Privacy and data handling
Clear limits before sensitive material is accepted.
This notice explains how we handle personal information at first contact and during an agreed engagement. Specific access, use, retention and transfer arrangements are confirmed in writing before substantive work begins.
First contact
A first enquiry should contain only a brief description of the problem and the decision it affects. Do not send confidential or sensitive records by email. If the matter appears suitable, an agreed private transfer method will be arranged.
What we may collect
We may collect contact details, enquiry information, engagement and billing records, and source material the client represents they are authorised to provide, subject to our own collection and privacy obligations.
Information about other people
Source material may contain personal information about people other than the client. Where New Zealand privacy law requires notification of indirect collection, we will take reasonable steps to provide it or document the applicable exception as part of engagement scoping.
How information is used
Information is used to assess fit, define and deliver agreed work, communicate with the client, maintain source control and meet ordinary business or recordkeeping obligations. It is not sold.
Technology and service providers
Technology, including AI-assisted tools, may support storage, comparison, reconstruction and quality control. Relevant service providers may process information to provide those functions. Material processing arrangements are addressed as part of engagement scoping before sensitive records are accepted.
Optional website analytics
Nothing is sent to Google Analytics unless you choose Allow. If you allow it, we measure pages visited, sections viewed or engaged with, navigation selections and contact-button selections. A contact-button selection shows contact intent, not whether an enquiry was completed. We do not send Google anything you type or include in an email.
Google Analytics may set analytics cookies and client identifiers and process device, browser, approximate-location and referral information to provide the service. We do not assign our own user IDs, use Google Signals or allow advertising personalisation. Analytics event and user data retention is configured for two months. Read how Google uses information from sites that use its services.
Your choice is stored only in this browser. You can decline without affecting your use of the website and can change your choice at any time. Withdrawing consent stops further measurement in the page and removes accessible Google Analytics cookies from this site.
Access and external use
Access is limited to the people and systems required for the agreed work. Client material is not released externally on the client's behalf unless that action is separately authorised.
Retention, correction and concerns
Retention, return and deletion arrangements are set for the engagement, subject to applicable business or legal recordkeeping requirements. To request access or correction, or raise a privacy concern, contact Jeff Garon.