Legal

Privacy Policy

How IT Works Limited collects, uses, and protects your personal information. Last updated 28 February 2025.

2. Our commitment

We handle personal information in line with the New Zealand Privacy Act 2020, and align with NZISM and ISO/IEC 27701. A SOC 2 audit is underway, expected to complete September 2026.

3. Information we collect

We collect information you provide directly (contact and account details) and information generated through providing our services, including technical data needed to manage your environment.

4. How we use information

To deliver and improve our services, respond to enquiries, manage our relationship with you, meet legal obligations, and keep our services secure.

5. Sharing information

We do not sell personal information. We share it only with trusted providers who help us deliver our services, where required by law, or with your consent.

6. Storage and security

We use appropriate technical and organisational measures — including access controls, MFA, and encryption — to protect personal information.

7. Retention

We keep personal information only as long as necessary for the purposes described here, or as required by law.

8. Your rights

You have the right to access and request correction of your personal information. Contact privacy@itworks.co.nz.

9. Cookies and analytics

Our website may use cookies and analytics to understand usage and improve the experience. You can control cookies through your browser settings.

10. Overseas processing

Some service providers may store or process data outside New Zealand. Where this happens, we take steps to ensure comparable protections apply.

11. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page.

12. Complaints and contact

Contact privacy@itworks.co.nz. You also have the right to complain to the Office of the Privacy Commissioner.