Privacy Policy

At Colossus (referred to as “we”, “us”, or “our”), we prioritize the security and confidentiality of your personal data. Our commitment to responsibly handle personal information is in alignment with the standards of the Privacy Act 2020 (the Act), a cornerstone in our operations based in New Zealand.

Personal information, under this policy, is defined as any data related to an identifiable individual (a natural person).

This policy is designed to complement, not replace or limit, your rights as defined under the Act. For more insights into the Act and general privacy matters, you can explore www.privacy.org.nz.

Scope and Objective

This privacy policy governs the handling of personal information collected or received about you during your interactions with us or any of our business divisions, including but not limited to engagements through our website.

The core objective of this policy is to clearly define how we collect, store, process, and disclose personal information, as well as outline your rights regarding this information.

We reserve the right to modify this privacy policy as needed, and may do so occasionally without prior notice. Following any changes, the latest version of the policy will be available on our website, along with an updated “last updated” date. We advise you to regularly visit our website to stay informed about any amendments.

Types of Personal Information Collected by Colossus

At Colossus, the range of personal information we gather depends on your specific interactions with us and the context of those interactions. This information may include but is not limited to:

  • Basic personal details such as your name, email address, postal address, and other contact information like phone numbers.
  • Any additional personal data you provide or permit us to collect during your interactions with us. This may encompass details like your date of birth, educational background or employment history if you are a job applicant, or financial details such as tax identification and superannuation information if you are employed by us.
  • Other personal information you provide or consent to us collecting in the course of our interactions.

Circumstances of Collecting Personal Information

We collect personal information from you in various situations, including but not limited to:

  • When you are in discussions with us about the possibility of becoming a client, customer, supplier, or employee of Colossus.
  • When you engage in any agreements or contracts with us, including participation in any of our programs or services.
  • When you apply for a position with us.
  • When you contact or interact with us, including through our social media channels.

Purpose of Collecting Personal Information and Usage by Colossus

At Colossus, we collect and utilize your personal information as necessary for conducting our business activities and functions. This is essential for understanding and addressing our clients’ needs, offering services, and fulfilling administrative tasks related to these services, such as billing.

The reasons we gather and use personal information vary based on your interaction with us, but can include:

  • Assisting in providing services you request from us, or to receive services from you.
  •  Delivering information you have subscribed to via our website, or that may interest you.
  • Managing our relationship with you.
  • Responding to your emails or inquiries.
  • Registering you for events or training sessions, and providing related services or information.
  • Investigating complaints or requests you make to us.
  • Processing your job application.
  • Informing you about events, surveys, promotions, or marketing activities.
  • Facilitating your participation in our research, development, or other programs.
  • Managing our debt recovery processes.
  • Enhancing and improving the quality of our website.
  • Providing services to entities within or associated with Colossus.
  • Sharing with third parties, such as government agencies, for non-profit purposes aligned with our objectives.
  • As outlined in any applicable terms and conditions between you and us.

Disclosure of Personal Information

We adhere to strict guidelines when sharing personal information, ensuring it is only done as authorized by law, which includes:

  • Sharing with third parties to achieve the purposes stated above on our behalf.
  • Disclosing information with your prior consent or as directed by you.
  • Enhancing our cybersecurity measures or systems.
  • Preventing or resolving fraud, money laundering, unauthorized access to our systems, or other criminal activities, even if the person whose information is disclosed is not involved in such activities.
  • Complying with laws in New Zealand or relevant overseas jurisdictions.
  • Enforcing our rights or protecting our organization, staff, or clients.

Storage and Security of Personal Information at Colossus

Colossus is committed to implementing all reasonable measures and maintaining necessary systems to safeguard personal information from unauthorized access or usage. We assure you that any personal data provided to us is securely held by, or on behalf of, Colossus at our designated location and/or through cloud providers or data centers we utilize.

In cases where Colossus transfers personal information outside New Zealand (such as to offshore data centers), we ensure that these transfers are to parties and/or countries that provide adequate protection, in line with the Privacy Act 2020 and any other relevant privacy laws.

We retain your personal information only as long as it is necessary for the lawful purposes for which it can be used.

Website Analytics

At Colossus, we also collect non-identifiable data through your interactions with our IT systems, including website usage. This involves using analytics to understand web traffic based on various factors such as behavior, demographics, and interests. Our analytics process involves gathering statistical information about website visits, including:

  • Masked IP addresses. Search terms used.
  • Pages accessed on our website and link clicks.
  • Dates and times of website access.
  • The referring site, if applicable, through which our website was accessed.
  • Operating systems (e.g., Windows, Mac OS X) used for website access.
  • Web browsers utilized (e.g., Microsoft Internet Explorer or Edge, Google Chrome, Apple Safari).

The data collected is aggregated, and IP addresses are masked to prevent identification of individuals. Our analytics respect “do not track” settings in web browsers.

Use of Cookies at Colossus

A cookie is a small data file stored on a user’s device, containing non-personal information about the user. At Colossus, we utilize cookies to enhance and optimize the delivery of our information and services. This includes improvements to the layout of our website and the types of information we provide to our clients. Users have the option to disable cookies in their web browser settings and can also delete them from their device’s hard drive. It’s important to note that while our website can be accessed with cookies disabled, certain online services, features, or functions may not operate optimally without them.

Social Media Engagement

Colossus engages with the public through various social media platforms, such as Facebook and LinkedIn. Your interactions with us on these platforms (like posting on our Facebook page or liking our posts) involve sharing your social media profile with us. We only use this information for social media interactions. The collection of this information is managed by the respective social media service and is subject to their terms and privacy policies.

Right to Access or Correct Your Personal Information

You have the right to inquire about the personal information Colossus holds about you, obtain a copy of this information, and/or request corrections as per the provisions of the Act. For further information about this privacy policy or to exercise your rights, please reach out to us at business@colossus.nz.

We strive to ensure that the personal information we collect, use, or disclose is accurate, complete, and up-to-date. Your assistance is valuable in maintaining this accuracy. Please inform us of any errors or discrepancies in the information we have about you and keep us updated on any changes to your personal details.

Handling of Complaints Regarding Personal Information at Colossus

If you have any inquiries or concerns about our privacy policy or the handling of your personal information, we encourage you to contact us at any time. You can make a privacy-related complaint to Colossus’s Privacy Officer using the email address provided below.

Upon receiving your complaint, our Privacy Officer will initially assess it to determine if there are straightforward or immediate actions that can be taken to resolve the issue. We aim to generally respond to your complaint within one week.

If your complaint necessitates a more thorough consideration or investigation, we will acknowledge your complaint within one week and strive to complete our investigation promptly. During this process, we may request additional information from you about your complaint and the resolution you are seeking. Our investigation typically involves gathering relevant facts, reviewing necessary documents, and consulting with involved individuals.

We usually resolve and respond to complaints within 30 days. If the issue is complex or requires additional time for investigation, we will inform you accordingly.

If you are dissatisfied with our response or believe that we may have breached the Privacy Act, you have the option to lodge a complaint with the Office of the Privacy Commissioner. They can be contacted by phone at 0800 803 909 or through the contact details available on their website.

Contacting Us

To reach Colossus’s Privacy Officer, please email us at business@colossus.nz.

Last updated: 13 October 2023