Iron Road ("Iron Road", "we", "us" or "our") respects your privacy. This policy explains what personal information we collect through ironroad.co.nz (the "Site"), why we collect it, how it's stored and used, who we share it with, and the rights you have over it under New Zealand's Privacy Act 2020.
If you have any questions about this policy or how your information is handled, contact us at hello@ironroad.co.nz.
What information we collect
We collect two kinds of information: information you give us directly, and information collected automatically as you browse the Site.
Information you give us
When you use the contact form on our Book a Call page, we collect whatever you enter into it — typically your name, email address, and phone number if you provide one, along with the reason for your enquiry and any message you write. We use this solely to respond to your enquiry and, if you go ahead, to arrange and follow up on a conversation with Colin Kennedy.
Information collected automatically
Like most websites, the Site automatically logs some technical information when you visit — your approximate location (derived from IP address), browser and device type, the pages you view, how you arrived at the Site, and how long you spend on it. We use this in aggregate, through Google Analytics, to understand how the Site is used and to improve it. We do not use this information to identify you personally.
Cookies and similar technologies
The Site uses a small number of cookies, set by the third-party services described below:
- Google Analytics (GA4) — sets cookies to distinguish unique visitors and measure how the Site is used (pages viewed, time on page, referral source). Google Analytics runs in a background web worker on this Site (via Partytown) rather than directly in the main page, but it still sets cookies and sends usage data to Google in the same way. You can opt out of Google Analytics tracking across all websites using Google's Analytics Opt-out Browser Add-on.
- Google Fonts — the Site loads typefaces from Google's font servers. Loading a font makes a request to Google's servers, which will see your IP address, in the same way any web request does.
We don't use cookies for advertising or retargeting, and we don't sell or share your browsing data with advertisers.
Spam protection (Altcha)
The contact form is protected by Altcha, a privacy-friendly alternative to traditional CAPTCHAs. Altcha verifies you're a genuine visitor using a small proof-of-work calculation performed in your browser — it doesn't use tracking cookies, image puzzles, or send any data to third-party advertising networks.
How we use your information
We use the personal information you provide us to:
- respond to enquiries made through the contact form;
- arrange, conduct, and follow up on discovery calls, Trust Audits, or other services you request;
- send you information you've specifically asked for; and
- maintain records of our communications with current and prospective clients.
We don't use your information for any purpose beyond what's reasonably necessary to provide the service you've asked for, and we don't sell your personal information to anyone.
Where your information is stored
Contact form submissions are processed through a server-side function (hosted on Amazon Web Services) that verifies the Altcha proof-of-work, stores the submission in a database, and sends a notification email to our team. The Site itself is hosted as static files on Amazon S3 and delivered via Amazon CloudFront. Where data is stored on AWS infrastructure, it may be processed or backed up in AWS's Asia-Pacific data centres.
Who we share information with
We don't share your personal information with third parties for their own marketing purposes. Information may be disclosed to:
- service providers who help us run the Site and process enquiries (for example, our hosting and infrastructure provider, AWS);
- Google, in aggregate/anonymised form, through Google Analytics and Google Fonts as described above; and
- third parties where required by law, such as in response to a lawful request from a regulator or court.
How long we keep your information
We keep enquiry and contact form records for as long as reasonably necessary to respond to your enquiry, maintain a record of our client relationships, and meet our legal and accounting obligations. If you ask us to delete your information and we have no ongoing legal or business reason to retain it, we will do so.
Your rights
Under the Privacy Act 2020, you have the right to:
- ask us to confirm whether we hold personal information about you, and to access it;
- ask us to correct any personal information we hold about you that is inaccurate, out of date, incomplete, irrelevant, or misleading; and
- make a complaint about how we've handled your personal information.
To make any of these requests, contact us at hello@ironroad.co.nz. If you're not satisfied with our response, you can complain to New Zealand's Office of the Privacy Commissioner.
Children's privacy
The Site is intended for business owners and marketing decision-makers, and isn't directed at or designed to collect information from children.
Changes to this policy
We may update this policy from time to time, for example if we change the tools or services described above. The date at the top of this page shows when it was last updated. If we make material changes, we'll update this page accordingly.
Contact us
If you have any questions about this policy or how Iron Road handles your personal information, get in touch at hello@ironroad.co.nz or call +64 27 245 6060.