance information.

Personal Data from Third Parties

We may obtain Personal Information from third parties to better tailor our Services to you. When we obtain this, we will notify you within one month. If we use or share it, we will notify you immediately.

Your Rights

Access: Request access to your data we hold.
Rectification: Request correction or completion of inaccurate/incomplete data.
Erasure: Request erasure of all data we hold on you.
Restrictions: Request restriction of processing of your data.
Portability: Request transfer of your data to a third party.
Objections: Object to us processing your data.

Data Processors

Data Processors are contractually obligated to us and must: comply with our instructions; notify us of any GDPR breaches; obtain our consent before sub-contracting; and comply with GDPR obligations.

Social Media

When you interact with our Services through social media platforms, you may allow us to receive Personal Information depending on your privacy settings. Please refer to each platform's privacy policy for further information.

Minors

We do not knowingly collect information on children under the age of 16. If we become aware of this, we will take steps to remove that information from our servers.

Third Party Links

This privacy policy applies to this website only. Third-party websites have their own privacy policies which we recommend you read.

Merger, Acquisition or Asset Sale

If we are involved in a merger, acquisition, or asset sale, your Personal Information may be transferred.

Updates

This policy was last updated on June 14, 2024.

Contact Us

Complaints

If you believe we have breached our obligations, contact us at accounts@ambitious.co.nz. If not satisfied with our response, you have the right to lodge a complaint with your relevant authority.