SYGMATIVE LIMITED

NZBN: 9429 0534 28356
Level 6 - AON Building

1 Willis Street

Wellington 6011 - New Zealand

​

Last updated: July 2026

​​

This Privacy Policy applies to personal information collected and processed in connection with Sygmative Ltd.’s consulting services, website visitors, and related business communications.

It does not govern separate business activities that may operate under Sygmative Ltd. which may have separate privacy notices or disclosures where required.

​

1. Introduction

This Privacy Policy explains how Sygmative Ltd. ("we", "us", or "our") collects, uses, stores, and protects personal information in accordance with the New Zealand Privacy Act 2020 and applicable privacy laws in jurisdictions where we operate or provide services.

​

​Because we provide services to clients globally, including individuals and businesses located in the European Union (EU), European Economic Area (EEA), and the United Kingdom (UK), certain obligations under the General Data Protection Regulation (GDPR) and UK General Data Protection Regulation (UK GDPR) may apply where we process personal information from those regions.

 

By using this website or engaging our consulting services, you acknowledge that you have read and understood this Privacy Policy.

​

2. Personal Information We Collect

You are not required to provide personal information to us. However, if you choose not to, certain parts of the website or aspects of our consulting services may not be available.

We may collect personal information including, but not limited to:

• Name, business name, and contact details

• Billing and payment information

• Information provided during inquiries or engagements

• Website usage data (such as IP address, browser type, and device information)

We collect personal information only where it is necessary for legitimate business purposes.

​

3. How We Collect Personal Information

Personal information is collected when you:

• Contact us via this website or email

• Engage our consulting services

• Submit information through forms or payment platforms

• Communicate with us during an engagement

We may also collect technical information when you visit our website, including how users arrive at, navigate, and interact with the site. This may include IP address, browser type, device identifiers, and usage patterns.

Where possible, we collect personal information directly from you.

​

4. Purpose of Collection and Processing of Personal Information

We collect and use personal information for the following purposes:

• Providing and managing consulting services

• Communicating with clients and responding to inquiries

• Issuing invoices, processing payments, and maintaining business records

• Conducting statistical analysis, service improvement, and internal research and development

• Marketing our services where permitted by applicable laws

• Meeting legal, regulatory, accounting, and tax obligations

We do not sell personal information.

​

Information Processed on Behalf of Clients

During the provision of consulting services, we may process personal information on behalf of clients. This may include information contained within business systems, operational platforms, workflow documentation, analytics environments, or other materials provided to us during a consulting engagement.

​

Where we process personal information on behalf of a client:

• The client determines the purposes and means of processing the personal information.

• The client remains responsible for ensuring compliance with applicable privacy laws relating to that information.

• We process such information only in accordance with the client's instructions, applicable contractual obligations, and legal requirements.

• We do not use client-provided personal information for our own independent purposes unless necessary to provide the contracted services, comply with legal obligations, or otherwise authorized by the client.

Our confidentiality obligations under applicable engagement agreements operate in addition to this Privacy Policy.

​

We do not sell, trade, disclose, or use client-provided personal information for unrelated commercial purposes or artificial intelligence training purposes unless expressly authorized by the client or required by law.

​​​​

5. Storage and Security

We take reasonable and appropriate technical and organizational measures to protect personal information from loss, misuse, unauthorized access, alteration, or disclosure.

 

These measures include access controls, secure cloud-based infrastructure, contractual confidentiality obligations, and limiting access to authorized personnel who require the information for legitimate business purposes.

 

Personal information is stored securely using reputable service providers. These providers may be located in New Zealand or overseas.

 

Where information is stored or processed outside New Zealand, the EU/EEA, or the UK, we take reasonable steps to ensure that overseas recipients protect the information in a manner consistent with the Privacy Act 2020 and, where applicable, GDPR or UK GDPR requirements. This may include contractual safeguards or equivalent protections.

 

6. Lawful Basis for Processing (GDPR/UK GDPR)

Where GDPR or UK GDPR applies, Sygmative Ltd. acts as a data controller for personal information collected and used for its own business purposes, such as managing client relationships, providing services, invoicing, communications, security, and business administration.

