Privacy Policy
Last updated 21 August 2026
This policy explains how Siyon IT Ltd ("SiyonIT", "we", "us") collects, uses and protects personal data when you visit this website or contact us. We handle personal data in line with theNew Zealand Privacy Act 2020 and, where it applies, the EU/UK GDPR.
1. Who we are
The agency responsible for the data described here is Siyon IT Ltd, a company registered in New Zealand[to confirm: NZBN and registered address]. For any privacy question, email hello@siyon.co.nz.
2. What we collect
- Enquiry data. The name, work email, company, project type, budget range and message you submit through the contact form, or that you send us by email.
- Technical request data. IP address, user agent and requested URL, processed by our hosting provider to serve the page and to block abuse. We do not combine this with enquiry data.
- Cookies. This site sets no cookies and runs no analytics, advertising or tracking scripts.
3. Why we use it
- To read and reply to your enquiry.
- To prepare a proposal if you ask us for one.
- To keep the website available and defend it against abuse.
We do not use enquiry data for marketing, we do not add you to a mailing list, and we do not sell or rent personal data to anyone.
4. Legal basis
Under the Privacy Act 2020 we collect this information directly from you for a lawful purpose connected with our business. Where the GDPR applies, our bases are your consent in submitting the form and our legitimate interest in responding to business enquiries and securing our site.
5. Who else processes it
We share personal data only with the providers needed to run this site:
| Provider | Purpose | Location |
|---|---|---|
| Cloudflare | Website hosting, DNS, network security | Global edge network |
| Cloudflare Email Service | Delivering contact-form submissions to our inbox | Global edge network |
| [to confirm: email/mailbox provider] | Storing and replying to correspondence | [to confirm] |
Some of these providers process data outside New Zealand. Where that happens we rely on their contractual commitments to comparable safeguards, as required by information privacy principle 12.
6. Client data during an engagement
Data we access while delivering a project is governed by the engagement contract and any NDA, not by this policy. Our standard practice is to work inside your cloud accounts, against anonymised or synthetic data wherever the task allows, with access scoped to named engineers and revoked when the engagement ends. We act as a processor for that data; you remain the agency or controller.
7. How long we keep it
Enquiry correspondence is retained for 24 months from our last exchange, so we can pick up a conversation that resumes, and is then deleted. Where an enquiry becomes a contract, records are kept for as long as tax and company law requires.
8. Your rights
You may ask us for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it. Emailhello@siyon.co.nz and we will respond within 20 working days, as the Privacy Act requires. If you are not satisfied with our response you may complain to theOffice of the Privacy Commissioner.
9. Security
The site is served over HTTPS only. Contact-form submissions travel over TLS and are delivered straight to our inbox. This website has no database and stores nothing. Access to our mailbox is protected by multi-factor authentication.
10. Changes
If we change this policy we will update the date at the top of this page. Material changes will be summarised here for at least 30 days.