Privacy notice

Last updated: 26 August 2026

This Privacy Notice for Five New Zealand Limited (trading as Five, “we”, “us”, “our”) describes how and why we collect, store, use and share your personal information when you visit fivenz.com, contact us, subscribe to our thinking, apply to work with us, or engage with us in other related ways.

If you don’t agree with our policies and practices, please don’t use our services. If you have questions, contact us at hello@fivenz.com.

Summary of key points

• What we collect. Only what you give us — usually your name, email address, organisation and whatever you write in a message — plus standard technical information collected automatically when you browse.
• We don’t collect sensitive information. We don’t ask for, and don’t want, health information, biometric data, or racial or ethnic origin.
• We don’t buy data about you. We don’t collect personal information from third-party data brokers.
• We don’t take payment on this website. There’s no checkout, no subscription and no card processing on fivenz.com.
• Why we process it. To reply to you, to deliver the services you have engaged us for, to send you the thinking you have asked for, to keep the site secure, and to meet our legal obligations.
• Who we share it with. A small number of service providers who help us run the business — principally our CRM, our analytics, our website host and our email tools. We don’t sell your personal information.
• Your rights. Depending on where you are, you can ask us for a copy of what we hold, ask us to correct it, ask us to delete it, and withdraw consent. Email us and we will action it.

1. What information do we collect?

Information you give us

We collect personal information that you voluntarily provide when you complete a contact or enquiry form; subscribe to our newsletter or download something from the site; start a conversation in the website chat; email, call or message us; or engage us for work, or work with us as a client, partner or contractor.

Depending on the interaction, that may include: name, email address, phone number, organisation, job title, the content of your message, and any information you choose to include in it.

If you engage us for consulting work, we’ll also process information relevant to that engagement under the terms of our contract with your organisation. That’s covered by the engagement, not by this notice alone.

We don’t process sensitive information. We don’t collect government identifiers, financial account numbers, or payment card details through this website.

Information collected automatically

When you visit fivenz.com we automatically collect certain technical information, including your IP address, browser and device characteristics, operating system, language preference, referring URLs, country, and information about how you moved through the site. This is collected through cookies and similar technologies, and is used for analytics, security and to keep the site working.

Cookies and similar technologies

fivenz.com uses the following:

• HubSpot — analytics, forms and chat. Records site activity, stores form submissions, powers the chat widget, and links activity to your record if you have identified yourself to us.
• Google Tag Manager — loads and manages the other tags on the site.
• Meta Pixel — measures the performance of our advertising on Meta platforms and allows us to reach similar audiences.
• Google reCAPTCHA — distinguishes humans from automated form abuse. Subject to Google’s Privacy Policy and Terms of Service.
• Webflow — serves the website and collects standard server logs.

You can accept or decline non-essential cookies through the banner shown when you first visit. You can change your mind at any time by clearing cookies for fivenz.com in your browser and reloading the site, or by emailing us.

2. How do we use your information?

We use your personal information to:

• respond to you — answer enquiries, arrange conversations, and provide the information you asked for;
• deliver our services — where you or your organisation have engaged us;
• send you our thinking — where you have subscribed. Every email includes an unsubscribe link;
• improve the site and our services — understanding which content is useful and which isn’t;
• keep things secure — preventing fraud, abuse and misuse of our forms;
• meet our legal obligations — including record-keeping requirements.

We don’t use automated decision-making that produces legal or similarly significant effects about you.

3. What is our legal basis for processing?

New Zealand. We collect and use personal information under the Privacy Act 2020, in accordance with the Information Privacy Principles.

EEA and UK. Where the GDPR or UK GDPR applies, we rely on your consent for marketing emails and non-essential cookies, which you can withdraw at any time; legitimate interests for responding to enquiries, securing the site, and understanding how our content performs, where those interests aren’t overridden by your rights; performance of a contract where we are delivering services to you or your organisation; and legal obligation where we are required to retain or disclose information.

Canada. We process personal information with your express or implied consent, which you may withdraw at any time.

4. When and with whom do we share your information?

We share personal information only where it is necessary, and only with:

• Service providers who process information on our behalf under contract — our CRM and marketing platform (HubSpot), our website host (Webflow), our analytics and advertising platforms (Google, Meta), and our email and productivity tools. They can only use the information to provide their service to us.
• Professional advisers — lawyers, accountants and insurers, where genuinely necessary.
• Authorities — where we are legally required to disclose.
• A successor entity — in connection with a merger, sale of company assets, financing or acquisition of all or part of our business.

We don’t sell your personal information, and we don’t share it with third parties for their own independent marketing.

5. Is your information transferred overseas?

Yes. Several of our service providers store and process information outside New Zealand, primarily in the United States, Australia and the European Union.

Where we transfer personal information overseas, we take reasonable steps to ensure it is subject to protections comparable to those in the Privacy Act 2020 — through contractual commitments with our providers, and, where the GDPR applies, through Standard Contractual Clauses or an adequacy decision.

6. How long do we keep your information?

We keep personal information only for as long as we need it for the purposes set out in this notice, unless a longer period is required by law. In practice:

• Enquiries that don’t become engagements — up to 24 months, so we can pick up the conversation if you come back to us.
• Newsletter subscribers — until you unsubscribe, plus a suppression record so we don’t email you again by mistake.
• Client engagement records — for the duration of the engagement plus seven years, to meet our tax and professional record-keeping obligations.
• Website analytics — in line with each platform’s retention settings.

When we no longer need it, we delete it or de-identify it.

7. How do we keep your information safe?

We use appropriate technical and organisational measures, including access controls, encryption in transit, multi-factor authentication on our business systems, and vendor due diligence.

No transmission over the internet or method of electronic storage is completely secure, so we can’t guarantee absolute security. Please only send us information through this site that you’re comfortable sending over the internet.

8. Do we collect information from children?

No. Our services are directed at organisations and the people who lead them. We don’t knowingly collect information from anyone under 16. If you believe we have, contact us and we’ll delete it.

9. Your privacy rights

Wherever you are, you can ask us to access the personal information we hold about you; correct anything that is wrong or out of date; delete information we no longer have a lawful reason to keep; stop sending you marketing, either by using the unsubscribe link or by emailing us; and withdraw consent where we relied on it.

If the GDPR or UK GDPR applies to you, you also have the right to restrict processing, to object to processing based on legitimate interests, and to data portability.

To exercise any of these, email hello@fivenz.com. We’ll respond within 20 working days, as required by the Privacy Act 2020.

10. Do-not-track signals

We don’t currently respond to Do-Not-Track browser signals, because no consistent standard for them has been finalised. You can control tracking through the cookie banner and through your browser settings.

11. Complaints

If you aren’t satisfied with how we’ve handled your personal information, please tell us first at hello@fivenz.com so we can put it right. If you’re still not satisfied, you can complain to:

• New Zealand — Office of the Privacy Commissioner, privacy.org.nz, 0800 803 909
• EEA — your local supervisory authority
• UK — the Information Commissioner’s Office, ico.org.uk
• Australia — the Office of the Australian Information Commissioner, oaic.gov.au

12. Changes to this notice

We may update this notice from time to time. When we do, we’ll change the last updated date at the top. Where the change is material, we’ll say so more prominently.

13. How to contact us

Five New Zealand Limited
New Zealand
hello@fivenz.com

To review, update or delete the personal information we hold about you, email us at the address above.