LavaBox Privacy Policy

This Privacy Policy was last updated on 31 August 2025.
‍
We are LavaBox Limited, a provider of technology implementation and consulting services. LavaBox Limited is a company registered in New Zealand, with its registered office at Level 2 224 Symonds Street, Eden Terrace, Auckland, 1010, New Zealand (“LavaBox”, “we”, “us” or “our”). 

In this Privacy Policy, any person who uses our services (the Services) or whose personal information we collect or receive (including through the LavaBox website) is referred to as "you" or "your". 

We have prepared this Privacy Policy to help you understand what personal information we collect, how we use it, who we disclose it to, and how you can correct or change it. 

“Personal information” means any information about an individual where that information can be linked to (or in conjunction with other information can be linked to) an identifiable individual. We will handle all personal information in accordance with this Privacy Policy and the New Zealand Privacy Act 2020. 

Please read this Privacy Policy carefully before using our Services or providing us with personal information. 

We may update this Privacy Policy from time to time and will post the date we have last updated it. Please refer to this page regularly to see any changes to this Privacy Policy.

1. Collection

1.1
We may collect two types of information about you from your use of the Services or the LavaBox website: 
(a)
personal information and any other information you provide, both at the time of agreeing to use the Services, and also when you use the Services, including:
i.
name
ii.
email address, phone number and other contact details;
iii.
company and job role;
iv.
services of interest to you; and
v.
project details or any comments or feedback you have provided to us. 
(b)
aggregate information generated by our systems that relates to your use of the Services or the LavaBox website but does not relate to you personally (if we combine or connect aggregate information with your personal information so that it can directly or indirectly identify you, we will treat the combined data as personal information which will be used in accordance with this Privacy Policy). 
1.2
We may receive personal information about you from various third parties including analytics providers (such as Google) and/or financial and transaction information from our payment processors (excluding any credit card or bank account details).
1.3
If you fail to provide us with information that we request, then this may result in certain Services (or certain aspects of the Services) not being available to you.

2. Use

2.1
We may use your personal information:
(a)
to provide you with, and assist you with using, the Services; 
(b)
to enhance the delivery of the Services to you;
(c)
to contact you in relation to your use of the Services; 
(d)
to notify you of any changes to the Services;
(e)
to allow us to process payments in relation to the Services;
(f)
to monitor, develop and improve the Services and the LavaBox website;
(g)
for marketing and research purposes, as long as you have provided any required consent;
(h)
to comply with our legal obligations; and 
(i)
for any other use that you authorise.
2.2
We may use your personal information to send you marketing communications (such as insights, events and updates about LavaBox’s services). We rely on your express consent where you have opted in, and on inferred consent where we have an existing or ongoing business relationship with you. You may opt out of these communications at any time by clicking the unsubscribe link in our emails or by contacting us at info@lavaboxconsulting.com

3. Disclosure of information

3.1
We will only share personal information with other organisations or individuals in the following limited circumstances:
(a)
We may engage the following categories of third parties to perform services on our behalf or assist in providing the Services:
i.
hosting and storage providers;
ii.
maintenance, support and backup providers;
iii.
technical support providers, to help deliver or improve the Services or LavaBox website; 
iv.
payment processors, financial and credit card institutions;
v.
customer relationship management (CRM) and marketing technology providers;
vi.
customer support providers; and
vii.
marketing and research agencies.
‍
We take measures to ensure that the above third parties use personal information only as required to perform their functions (and not for other purposes) and process the personal information in accordance with applicable privacy laws.
(b)
We may use trusted third-party AI platforms (such as secure team workspaces) to help us analyse information and support the delivery of our services. These platforms process personal information only on our behalf, under strict contractual and security safeguards, and are not permitted to use it for their own purposes (such as model training).
(c)
We may share your personal information with third party software providers whose products and services we implement, to enable them to provide you with information about their products and services. 
(d)
We may disclose your personal information where we believe it is reasonably necessary: 
i.
to satisfy any applicable law, regulation, legal process or government request; 
ii.
for the prevention of fraud or other illegal activities; 
iii.
to enforce our agreements or legal rights;
iv.
to protect the security or integrity of our Services; or
v.
to safeguard our rights and the rights and safety of others.
(e)
If we sell our business, we may provide your personal information as part of a database to the buyer, so that they can contact you about their plans for the business.  In that case, we may also retain your information within our company and use it in accordance with this Privacy Policy (or any other terms we agree with you).
(f)
We may share your personal information with any other person if you expressly authorise it.