​

For personal information processed on behalf of clients during consulting engagements, Sygmative Ltd. may act as a data processor and processes such information only according to the client's instructions and applicable contractual arrangements.

​

For individuals located in the EU/EEA or UK, our lawful bases for processing personal information may include:

• Contract – where processing is necessary to provide contracted consulting services.

• Legitimate interests – for business operations, security, service improvement, and administration.

• Consent – where required for optional communications, analytics cookies, or other activities requiring consent.

• Legal obligation – where processing is required to comply with applicable laws, tax obligations, or regulatory requirements.

​

7. Disclosure of Information

We generally do not disclose personal information to third parties for their own purposes. However, we may disclose information:

• To service providers who support our operations (e.g., hosting, accounting, payment processing)

• In connection with a proposed purchase, merger, or acquisition of our business or assets

• Where required by law, court order, or a legitimate request from a regulatory or law enforcement authority

These parties may only use the information for the purposes for which it was provided.

​​

8. Overseas Disclosure

We may use cloud-based systems or service providers that store personal information outside New Zealand.

​

Where personal information is transferred outside New Zealand, the EU/EEA, or the UK, we take reasonable steps to ensure that overseas recipients protect the information in a manner consistent with the Privacy Act 2020 and, where applicable, GDPR or UK GDPR.

​

​9. Access and Correction Rights

You have the right to request access to, or correction of, your personal information.

 

Before responding to a request for access or correction, we may require reasonable evidence to confirm your identity and ensure that personal information is disclosed only to the appropriate individual.

 

If you are located in the EU/EEA or UK, you also have the following rights:

• Right to erasure

• Right to restrict processing

• Right to object

• Right to data portability

• Right to withdraw consent

• Right to lodge a complaint with your local data protection authority

 

If you are not satisfied with our response to your privacy concern, you may lodge a complaint with the Office of the Privacy Commissioner (New Zealand) at www.privacy.org.nz or with your local data protection authority in the EU/EEA or the UK.

 

Requests can be made by contacting us at: connect@sygmative.com

​

10. Retention of Information

We retain personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, to meet contractual obligations, or to comply with legal, tax, or regulatory requirements.

​

Retention periods may vary depending on the type of information, including:

• Client engagement records and related documentation

• Financial and billing records (retained in accordance with applicable tax laws)

• Marketing and communication records (retained until you opt out or request deletion)

• Technical and website usage information (retained for operational and security purposes)

 

When personal information is no longer required, we take reasonable steps to securely delete or anonymize it.

​

11. Data Breach Notification

In the unlikely event of a data breach that poses a risk of serious harm, we will:

• Take immediate steps to contain and assess the breach

• Notify affected individuals as soon as practicable

• Notify the Office of the Privacy Commissioner where required under the Privacy Act 2020

• Implement remedial actions to prevent recurrence

​

12. Cookies and Analytics

​​

12.1 Use of Cookies

We use cookies and similar technologies to ensure the security, functionality, and performance of this website. Cookies help us understand how visitors use the site and support essential website operations.

​​

12.2 Types of Cookies We Use

• Essential cookies – Required for core functionality, security, and navigation

• Analytics cookies – Used to understand website usage and improve performance (activated only with consent where required)

• Functional cookies – Support optional features such as remembering preferences

• Third-party cookies – Certain tools or integrations may set their own cookies and operate under their own privacy policies

​​

12.3 Legal Basis

For visitors in the EU/EEA and UK:

• Essential cookies → legitimate interests

• Analytics cookies → explicit consent

For visitors in New Zealand, cookies are used in accordance with the Privacy Act 2020.

For all other regions, cookies are processed in line with applicable local privacy laws.

​​

12.4 Your Choices

You may accept, decline, or manage non-essential cookies through the cookie banner (where available). You can also disable cookies through your browser settings. Disabling certain cookies may affect website functionality.

​​

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The most current version will be published on this website and will apply to future interactions.

​​

14. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your privacy rights, please contact: connect@sygmative.com

​

This Privacy Policy is governed by the laws of New Zealand.