Privacy policy
1. Who we are
Lovain Consulting Limited (“Lovain”, “we”, “us”, “our”) is a New Zealand registered company (NZBN 9429053522054) providing AI consulting and website services to businesses. This policy explains how we collect, use, store and protect your personal information in accordance with the New Zealand Privacy Act 2020.
Privacy officer: Avish Kapadia, avish@lovain.ai.
2. Information we collect
We collect personal information that you provide to us directly, as well as information generated through your use of our website and services.
Information you provide: name, email address, phone number, business or organisation name, job title, and any other details you include when you request a consultation, send a website project brief, apply for our pro bono programme, request a review of your AI readiness results, or engage our services.
AI readiness check: your answers and score are calculated in your browser and are not sent to us unless you choose to request a free review of your results.
Information collected automatically: when you visit lovain.ai, we may collect your IP address, browser type, device information, pages visited, time spent on pages and referring website. This is collected through Google Analytics, Cloudflare Web Analytics and standard server logs. To prevent spam, our forms limit how often they can be submitted from the same internet connection; your IP address is not stored with your enquiry. When you send an enquiry we also record the page you sent it from and, if you arrived from a campaign link, which campaign.
Information from third parties: we may receive information about you from platforms where you interact with our content, such as LinkedIn. If we collect personal information about you from someone else, we will let you know, as the Privacy Act requires.
3. How we use your information
We use your personal information to respond to enquiries and provide the services you have requested; schedule and conduct consultations; assess pro bono applications; prepare proposals, reports and deliverables for our engagements; send you information about our services where you have opted in or where we have an existing business relationship; improve our website, services and communications; and comply with our legal and regulatory obligations.
We do not sell, rent or trade your personal information to third parties for marketing purposes.
4. AI and data processing
As an AI consultancy, we want to be transparent about how we handle data in the context of our services.
Client engagement data: during consulting engagements, we may process business data you provide to us (such as operational data, spreadsheets or workflow information) in order to deliver our services. This data is used solely for the purpose of your engagement and is not shared with other clients.
AI tools: where we use AI tools to deliver insights or build solutions for your business, your data is processed in accordance with the terms agreed in your engagement contract. We do not use your business data to train AI models for other purposes.
Anonymised data: we may use anonymised, non-identifiable data derived from engagements to improve our methods, develop case studies or produce industry research. No individual or business can be identified from this data.
5. Basis for processing
We process your personal information on the following grounds: consent, where you have given us clear consent for a specific purpose; contractual necessity, where processing is needed to perform a contract with you or to take steps at your request before entering into one; legitimate interest, where processing is necessary for our legitimate business interests and does not override your rights, including improving our services, maintaining security and communicating with prospective clients; and legal obligation, where the law requires it.
6. Sharing your information
We may share your personal information with:
- Service providers who help us operate our business, including website hosting and form storage (Cloudflare), email (Microsoft 365 and Cloudflare Email Service), website analytics (Google Analytics and Cloudflare Web Analytics), scheduling tools and cloud infrastructure providers. These providers are contractually required to protect your information and may only use it to provide services to us.
- Professional advisers such as lawyers and accountants, where necessary.
- Regulators or law enforcement, where required by law or to protect our legal rights.
We do not share your information with any party for their own marketing purposes.
7. Data storage and security
Your personal information is stored on secure servers operated by our service providers. Enquiries submitted through this website are stored with Cloudflare, with the primary copy in the Oceania region. Other data may be stored in New Zealand, Australia or the United States, depending on the service provider. Where data is transferred outside New Zealand, we take steps to ensure it is protected in a way that is comparable to the Privacy Act 2020.
We take reasonable steps to protect your information from unauthorised access, modification, disclosure or destruction, including encryption in transit, access controls and regular security reviews. No method of electronic storage or transmission is completely secure, so we cannot guarantee absolute security.
8. Cookies and browser storage
We keep this to a minimum:
- Theme preference: if you choose light or dark mode, your choice is saved in your browser’s local storage. It is never sent to us.
- Analytics: on lovain.ai we use Google Analytics cookies to understand how visitors use the site, such as which pages are visited and where visitors come from. We do not load Google Analytics if your browser sends a Global Privacy Control signal.
- Cloudflare Web Analytics: Cloudflare, our hosting provider, counts visits and measures how fast pages load without using cookies or storing anything in your browser.
You can control cookies through your browser settings. Blocking cookies will not stop the website working.
9. Your rights
Under the Privacy Act 2020, you have the right to:
- access the personal information we hold about you;
- ask us to correct information that is inaccurate, incomplete or misleading;
- ask us to delete your personal information, subject to any legal obligations we have to keep it;
- withdraw consent at any time where we rely on your consent, without affecting processing that happened before you withdrew it;
- opt out of marketing communications at any time using the unsubscribe link in our emails or by contacting us.
To exercise any of these rights, contact us at info@lovain.ai. We will respond within 20 working days, as the Privacy Act 2020 requires.
10. Retention
We keep personal information only for as long as we need it for the purposes it was collected for, or as required by law. Website enquiries are deleted automatically 24 months after they are received. Client engagement records are kept for 7 years to meet New Zealand tax and business record-keeping requirements. You can ask us to delete non-essential information earlier at any time.
11. Third-party links
Our website may link to other websites. We are not responsible for their privacy practices or content, and we encourage you to read their privacy policies.
12. Children
Our services are for businesses and business professionals. We do not knowingly collect personal information from anyone under 16. If we learn that we have, we will delete it promptly.
13. Changes to this policy
We may update this policy to reflect changes in our practices, services or legal requirements. The updated policy will be posted on this page with a new “last updated” date.
14. Complaints
If you believe we have breached your privacy, contact us at info@lovain.ai and we will investigate. If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner: PO Box 10094, Wellington 6143, phone 0800 803 909, privacy.org.nz.