Privacy Policy

Information we collect

When you visit the TavX website, we may collect limited technical and usage information, including your approximate country or region, device and browser type, internet protocol address, pages visited, actions taken, referral source and the date, time and duration of your visit.

If you contact TavX, we may collect information you choose to provide, including your name, organisation, position, email address, telephone number, the nature of your enquiry and the content of your communication.

Google Analytics and cookies

TavX uses Google Analytics 4 to understand how visitors use the website and to improve its content, accessibility and effectiveness. Google Analytics may use cookies or similar technologies to collect information about website activity. Information available to TavX is generally aggregated and is not intended to identify individual visitors directly.

Google may process or store analytics information outside New Zealand. Google handles that information under its own privacy policies and service terms. You can limit cookies through your browser settings; doing so should not prevent access to the TavX website.

How we use information

TavX may use information to operate and improve the website, understand interest and usage, respond to enquiries, arrange introductory conversations, communicate about services or Foundation Pilot opportunities, maintain appropriate business records, protect TavX systems and comply with legal obligations.

We will not use personal information for a materially different purpose unless authorised by the individual concerned or permitted by law.

When information may be shared

TavX may share limited information with trusted providers where reasonably necessary to operate its website, email, analytics, cloud-storage, security or professional services. Only information reasonably required for the relevant service will be provided.

TavX does not sell personal information. We may also disclose information where required by law or reasonably necessary to protect the rights, security or safety of TavX or another person.

International clients and visitors

Personal information handled by TavX is subject to the New Zealand Privacy Act 2020. Depending on where a client or individual is located, additional overseas privacy and data-protection requirements may also apply.

Before accepting confidential information for an international engagement, TavX will assess applicable privacy laws, contractual and sector requirements, cross-border transfers, processing and storage locations, and the client’s information-security requirements. Engagement-specific terms may supplement this policy.

Client and organisational information

Client reports and working materials are handled under an agreed engagement scope and TavX’s information and data-handling requirements. Wherever practicable, clients should remove information that identifies individuals and provide only information necessary for the agreed purpose.

The approved transfer method, authorised recipients, access controls, permitted processing, retention period and deletion arrangements will be confirmed before TavX receives confidential reports.

Artificial intelligence

TavX does not use ordinary website visitor information to train TavX or third-party generative AI models.

Confidential organisational information will not be entered into an AI service unless the proposed processing and provider have been assessed, relevant privacy and security controls are in place, the intended use has been disclosed, and the client has approved that processing. Client information will not be used to train publicly available or shared AI models.

Storage and security

TavX takes reasonable technical and organisational measures to protect personal information against loss, unauthorised access, misuse, alteration or disclosure. Measures include restricted access, secure accounts and devices, multi-factor authentication where available, controlled provider access and documented handling procedures.

No online service can guarantee complete security. TavX will respond promptly to suspected privacy or security incidents.

Retention and deletion

TavX keeps personal information only for as long as reasonably necessary for the purpose for which it was collected, to maintain appropriate business records or to meet legal obligations.

Website analytics information is retained according to TavX’s configured Google Analytics settings and periodically reviewed. Foundation Pilot and client information is subject to the approved retention period and secure deletion process established for that engagement.

Privacy incidents

If TavX becomes aware of a privacy incident, it will take reasonable steps to contain and investigate it, reduce potential harm, record the incident and prevent recurrence.

Where a breach has caused or may cause serious harm, TavX will notify the New Zealand Office of the Privacy Commissioner and affected individuals as required by law. International or contractual notification requirements will also be assessed where relevant.

Your privacy rights

You may ask TavX to confirm whether it holds personal information about you, provide access to that information, or correct information you believe is inaccurate. Additional rights may apply under the law of your country.

TavX may need to verify your identity before responding. Information may be withheld where permitted or required by law.

Contact TavX

For privacy questions, access or correction requests, or concerns, contact:

You may also contact the New Zealand Office of the Privacy Commissioner if you are not satisfied with TavX’s response.

Changes to this policy

TavX may update this policy to reflect changes to its services, technology, legal obligations or privacy practices. The effective date at the top of this page will be updated when material changes are made.