Privacy policy

Who we are

Maverick Digital is a digital studio. We design and build websites, digital products, and marketing work for clients. For this website and for enquiries sent through it, Maverick Digital is the agency that decides why and how personal information is used.

Privacy questions, access requests, and complaints go to kclark@maverick.digital. That is the only contact we publish for this policy.

What this policy covers

This policy covers personal information we collect:

• when you browse this website
• when you send a form or email to the studio
• when you become a client, supplier, or collaborator
• when we deliver a project that includes your information

It does not cover other websites we link to, or tools a client asks us to use on their own systems. Those have their own policies.

What we collect

We only collect what we need to reply, do the work, keep the site secure, and meet the law.

From forms and email. Name, email address, and the message you write. A project brief may also include company name, phone number, role, budget range, timeline, current site or systems, and files you attach. You choose what to send. Do not include payment card numbers, government identifiers, or health information unless we have asked for them in writing for a specific job.

From the website. Standard technical data that hosting and security services record: IP address, browser and device type, referring page, pages viewed, date and time, and approximate location derived from IP. We do not run advertising pixels or analytics products on this site today.

From clients and suppliers. Contact details, billing details, contracts, brief materials, brand assets, and login or access details you give us to do the work.

We do not collect payment card data on this website. Invoices are handled through our accounting tools, not through the public forms.

How we collect it

We collect personal information:

• directly from you, when you type it into a form or email us
• automatically, through the site, hosting, and security logs
• from a client or colleague, when they include your details in a brief or project

If someone else gives us your details, we use them only to do the job they asked for, or to contact you about that job.

Why we use it

We use personal information to:

• reply to enquiries and decide if we can help
• prepare proposals, contracts, and project work
• deliver, host, and support work we have agreed to do
• send invoices, pay suppliers, and keep accounts
• keep the website secure and working
• meet tax, legal, and professional obligations
• defend a legal claim if one arises

We do not sell personal information. We do not rent or trade it. We do not use enquiry or project content to train public AI models. If a project uses AI tools, that is agreed in the brief, and your material is not treated as training data for a public model.

We do not send marketing lists from the public contact form. If we ever start a newsletter or similar list, we will ask first and you can leave at any time.

Lawful bases

Under New Zealand law we collect and use information for a lawful purpose connected with our work, and only when it is necessary for that purpose.

If you are in the UK or EEA, we also rely on one of these bases:

• steps toward a contract, or performance of a contract, when you ask us to quote or we take on a project
• legitimate interests, to run and secure the website, reply to messages, and keep ordinary business records, where those interests are not overridden by your rights
• legal obligation, for tax, accounting, and similar duties
• consent, where we ask for it. You can withdraw consent by writing to kclark@maverick.digital

Cookies and similar storage

This site does not use advertising cookies or third-party analytics cookies. The notice you see is stored in your browser as local storage so we do not keep asking. That value does not identify you across other sites.

Our host, Cloudflare, may set strictly necessary cookies or similar technical data for security, load balancing, and to keep the site available. Those are required for the site to work.

You can clear cookies and local storage in your browser at any time. Blocking non-essential storage will not stop you reading the site or sending a message.

Who we share it with

We share personal information only with people and services that need it to do a defined job for us:

• hosting, content delivery, and security (this site runs on Cloudflare)
• email delivery, so form messages reach the studio inbox
• accounting and banking tools, for invoices and payment
• contractors or specialists we bring onto a project, under a duty to keep the information secure
• professional advisers, such as lawyers or accountants, when needed
• a regulator, court, or law-enforcement body if the law requires it

We do not give personal information to advertisers or data brokers. If a project needs a third-party product (for example a CMS, shop, or analytics tool on a client site), that product is used under the client's instructions and their own notices.

Overseas storage

Some of the services above store or process information outside New Zealand, including in Australia, the United States, the UK, and the EEA. When that happens we take reasonable steps so the information is still protected, including using established providers and, where appropriate, their standard contractual terms.

How long we keep it

We keep personal information only as long as we need it for the purpose we collected it, or as the law requires.

• Website enquiries: while we are talking with you, then for up to 24 months after the last contact unless a project starts
• Project files and correspondence: for the life of the contract, then as needed for warranty, handover, and ordinary records
• Invoices and tax records: at least seven years, as New Zealand tax law requires
• Security and server logs: for a short period set by our host, unless we need them to investigate an incident
• Cookie and local-storage preferences: in your browser until you clear them

When we no longer need information we delete it, anonymise it, or archive it in a form that is no longer used day to day.

Security

We take reasonable technical and organisational steps to protect personal information against loss, misuse, and unauthorised access. That includes HTTPS on this site, access limited to people who need it, and using established hosting and email providers.

No website or inbox is perfectly secure. If we become aware of a breach that is likely to cause serious harm, we will notify the people affected and the Office of the Privacy Commissioner as the Privacy Act requires.

Children

This site is for businesses and adults. We do not knowingly collect personal information from anyone under 16. If you believe a child has sent us information, write to kclark@maverick.digital and we will delete it.

Your rights

You can ask us for a copy of the personal information we hold about you, ask us to correct it if it is wrong, and ask us to delete it where we no longer need it or the law does not require us to keep it. You can also ask us to limit how we use it, or object to a use that is not required by law or contract.

If you are in the UK or EEA you may also have the right to data portability for information you gave us, and the right to withdraw consent where consent is the basis we rely on.

Write to kclark@maverick.digital. We may need to confirm it is you before we release or change a record. We will respond as soon as we reasonably can, and within the time the law allows.

If you are not satisfied, you can complain to the Office of the Privacy Commissioner in New Zealand at privacy.org.nz. If you are overseas, you may also complain to your local supervisory authority.

Automated decisions

We do not use automated decision-making or profiling that produces legal or similarly significant effects about you.

Changes

We may update this policy when our site, tools, or the law change. The new version will be posted here with a new "Last updated" date. If a change is material we will make that obvious on the page.

Contact

Maverick Digital
kclark@maverick.digital