Privacy Policy | Overview
Privacy Policy | Overview

Privacy Policy | Overview

Welcome to YJ Consulting.

We value your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, 🌐consultyj.com, in accordance with the Privacy Act 2020 (New Zealand) and its Information Privacy Principles (IPPs).
Please read this policy carefully to understand our views and practices regarding your personal data and how we will treat it.
Agency details: YJ Consulting, 25/66 Mt Eden Rd, Auckland, New Zealand. Contact: support@consultyj.com

1. Information We Collect

1.1 Personal Information (IPP 1–4)

We collect personal information only where it is necessary for a lawful purpose connected with our functions and activities. We collect the following categories of personal information:
  • Name
  • Email address
  • Phone number
  • Shipping address
  • Billing address
  • Payment information (e.g., credit card details)
Source of collection: We collect personal information directly from you unless it is not reasonably practicable to do so, in which case we will inform you of the source (IPP 2).
Purpose of collection: We collect this information to provide our services, process transactions, communicate with you, and comply with legal obligations.

1.2 Non-Personal Information

We may also collect non-personal information about you, including:
  • Browser type
  • Device type
  • IP address
  • Browsing behaviour (e.g., pages viewed, links clicked)

2. How We Use Your Information

2.1 To Process Orders

  • Managing and processing orders
  • Shipping products
  • Processing payments

2.2 To Improve Our Services

  • Enhancing user experience on our website
  • Analyzing site usage and trends
  • Improving customer service and support

2.3 To Communicate

  • Sending updates and information related to your purchases
  • Sending promotional materials and newsletters (with your consent)
  • Responding to inquiries and customer service requests

3. Data Protection (IPP 5)

3.1 Security Measures

We use a variety of security measures to protect your personal information against loss, unauthorised access, use, modification, or disclosure. These measures include SSL encryption, secure servers, access controls, and restricted access to personal data limited to authorised personnel.

3.2 Data Retention (IPP 9)

We retain personal information only as long as necessary to fulfil the purposes outlined in this policy. Specifically:
  • Transaction records: 7 years (to comply with tax and financial reporting obligations)
  • Communication records: 2 years from last interaction
  • Website analytics data: 26 months
We will securely dispose of personal information that is no longer required, in accordance with our data retention schedule.

3.3 Cross-Border Data Transfers (IPP 12)

Some of our service providers (such as cloud storage and analytics providers) may store data outside New Zealand. Before disclosing your personal information to an overseas recipient, we take reasonable steps to ensure that the recipient is subject to privacy laws that provide comparable safeguards to the Privacy Act 2020, or we obtain your express authorisation for the transfer.

4. Sharing Your Information (IPP 11)

4.1 Third-Party Services

We may share your information with third-party service providers who assist us in operating our website, conducting our business, or servicing you. These third parties are contractually obligated to maintain the confidentiality and security of your information and may only use it for the specific purposes for which it was disclosed.

4.2 Legal Requirements

We may disclose your personal information where:
  • Required or authorised by law (e.g., court orders, statutory obligations)
  • Necessary to prevent or lessen a serious threat to public health, safety, or the life of any individual
  • The information is publicly available
  • The disclosure is necessary for the conduct of legal proceedings
  • Authorised under a Code of Practice issued under the Privacy Act 2020
 

5. Your Rights Under the Privacy Act 2020

5.1 Access to Your Information (IPP 6)

You have the right to request access to the personal information we hold about you. We will respond to your request within 20 working days and provide the information in a manner that is readily understood.

5.2 Correction of Your Information (IPP 7)

You have the right to request correction of any personal information we hold about you that is inaccurate, incomplete, or misleading. If we decline to correct your information, you may request that we attach a statement of correction to the information. We will respond to correction requests within 20 working days.

5.3 Opt-Out

You can opt out of receiving promotional emails from us at any time by following the unsubscribe link in any email you receive from us or by contacting us directly.

5.4 Data Deletion

You can request the deletion of your personal data by contacting us. We will take reasonable steps to delete your information from our records, unless we are required to retain it by law or for legitimate business purposes. We will respond to deletion requests within 20 working days.

5.5 Complaints

If you believe we have breached your privacy or handled your personal information inappropriately, you may lodge a complaint with us at support@consultyj.com. We will investigate and respond within 20 working days. If you are not satisfied with our response, you have the right to complain to the Office of the Privacy Commissioner at www.privacy.org.nz or by calling 0800 803 909.
 

6. Cookies and Tracking Technologies

6.1 Use of Cookies

We use cookies and similar tracking technologies to enhance your browsing experience, analyse site traffic, and understand where our visitors are coming from. Cookies are small text files stored on your device. You can control the use of cookies at the individual browser level or opt out of non-essential cookies.

6.2 Tracking Technologies

We use Google Analytics to collect anonymised data about your browsing activity on our website only. This data includes pages visited, time spent on site, and referral sources. We do not track or store any of your browsing activity outside our website. Google Analytics data is retained for 26 months and is used solely for website improvement purposes.

6.3 Your Cookie Choices

You may disable cookies through your browser settings. Note that disabling cookies may affect the functionality of some parts of our website.
 

7. Privacy Breaches (Part 6, Privacy Act 2020)

7.1 Notifiable Privacy Breaches

If we become aware of a privacy breach that is likely to cause serious harm to affected individuals, we will:
  • Notify the Office of the Privacy Commissioner as soon as practicable
  • Notify affected individuals as soon as practicable, including information about the breach, what information was involved, and steps they can take to protect themselves
  • Take immediate steps to contain the breach and prevent further harm

7.2 Breach Response

We maintain a Privacy Incident Response Plan and Privacy Incident Register to ensure prompt identification, containment, and resolution of any privacy incidents.
 

8. Unique Identifiers (IPP 13)

We do not assign unique identifiers to individuals unless it is necessary for our functions. Where we do assign identifiers (such as account numbers), we will not require you to disclose them unless required by law or necessary to verify your identity.
 

9. Changes to This Policy

9.1 Updates

We may update this privacy policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any significant changes by posting the new policy on our website and updating the effective date at the bottom of this policy. Material changes will be communicated via email where practicable.
 

10. Contact Us

10.1 Request Your Information

To request access to, correction of, or deletion of your personal information, please contact us in writing using any of the methods below. We will respond within 20 working days.
You may also contact the Office of the Privacy Commissioner directly at www.privacy.org.nz for general privacy enquiries or to make a complaint.
See also our full **Privacy Policy**, **Terms & Conditions**,

10.2 Other Enquiries

If you have any questions or concerns about this privacy policy, please get in touch with us at:
page icon
Privacy Contact: YJ Consulting
Email: support@consultyj.com
Address: 25/66 Mt Eden Rd, Auckland, New Zealand
Effective Date: 19 October 2025
Update Log:
Created v1.0 Oct 19, 2025
Reviewed by at Nov 10, 2025 08:59 AM GMT+13:00
Modified v1.1 Nov 10, 2025
v2.0 Jan 10, 2026