Privacy Policy

CNEX Limited ("CNEX", "we", "our", or "us") is a software engineering company registered in New Zealand. We are committed to protecting the privacy and security of your personal information in accordance with the New Zealand Privacy Act 2020 and, where applicable, the General Data Protection Regulation (GDPR) and Australian Privacy Principles (APPs).

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website cnex.co.nz, use our services, or interact with our AI assistant Connekz.

2.1 Information You Provide

• Contact information: name, email address, phone number, and company name when you contact us or submit a form.
• Communication data: the content of messages you send through our contact forms, email, or Connekz AI assistant.
• Business information: project requirements, budgets, and timelines shared during consultations.
• Newsletter subscriptions: your email address when you subscribe to our newsletter.

2.2 Information Collected Automatically

• Device and browser data: IP address, browser type, operating system, device type, and screen resolution.
• Usage data: pages visited, time spent on pages, click patterns, and referral URLs.
• Analytics data: aggregated information collected through Google Analytics to understand website usage patterns.
• Cookies and similar technologies: as described in Section 5 below.

2.3 Information from Connekz AI

When you interact with Connekz, our AI assistant, we collect the content of your conversation to provide you with relevant responses and improve our services. Conversations may include booking requests, enquiries about our services, and general questions. Connekz does not collect sensitive personal information unless you voluntarily provide it.

We use the information we collect for the following purposes:

• Service delivery: to respond to your enquiries, provide consultations, and deliver our software engineering services.
• Communication: to send you project updates, respond to support requests, and share relevant information you have requested.
• Website improvement: to analyse usage patterns, optimise user experience, and improve our website performance.
• Marketing: to send newsletters and updates about our services, with your consent. You may unsubscribe at any time.
• Legal compliance: to comply with applicable laws, regulations, and legal processes.
• Security: to detect, prevent, and address technical issues, fraud, or security breaches.

Where applicable (e.g., for individuals in the EU/EEA), we process your personal data on the following legal bases:

• Consent: where you have given clear consent for us to process your personal data for a specific purpose.
• Contractual necessity: where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract.
• Legitimate interest: where processing is necessary for our legitimate business interests, such as improving our services, provided your rights do not override those interests.
• Legal obligation: where processing is necessary to comply with a legal obligation.

We use cookies and similar technologies to enhance your experience on our website:

• Essential cookies: required for basic website functionality, such as remembering your colour mode preference. These cannot be disabled.
• Analytics cookies: used by Google Analytics to collect anonymous usage data. These help us understand how visitors interact with our website.
• Performance cookies: help us monitor website performance and loading times to ensure optimal user experience.

You can manage cookie preferences through your browser settings. Disabling cookies may affect certain website features.

We use the following third-party services that may collect or process your data:

• Google Analytics: website analytics and usage tracking. Data is anonymised and aggregated. Google Privacy Policy.
• Google Fonts: web font delivery. Google may collect usage data. Google Fonts Privacy.
• Connekz: our AI-powered conversational assistant. Conversations are processed to deliver responses and may be retained for service improvement.

We do not sell, trade, or otherwise transfer your personal information to third parties for marketing purposes. We may share information with trusted service providers who assist us in operating our website and conducting our business, subject to confidentiality agreements.

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Specifically:

• Contact enquiries: retained for 2 years from last interaction, then securely deleted.
• Client project data: retained for 7 years after project completion for legal and contractual purposes.
• Analytics data: anonymised and aggregated data may be retained indefinitely.
• Newsletter subscriptions: retained until you unsubscribe.
• Connekz conversations: retained for up to 12 months for service improvement, then anonymised or deleted.

We implement appropriate technical and organisational measures to protect your personal information, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Access controls and authentication mechanisms
• Regular security assessments and penetration testing
• Secure cloud infrastructure hosted on enterprise-grade platforms (AWS)
• Employee training on data protection and security best practices

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

Under the New Zealand Privacy Act 2020 and applicable international data protection laws, you have the right to:

• Access: request a copy of the personal information we hold about you.
• Correction: request correction of inaccurate or incomplete personal information.
• Deletion: request deletion of your personal information, subject to legal retention requirements.
• Restriction: request that we limit the processing of your personal information.
• Data portability: request your personal information in a structured, commonly used, machine-readable format.
• Objection: object to the processing of your personal information for direct marketing purposes.
• Withdraw consent: withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us at via Connkez assistant or call us at +64 9 88 73 743. We will respond to your request within 20 working days, as required by the Privacy Act 2020.

Your information may be transferred to and processed in countries outside New Zealand, including Australia, the United States, and the European Union, where our cloud infrastructure and third-party service providers are located. We ensure that appropriate safeguards are in place, including standard contractual clauses and data processing agreements, to protect your information in accordance with applicable data protection laws.

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us and we will take steps to delete such information.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will post any changes on this page and update the "Last updated" date. We encourage you to review this policy periodically. Your continued use of our website and services after any changes constitutes acceptance of the updated policy.

If you have any questions about this Privacy Policy or our data practices, please contact us:

If you are not satisfied with our response to your privacy concern, you may lodge a complaint with the Office of the Privacy Commissioner in New Zealand.