Privacy Policy | Waitotara Consulting

Privacy Policy

Rutherford Bradley Tapui Ltd trading as Waitotara Consulting
Last updated: 27 August 2025

We respect your privacy. This Privacy Policy explains how we collect, use, store and share personal information when you visit waitotaraconsulting.com (the “Site”), contact us, or engage our services.

1. Who we are

Rutherford Bradley Tapui Ltd T/A Waitotara Consulting (we, us, our) operates the Site and provides consulting services. Our contact details are at the end of this policy.

2. Personal information we collect

Information you provide

  • Contact details (name, email, phone, organisation) when you enquire or subscribe.
  • Business and project information you share to request services or proposals.
  • Communications and content you send us (emails, uploaded files, form responses).

Automatic information

  • Technical and usage data (IP address, browser, device, pages viewed, referrer).
  • Cookies and similar technologies (see section 6).

Third-party sources

We may receive information from third parties (e.g. referral partners, analytics providers, social platforms) when you interact with our services or content.

3. How we use personal information

We use personal information to:

  • respond to enquiries and communicate with you;
  • consider and provide consulting services, proposals and contracts;
  • manage client relationships, billing and records;
  • improve the Site, services and user experience;
  • send updates, newsletters or insights where you have consented or it is otherwise permitted;
  • comply with legal obligations (for example tax or record-keeping).

4. Legal basis for processing (EU/UK visitors)

If you are located in the EU/UK, our legal bases for processing include:

  • performance of a contract (to deliver services you request);
  • consent (for marketing communications and non-essential cookies);
  • legitimate interests (to operate and improve our business and services, balanced against your rights);
  • legal compliance (where required).

5. Cookies and tracking technologies

We use cookies and similar technologies to operate the Site, provide analytics, and improve user experience. Categories include:

  • essential cookies (required for the Site to function);
  • analytics cookies (to measure site usage, e.g. Google Analytics);
  • embedded media cookies (e.g., YouTube, social platforms, when content is embedded).

You can control cookie preferences through your browser and any cookie banner we display. For more details on our use of cookies, see the cookie section on the Site.

6. Sharing personal information

We may share personal information with:

  • service providers who perform services on our behalf (hosting, analytics, email, CRM);
  • professional advisers (accountants, lawyers) under confidentiality;
  • authorities or regulators where required by law;
  • successors or purchasers in connection with a sale or transfer of the business (with protections in place).

7. International transfers

Some service providers we use may store or process information outside New Zealand. When personal information is transferred internationally we use appropriate safeguards (such as contractual clauses and reputable providers) to protect your data.

8. Data retention

We retain personal information only as long as necessary for the purposes set out in this policy, including to meet legal and tax obligations:

  • enquiries and prospect records: typically up to 24 months;
  • client and financial records: typically retained for at least 7 years for tax and accounting;
  • analytics data: retained in accordance with provider settings (often 14–26 months).

9. Your rights and choices

Under the New Zealand Privacy Act 2020, you have rights to:

  • access personal information we hold about you;
  • request correction of inaccurate information;
  • request deletion in limited circumstances;
  • complain to the Office of the Privacy Commissioner in New Zealand if unsatisfied with our response.

If you are in the EU/UK you may also have the right to restrict processing, object to processing, request portability, and withdraw consent where processing is based on consent.

To exercise any rights, contact us using the details below. We will respond within a reasonable timeframe.

10. Security

We take reasonable technical and organisational measures to protect personal information from misuse, loss, unauthorised access, modification or disclosure. No internet transmission or storage system is completely secure; we cannot guarantee absolute security.

11. Children

Our Site and services are not intended for children under 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us and we will take appropriate steps to delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes we will post an updated policy on the Site with a new "Last updated" date. Continued use of the Site after changes indicates acceptance of the updated policy.

13. Contact & privacy requests

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact:

Privacy contact
Waitotara Consulting (Rutherford Bradley Tapui Ltd)
Phone: +64 21 044 8024
Email: tui.rutherford@rutherfordbradley.com
Alternate: amanda.bradley@rutherfordbradley.com

© 2025 Rutherford Bradley Tapui Ltd T/A Waitotara Consulting. All rights reserved.