Privacy

This statement explains what personal information Bluehex Limited collects through this website, why we collect it, and what you can ask us to do about it. We handle personal information in accordance with the New Zealand Privacy Act 2020.

Who we are

Bluehex Limited is a New Zealand technology and security firm working with clients nationwide. For anything in this statement, contacthello@bluehex.co.nz or call0800 374 775.

What this statement covers

This statement covers this website. Where we deliver services under a written agreement, that agreement and any specific privacy terms in it govern how we handle information in your environment, and those terms prevail over this page.

What we collect

Information you give us

If you use the enquiry form, we collect your name, business name, email address, phone number if you provide one, the description of what you need, and any service areas you select. We collect this because you are asking us to respond to you.

Information collected automatically

Our host, Cloudflare, records standard server request information such as IP address, request time and user agent as part of serving and protecting the site. Where site analytics are enabled, we use Cloudflare Web Analytics, which is aggregate and cookieless and does not fingerprint visitors or track them across other sites.

What we do not collect

This site carries no advertising network, no tracking pixel, no social media script and no third party marketing tag. Web fonts are served from our own domain rather than a font host, so loading a page does not tell anyone else that you visited.

Cookies

This website sets no cookies of its own, and has no cookie banner because it does not need one. Our host may set strictly necessary cookies to keep the site secure and available, and the spam check on the enquiry form may set one for the duration of that check. Neither is used to profile you or to advertise to you.

How we use your information

• To respond to your enquiry and have a useful first conversation
• To provide, support and improve services you engage us for
• To keep records we are required to keep as a New Zealand business

We do not sell personal information. We do not add enquirers to a marketing list without asking first.

Who we share it with

We share personal information only where it is necessary to run the site or deliver what you have asked for:

• Cloudflare, which hosts this site, processes enquiry form submissions, and provides the spam check and analytics
• Our email delivery provider, which transmits enquiry form submissions to our mailbox
• Our business email and productivity platform, where the resulting correspondence is stored
• Professional advisers or regulators, where we are required by law

Some of these providers operate infrastructure outside New Zealand. Where information is disclosed overseas we take reasonable steps to ensure comparable safeguards apply, as required by the Privacy Act 2020.

How long we keep it

We keep enquiry correspondence for as long as needed to respond and to maintain a record of the relationship. Where it forms part of our business records we keep it for seven years, consistent with New Zealand record keeping obligations, and then dispose of it securely.

How we protect it

This site is served only over HTTPS with strict transport security and a content security policy. Access to enquiry correspondence is restricted to staff who need it, under multi factor authentication. Our own environment is run to the same standards our security practice certifies against, including SMB1001, CIS Controls v8.1, Essential Eight, NZISM and ISO 27001.

Your rights

Under the Privacy Act 2020 you can ask us for a copy of the personal information we hold about you, and ask us to correct it if it is wrong. Emailhello@bluehex.co.nz and we will respond within the statutory timeframe, which is 20 working days. There is no charge for a routine request.

If you are not satisfied with how we have handled your information or your request, you can complain to the Office of the Privacy Commissioner atprivacy.org.nz.

Changes to this statement

If we change how we handle personal information we will update this page and the date at the top of it. Material changes will be summarised here rather than made quietly.