Privacy Policy
Last Updated: 20 July 2026
Welcome to Corporate Media Worx. We are committed to protecting your privacy and handling your personal information responsibly in accordance with the New Zealand Privacy Act 2020.
1. Who We Are
Corporate Media Worx provides website design and rebuilds, SEO, Answer Engine Optimisation (AEO), managed hosting, photography, video and brand content. AI and automation may be provided as an adjacent capability where specifically agreed.
2. Information We Collect
We may collect:
Information You Provide
- Name
- Company name
- Email address
- Phone number
- Business information
- Information submitted through forms
- Project enquiries
- Communications with us
Automatically Collected Information
- IP address
- Browser type
- Device information
- Pages visited
- Referral sources
- Website usage statistics
Cookies and Analytics
We may use:
Google Analytics is initialised after the first interaction or after 15 seconds. That delay is a performance choice, not explicit consent. Events may queue before the analytics library loads; blocked analytics does not prevent navigation or form submission. Approved events contain no enquiry text, contact details, submitted website addresses or database identifiers.
3. How We Use Your Information
We may use information to:
- Respond to enquiries
- Deliver services
- Create quotations and proposals
- Manage projects
- Improve website performance
- Provide customer support
- Send service-related communications
- Comply with legal obligations
- Protect our business from fraud or misuse
4. Marketing Communications
The current public enquiry, Website Upgrade application and Website Health Check flows do not add new contacts to a marketing-email list. Historical consent records are retained where needed as evidence of earlier choices.
If a marketing-email workflow is introduced or a person has a valid historical subscription, consent can be withdrawn using the supplied unsubscribe method or by contacting us.
Marketing is not required to submit an enquiry, apply for an offer or receive Website Health Check findings.
6. International Data Transfers
Some of our service providers may store data outside New Zealand.
Where this occurs, we take reasonable steps to ensure appropriate privacy protections are in place.
7. Data Security
We implement reasonable technical and organisational safeguards to protect information from:
- Unauthorised access
- Loss
- Misuse
- Alteration
- Disclosure
8. Data Retention
We retain information only for as long as reasonably necessary for business, legal, accounting, or contractual purposes.
9. Access and Correction
You may request:
- Access to personal information we hold
- Correction of inaccurate information
Requests can be sent to: info@corporatemediaworx.co.nz
10. Third-Party Websites
Our website may contain links to third-party websites.
We are not responsible for the privacy practices or content of those websites.
11. Children's Privacy
Our services are not directed toward children under 13 years of age.
We do not knowingly collect personal information from children.
12. Enquiries and Website Upgrade Applications
The general enquiry form processes your name, email, selected service and message, plus any optional business name, phone number, website address and timeframe you provide. These details are used to assess, deliver and respond to the enquiry and to keep necessary business records.
Website Upgrade applications collect the application details shown in that form and record the versions and timestamps of the application privacy acknowledgement and Website Upgrade Offer Terms accepted. Application and owner-notification emails are service-related.
Supabase stores the enquiry or application record and Resend delivers required notifications. Form success is shown only after required persistence and notification delivery are confirmed. Raw IP addresses are not stored with general enquiries; a keyed one-way identifier is retained in rate-limit rows for no more than 48 hours and expired rows are removed during subsequent rate-limit claims.
13. Website Health Check
When you use the Website Health Check, we process the public website address you submit, automated homepage findings, your name, email address, optional company name and the required processing acknowledgement.
We use Supabase to store the audit and lead record, Google PageSpeed Insights to assess public performance information, and Resend to deliver the report and notify Corporate Media Worx. These providers may process information outside New Zealand.
The public results contain summary scores, mobile PageSpeed information and no more than 10 prioritised findings. The customer PDF contains only the limited findings and a way to contact Corporate Media Worx. When a customer requests the PDF, Corporate Media Worx receives the complete audit, including all automated evidence and recommendations, for review and follow-up.
Raw IP addresses are not stored in the audit tables. A keyed one-way hash is retained briefly to enforce rate limits and reduce misuse.
Attempts to check an ineligible website, including Corporate Media Worx and recognisable government or enforcement-agency domains, are refused. We retain the submitted website address, refusal reason and timestamp in the audit history as a security and misuse record.
The report and owner-notification emails are service-related. New Website Health Check submissions are not added to a marketing list. Historical marketing choices and unsubscribe evidence remain available where they were previously recorded.
14. Changes to This Policy
We may update this Privacy Policy periodically.
Changes become effective when published on this website.