4. Cookies and tracking

4.1
We may use cookie files and similar tracking technologies such as resettable device identifiers or advertising identifiers from computers or other devices used to access the LavaBox website, containing information that can identify the device you are using.
4.2
Cookies are files with a small amount of data which may include an anonymous unique identifier. Cookies are sent to your browser from a website and stored on your device. We use the following types of cookies and identifiers: 
(a)
Session and Preference Cookies: to keep you logged in during your use of the LavaBox website, remember your preferred settings and enable forms to be prepopulated with your information for convenient use of the LavaBox website; 
(b)
Security Cookies: for security purposes to protect your use of the LavaBox website; 
(c)
Advertising Cookies: to track your response to ads and emails; and
(d)
Analytic Cookies: to track traffic patterns to and from the LavaBox website, including information like the parts of the LavaBox website, and features you use, the time you spend on the different parts or features of the LavaBox website, the date, time, and length of your use of the LavaBox website to understand what is popular and gets viewed the most (and the least).
4.3
You can choose to refuse cookies by turning them off in your browser and/or deleting them from your hard drive or other storage media. You do not need to have cookies turned on to use the LavaBox website but turning them off may affect your experience of parts of the LavaBox website. For more information about how to reject cookies using your internet browser settings please consult the “Help” section of your internet browser (or alternatively visit http://www.aboutcookies.org).

5. Content providers, advertisers and partners

5.1
We do not control the practices of software providers, advertisers, partners and other third parties connected with the LavaBox website or Services. The LavaBox website or Services may contain links or references to other sites or providers, which may not follow the same privacy policies that we adopt. We recommend that you check any relevant privacy policies before providing your personal information to any third party.

6. Analytics

6.1
We use software and systems which analyse information provided through the LavaBox website on an aggregated basis (Analytics). Analytics are collected and aggregated so you cannot be identified personally and no personal information is stored about you through the Analytics. We may use Analytics to enhance the delivery of the Services or LavaBox website to you or our other customers. 

7. Security

7.1
We have put in place security measures that seek to prevent your personal information from being accidentally lost, or used, altered or disclosed in an unauthorised way. As no data transmission over the internet can be guaranteed to be completely secure, we cannot ensure the security of any information you transmit or receive through LavaBox website or Services. While we take precautions to minimise the related risks, these activities are conducted at your own risk.

8. Holding, correcting and updating personal information

8.1
We will only retain your personal information for as long as reasonably necessary to fulfil the purposes it is collected for. Any personal information about you that we collect will be held by:
(a)
us, at our premises in New Zealand; or
(b)
our providers, described in section 3. Our providers may be located in New Zealand or overseas. 
8.2
You have rights of access to and correction of personal information that we hold about you. You can correct or change your personal information at any time and as often as necessary. If you have any questions about this Privacy Policy, or if you wish to access or correct personal information that we hold about you, then please contact us by sending an email to info@lavabox.consulting.com.
8.3
We may need to request specific information to help us confirm the identity of a person making an access or correction request. This is a security measure to ensure that personal information is not disclosed to any person who has no right to receive it. We may also request further information to speed up our response.
8.4
You have the right to make a complaint at any time to the relevant supervisory authority for data protection issues in your country (for New Zealand, this is the Privacy Commissioner). We would, however, appreciate the chance to deal with your concerns before you approach them, so please contact us in the first instance at info@lavaboxconsulting.com
8.5
For information about New Zealand’s Privacy Act 2020 and how it protects the personal information of individuals in New Zealand, please visit: https://privacy.org.nz/

Let's make impact happen.

Get in touch