Our Privacy Policy

Last updated: 23 October 2025

Introduction

This Privacy Policy governs the use of your information by Crayon Limited (we, us, our, Crayon). When we say “your information” in this Policy, we mean personal information of yours and (where applicable, your partner) as defined in and protected by the Privacy Act 2020 (Privacy Act).

We may change the terms of this Policy from time to time. Any changes made will be notified by us by way of a revised Policy, which is posted on our Website. The changes will apply from the date that we upload the revised Policy on our website unless a different date is specified in the revised Policy.

Any personal information you provide to us will be stored, used and disclosed by us in accordance with this Privacy Policy and the Privacy Act.

This policy explains:

The information we may collect from you;
How we can use your information;
Who we can share your information with; and
How we protect your information.

Acceptance of this privacy policy

By using or accessing our digital platforms or providing us with any of your information, you are deemed to accept this Privacy Policy and you authorise the collection, use, disclosure, storage and retention of your information by Crayon in accordance with the terms of this Privacy Policy.

1. Source of your information

The information we collect from you includes information obtained:

1.1 Directly from you or an authorised third party

(a) when you fill in a contact or enquiry form on our website, call us, meet us in person or otherwise contact us, we may collect your name, email address, phone number and any other information you choose to provide to us.

(b) when you sign up for our newsletter, we may collect your name, email address, user preferences and any other information you provide to us when you ask to receive our newsletter.

(c) when you respond to our feedback surveys, we may collect your name, email address, demographic information and any other information you choose to include in your response.

(d) when you use one of our products or programs, including those hosted by another party’s website or platform;

(e) when information about you or your partner or about your financial situation and/or that of your partner is provided to us by you or another party authorised by you in order for us to render services to you.

1.2 Automatically when you use our website

When you access and use our website, we may automatically collect information about your device and usage of our website, including your IP address, operating system, browser type, time spent on certain pages of the website, pages visited, links clicked and language preferences. We may also monitor usage patterns in the application, such as clicks, mouse movement and scrolling to illuminate areas of the website that are confusing or underused, allowing our team to improve your customer experience.

Some of this data is collected through third-party tools and/or the use of cookies, web beacons and similar storage technologies.

2. How we may use your information

We will only use your information for a lawful purpose or with your consent, or in accordance with the Privacy Act and this Privacy Policy, including for the following purposes:

2.1 Our services: to provide you with services and to update our services to you;

2.2 Our website: to maintain and improve our website and to improve users’ experience across our website and other digital platforms;

2.3 Communication: to personalise communications with you and to monitor, respond to and/or keep records of our e-mail communications and other correspondence with you;

2.4 Research and development: to test, research, analyse, and develop our website to make it better, safer, and easier to use. We may use your information to obtain your feedback through a third party;

2.5 Customer support: to assist with the resolution of issues relating to our website or to respond to any queries, comments or complaints you may have;

2.6 Marketing: to send targeted emails, text messages, ads, and other content about our website or business, providing that on the first occasion you provide Information to us, you will be asked if you wish to opt-in to these marketing communications. You may opt out of receiving marketing communications at any time by following the opt-out instructions provided;

2.7 Security: in order to detect, prevent, and protect against any unauthorised, illegal or injurious activity ;

2.8 Compliance: to comply with applicable laws and/or regulations; and

2.9 Other Specific Purposes: for any other specific purposes which we notify you of at the time your information is collected.

3. Who we can share your information with

3.1 We may disclose your personal information where necessary and only to the extent necessary to a limited number of businesses that support our digital assets, including any person that hosts or maintains any underlying IT system or data centre that we use to provide the assets. These third parties may include:

(a) software-as-a-service providers;

(b) cloud-storage providers;

(d) data analytics or research partners;

(e) third parties that help us to enhance the safety and security of our website;

(f) with third-party providers (such as Google, Facebook and programmatic display) for marketing purposes; and

(g) our consultants, lawyers, accountants, and professional advisors.

Some of these service providers and business associates are located outside of New Zealand and may not be subject to the Privacy Act or other New Zealand laws. We will take reasonable steps to ensure that those organisations are required to protect the information in a way that, overall, provides comparable safeguards to those under the Privacy Act. By using the Crayon digital platforms and providing us with your information, you authorise the disclosure of your information to such service providers and business associates.

3.2 We may also disclose your information if:

(a) it’s required to comply with any court or regulatory order or direction or other legal process;

(b) it’s required by law or is appropriate due to security concerns;

(d) you give your consent;

(e) it’s required to apply or enforce our terms of engagement or other agreement; or

(f) the information does not identify you.

4. Cookies

Cookies and other similar technologies are used to remember your browser or device during and between website visits. We use cookies to monitor your use of the website, so we can remember your preferences and settings, improve security, analyse traffic and trends, and measure the effectiveness and popularity of features or marketing.

This technology is linked to your browser or device and usually it doesn’t identify you. The sort of information collected includes your device type, date and time of use, referring website, IP address, and advertising identifiers. We may link this information to other information we collect about you.

We may allow others to provide analytics, send messages and ads for us, and to track and report on performance. These entities may use cookies and other similar tech to identify your browser or device when you use our Service, as well as when you visit other online sites and services.

You may disable cookies by changing the settings on your browser, although this may mean that you cannot use all of the features of the website.

5. Retaining and deleting your information

We will keep your information:

(a) for as long as you are active on our website or are in receipt of our services;

(b) for as long as we consider reasonably necessary for the purposes set out in this Privacy Policy including for security reasons;

(c) for as long as we consider reasonably necessary to comply with regulatory, tax, insurance and other legal requirements.

If at any time you no longer wish to receive any additional marketing emails from us or our business associates, or do not want your information disclosed for direct marketing purposes, please contact us using the details at the bottom of this Privacy Policy. Alternatively, as noted above, you can opt out using the function in any electronic marketing communications sent from us or our business partners.

If at any time you request in writing for your personal information that you have provided to us to be deleted, then to the extent that we have no legal obligation or lawful entitlement or justification to retain such information, we will delete that information from our data storage.

6. Accessing and correcting your personal information

Subject to certain grounds for refusal set out in the Privacy Act or other applicable laws, you have the right to access your readily retrievable personal information that we hold and to request a correction to your personal information. Before you exercise this right, we will need evidence to confirm that you are the individual to whom the personal information relates.

In respect of a request for correction, if we think the correction is reasonable and we are reasonably able to change the personal information, we will make the correction. If we do not make the correction, we will take reasonable steps to note the personal information in respect of which you requested the correction.

If you want to exercise either of the above rights, please email us at hello@gocrayon.com. Your email should provide evidence of who you are and set out the details of your request (e.g. the personal information or the correction that you are requesting).

7. Protecting your information

We are committed to keeping your information safe and secure. As required by the Privacy Act, we will take reasonable steps to keep your information safe from loss, unauthorised activity, or other misuse. We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risks inherent in processing personal information. For example, access to the personal information we store is limited to those staff members who have a legitimate enterprise requirement to use it.

We strive to implement and update security measures to help protect your information. However, these measures do not mean or imply that we can guarantee the security of the transmission or storage of your information.

8. Internet use

While we take reasonable steps to maintain secure internet connections, if you provide us with personal information over the internet, the provision of that information is at your own risk. If you follow a link on our website to another site, the owner of that site will have its own privacy policy relating to your personal information. We suggest you review that site’s privacy policy before you provide personal information on that other site.

9. Contact us

If you have any questions regarding our Privacy Policy or wish to access or amend any of your information that we hold, please contact our Privacy Officer at hello@gocrayon.com.