Green Chilli Design (“GCD”, “we”, “us” or “our”) is a specialist digital experience consultancy working with wealth, investment and financial services organisations across New Zealand and Australia. We take the privacy of the people and organisations we work with seriously.

This policy explains what personal information we collect, how we use it, and the choices you have. We handle personal information in accordance with the New Zealand Privacy Act 2020 and, where applicable, the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).

Information we collect

We only collect information that is relevant to the purpose of our engagement with you. This may include:

• Contact and enquiry details: such as your name, company, role, email address and any information you provide when you submit our Strategy Session form or otherwise contact us.
• Initiative context: information you choose to share about the systems, objectives, challenges, project stage and approximate budget relevant to a potential project.
• Technical information: standard analytics data such as pages viewed, device and browser type, and general location, collected using Google Analytics to understand how our website is used. Our hosting provider may also record basic server logs to keep the site secure.
• Advertising data: online identifiers, pages viewed, and whether you clicked an ad or submitted our form, collected through cookies and similar technologies from Google Ads, Meta and LinkedIn.

We do not ask you to provide sensitive personal information through this website, and we ask that you do not include confidential client data in enquiry messages.

How we use your information

We use the information we collect to:

• respond to your enquiry and arrange a Strategy Session or follow-up conversation;
• prepare for and deliver consulting and design work you have engaged us for;
• improve our website and understand how it is used, including through Google Analytics;
• measure our advertising and show relevant advertising, including through Google Ads, Meta and LinkedIn; and
• meet our legal and professional obligations.

We will not use your information for unrelated purposes without your consent, and we do not sell personal information.

How your information is handled

Enquiries submitted through this website are processed using Netlify Forms. Information you submit is transmitted securely and stored by our hosting and form providers on our behalf, and we receive enquiry notifications by email and Slack. We also use Google Tag Manager to manage the tags on this website, Google Analytics to measure website use, Google Ads, the Meta Pixel and the LinkedIn Insight Tag to measure and support our advertising, and Google Fonts to display our typeface. These services mean your browser connects to the relevant provider and shares your IP address and related technical information with it. When you submit our form, details you enter, such as your email address and name, may also be hashed and sent to Google Ads to help us measure whether our advertising led to your enquiry. These providers may store or process data on servers located outside New Zealand and Australia, including in the United States. Where that is the case, we take reasonable steps to ensure your information is handled with appropriate safeguards.

Disclosure

We do not disclose your personal information to third parties except:

• to service providers who help us operate our website, analytics and communications, under appropriate confidentiality obligations;
• to advertising platforms, including Google, Meta and LinkedIn, through the cookies and similar technologies described in this policy;
• where you have asked us to, or given your consent; or
• where required or authorised by law.

Security & retention

We take reasonable steps to protect personal information from loss, misuse and unauthorised access. We retain enquiry information only for as long as necessary to respond to you and to meet our legal and business obligations, after which it is securely deleted or de-identified.

Your rights

You have the right to request access to the personal information we hold about you, and to ask us to correct it if it is inaccurate. To make a request, or if you have any concerns about how your information has been handled, please contact us using the details below. We will respond within the timeframes required under applicable privacy law.

If you make a complaint, we will review it and tell you the outcome. If you are not satisfied with our response, you can complain to the New Zealand Office of the Privacy Commissioner (privacy.org.nz) or, in Australia, the Office of the Australian Information Commissioner (oaic.gov.au).

Cookies, analytics & advertising

Our website uses Google Analytics, which sets cookies to help us understand how visitors use the site. We also use Google Ads, the Meta Pixel and the LinkedIn Insight Tag, which use cookies and similar technologies to measure whether our advertising leads to website visits or enquiries, and which may be used to show relevant advertising to you on other sites and platforms. These providers may also use this information in line with their own privacy policies. You can control cookies through your browser settings, opt out of Google Analytics using the Google Analytics Opt-out Browser Add-on, and manage advertising preferences in your Google, Meta and LinkedIn account settings. Disabling cookies will not prevent you from using the core parts of this website.

Changes to this policy

We may update this policy from time to time to reflect changes in our practices or legal requirements. The date at the top of this page indicates when it was last revised.