Privacy Policy

Last updated 20 August 2026

At Taki Consulting we keep things simple, and that includes how we handle your information.

This explains what we collect, why we collect it, and what you can do about it. It covers our website, everything we do for you, and the social media accounts we run on behalf of the businesses we work for.

Who we are

Taki Consulting Limited helps small and medium businesses operate better. We provide operational excellence consulting (LEAN and Theory of Constraints), business consulting for SMEs, health and safety support, website design and support, AI integration, and social media marketing.

Any questions about your privacy, reach us at admin@takiconsulting.nz or +64 22 123 4511.

Two different roles, and why it matters to you

Which of these applies changes who decides what happens to your information.

Information you give us directly. When you enquire, become a client, or fill in a form on our site, Taki Consulting decides how that information is used.

Information we handle for a client. When you interact with a business we do marketing for, we handle your information on that business's instructions. They decide what happens to it; we operate the tools. You can still ask us to delete it, and we say how below.

What we collect

Depending on how you deal with us, we may collect:

• Your name and business name
• Your email address and phone number
• Business and operational information you share so we can advise you, such as process details, performance figures and other commercially sensitive information
• Your website content, logos, images and any logins you share with us so we can build or manage your site
• Access to systems, accounts or data you ask us to work with, for example when we set up or connect AI tools for your business
• Billing details. Your card payment is handled securely by our payment provider, and we do not see or store your full card number
• Messages and information you send us
• Basic technical information when you visit our website, such as your browser type and how you move around the site

When we contact a business for the first time, we may have collected publicly available details, such as a business email address listed online.

We treat any commercially sensitive business information you share with us as confidential, and only use it to do the work you have asked us to do.

When you interact with a client's social media that we manage

Where a client has asked us to run automated replies on their Facebook or Instagram accounts, and you comment on one of their posts or send a message, we receive from Meta:

• Your public username or profile name, and your profile picture where Meta provides it
• The content of the comment or message you sent
• An identifier Meta uses to route the reply back to you
• Any contact details you choose to give us in that conversation

We do not collect your Instagram or Facebook password, your friends or followers list, your private posts, or anything you have not sent to the business you were messaging. We only ever see a conversation you started.

And the reply comes from the business you contacted, not from us. It arrives from their own account, in their own name. We build and operate the system behind it. We do not message you as Taki Consulting and we do not add you to anything of ours.

A reply from a business's account may be sent by a system rather than typed by a person, and it will say so where that is not obvious. You can stop them at any time by replying to ask us to stop, or by blocking the account on the platform.

Health and safety work

When we help a business with its health and safety systems, we sometimes see information its staff have entered, including incident reports and the details of the people involved.

We do not collect, copy or keep any of it. It stays on that business's own systems and they remain responsible for it. We only look at what we need to see in order to check the system is being used properly and to help them use it better, and we treat anything we see as confidential.

How we collect it

We collect your information when you fill in a form on our website or sign up for our service, work with us on a consulting, website or AI project, email, call or message us, pay for our service, or visit takiconsulting.nz. And, for a first approach, from publicly available sources.

Why we use it

• Carrying out the consulting, website, health and safety, and AI work you have engaged us to do
• Taking payments and managing your subscription
• Replying to you and keeping you updated about your service
• Sending your agreement and onboarding details after you sign up
• Replying to comments and messages on social accounts we manage, and passing your enquiry to the business you were contacting
• Running and improving our own website and business

Cookies and analytics

Our website uses cookies to help it work properly and to understand how people use it. We use Google Analytics to see which pages are popular so we can keep making the site better. It tells us things like which page you arrived on, roughly where in the world you are, and what device you used. It does not tell us who you are.

You can turn cookies off in your browser settings, though some parts of the site may not work as well if you do. Google also publishes an opt-out add-on at tools.google.com/dlpage/gaoptout.

We do not run advertising tracking pixels on our website, from Meta or anyone else. If that changes we will update this policy before switching anything on.

Who we share it with

We are a small business and we rely on a few trusted tools to run it. Your information may be shared with:

• Zoho, which we use for forms, billing, agreements, email and customer records
• Stripe and Zoho Billing, which process payments securely
• AI tools we use to help deliver your work, such as Claude, made by Anthropic, where this forms part of what you have asked us to do
• Meta, where a conversation takes place on Facebook or Instagram
• Metricool, for scheduling and reporting on social media posts
• Hosting and analytics providers that help us run websites and our own site

We only ever share what is needed for these tools to do their job, and they are not permitted to use it for their own purposes. We may also share information if the law requires us to.

Some providers store or process information outside New Zealand, and when we use AI tools to help with your work that processing may take place overseas. Where information is held or processed overseas we take reasonable steps to make sure it is protected to a standard comparable with New Zealand law. Sending it offshore does not reduce our obligations to you; the Privacy Act 2020 holds us responsible either way.

Information exchanged on Facebook or Instagram is also held by Meta under its own terms, in its own facilities. That part is outside our control, which is one reason we move a conversation off social media and into direct contact as soon as there is a reason to.

How we store and protect it

We keep your records securely in Zoho. For Australia and New Zealand, Zoho holds your data in its Australian data centres, the primary in Sydney and a secondary in Melbourne. Your information, including backups, stays within this region.

Your information is encrypted while it is stored and while it moves between you and our systems. Backups are taken regularly and kept encrypted in the same region. Physical access to these centres is tightly controlled, with biometric entry, around-the-clock monitoring and a strict need-to-know policy for staff.

Information submitted through our website forms is stored outside the publicly reachable part of our web hosting, and our systems are accessed over encrypted connections.

No system is ever completely secure, but we treat your information with care, take reasonable steps to protect it from loss, misuse and unauthorised access, and only give access to people who need it. If a breach happens that could cause you serious harm, we will tell you and the Privacy Commissioner, as the Privacy Act requires.

How long we keep it

• Enquiries that do not become work: up to 24 months, then deleted.
• Social media conversations: kept only as long as the client we handle them for asks us to, and deleted when they instruct us to or when our work for them ends.
• Client records: for as long as you are a client, and for a reasonable period afterwards so we can meet our legal, tax and business obligations. That is currently seven years for tax purposes.

When we no longer need it, we securely delete or de-identify it.

Deleting your information

Email admin@takiconsulting.nz with the subject line "Delete my data".

Tell us the name, email address or social media handle you used, and which business you were contacting if you know it. We will confirm within 5 working days and complete the deletion within 30 days.

You do not have to give a reason, and asking costs you nothing.

Where the information is held on a client's behalf, we will delete it from the systems we operate and tell the client of your request, since they may hold a copy we cannot reach.

If some information has to be kept, for example a record needed for tax purposes, we will tell you exactly what and why rather than quietly keeping it.

Your other rights

Under the New Zealand Privacy Act 2020 you can ask to see the personal information we hold about you, and ask us to correct anything that is wrong. Email admin@takiconsulting.nz and we will sort it out. It is free to ask, and we will respond as soon as we reasonably can.

Children

Our services are for businesses. We do not knowingly collect information from anyone under 16. If you believe we have, email us and we will delete it.

Making a complaint

If you are ever unhappy with how we have handled your information, please tell us first so we can put it right. If you are still not satisfied, you can contact the Office of the Privacy Commissioner at privacy.org.nz.

Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated shown at the top. Material changes affecting how we use information already collected will be notified directly where we have a way to reach you.

Contact us