How Forward Matter handles your information.

1. Who is responsible

Forward Matter Consulting Limited, trading as Forward Matter Consulting, is the agency responsible for personal information covered by this notice. Our NZBN is 9429053951649. Our privacy contact is hello@forwardmatterconsulting.co.nz.

2. Information we collect

Depending on how you interact with us, we may collect your name, contact details, organisation, role, enquiry and correspondence; Health Check context, answers, profile and consent choices; order, transaction and product-access information; and technical information such as device, browser, pages visited, approximate location derived from an IP address, referral source and cookie or analytics identifiers.

Please do not submit highly sensitive, legally privileged or security-critical information through general website forms.

3. How we collect it

We usually collect information directly from you when you complete a form, assessment or purchase, contact us, subscribe or work with us. We may also receive business contact information from a colleague, referral partner, publicly available professional source or service provider. Where the Privacy Act requires notice of an indirect collection, including under information privacy principle 3A, we will provide it unless an exception applies.

4. Why we use it

We use personal information to provide and save an assessment result; respond to an enquiry; scope or deliver an engagement; process an order and provide product access; administer licences and payments; send service communications; maintain security and prevent misuse; meet legal, tax and record-keeping obligations; and understand and improve our website, diagnostic and services.

We may use aggregated or de-identified information to analyse execution patterns and improve our methods. We will not attempt to re-identify information treated as de-identified.

5. Health Check information

Your answers and profile are used to produce a directional result and, if you ask us to contact you, to understand the context of a possible conversation. The free Health Check does not make an automated decision that determines a legal right or access to an essential service. Marketing consent is optional and is not required to receive a result.

6. When we share information

We may share information with trusted providers that help us host the site, store data, manage customer relationships, process payments, maintain accounting records, deliver email or products, provide analytics, maintain technology or obtain professional advice. These providers may include our website and database host, HubSpot for customer-relationship management, Stripe for payments, Xero for accounting after activation, Resend for transactional email, Sanity for public content and Google Workspace for restricted client documents.

We minimise what each provider receives. For example, HubSpot does not receive full Health Check answers or payment credentials, Xero does not receive marketing-consent evidence or download tokens, and the public CMS does not store customer records or secrets.

We may also disclose information where you authorise it, where required or permitted by law, to protect rights or safety, or as part of a genuine sale or restructuring of the business subject to appropriate safeguards. We do not sell personal information.

7. Overseas processing

Some service providers may store or process information outside New Zealand. We take reasonable steps to use providers and arrangements that protect information in a way consistent with the Privacy Act 2020, including the requirements for overseas disclosure in information privacy principle 12 where it applies.

8. Cookies and analytics

The website may use essential cookies and similar technology to operate securely and remember necessary state. If analytics or other optional cookies are introduced, we will provide appropriate information and choices. You can also control cookies through your browser, although blocking essential storage may affect site features.

9. Marketing messages

We send marketing only where we have the required consent or another lawful basis. Each commercial electronic message will identify the sender and provide a functional way to unsubscribe. You can opt out at any time through our unsubscribe page or by contacting us. A withdrawal suppresses marketing and does not automatically resubscribe you after a later enquiry or purchase. We may still send non-marketing messages about an enquiry, order, result or engagement.

10. Storage, security and retention

We use reasonable technical and organisational safeguards designed to protect personal information from loss, misuse and unauthorised access, modification or disclosure. No internet service can guarantee absolute security.

We keep information only for as long as reasonably needed for the purposes above, to maintain necessary business and tax records, resolve disputes and meet legal obligations. We then delete or de-identify it where practical.

11. Access and correction

You may ask for access to, or correction of, personal information we hold about you. Contact hello@forwardmatterconsulting.co.nz and tell us what you are seeking. We may need to verify your identity. We will respond within the time required by the Privacy Act and will explain any lawful reason for refusing or limiting a request.

You may also ask us to delete information. We will do so where reasonably possible, subject to information we need to retain by law or for legitimate business purposes.

12. Privacy breaches and complaints

We assess suspected privacy breaches and will notify affected people and the Office of the Privacy Commissioner where the Privacy Act requires. If you have a concern, contact us first so we can investigate. You may also make a complaint to the New Zealand Office of the Privacy Commissioner at privacy.org.nz.

13. Changes to this notice

We may update this notice as our services, providers or legal obligations change. The current version and effective date will remain available on this page. If a change materially affects how we use information already collected, we will take reasonable steps to notify affected people.