Privacy Policy

1. About This Policy

Cello Group Limited (Cello, we, us, our) is committed to protecting the privacy of individuals whose personal information we collect and hold. This Privacy Policy explains how we collect, use, store and disclose personal information in connection with:
‍

• your use of our website at www.cello.co.nz (the Website); and
• our provision of services to customers and engagement with suppliers, partners and other business contacts.
  ‍

This Policy is issued in accordance with the Privacy Act 2020 (New Zealand) (Privacy Act). By using our Website or engaging with us, you acknowledge the practices described in this Policy.

‍

‍

2. What Personal Information We Collect

Personal information is any information about an identifiable individual.
‍

We may collect the following types of personal information:
‍

• Contact and identity details – names, job titles, business addresses, telephone numbers and email addresses.
• Enquiry and correspondence information – information you provide when you contact us through our Website, including via our contact form.
• Expression of interest information – if you register an interest in working at Cello, we will collect relevant professional details such as your CV, work history and qualifications.
• Gated content registrations – if you register to access content such as white papers or technical resources, we will collect your name, email address, and organisation.
• Website usage data – if you access our Website, we may collect technical information such as your IP address, browser type, pages visited and visit duration, including through cookies and analytics tools (see section 7 below).
• Customer and supplier contact data – names, contact details and professional information of individuals at customer and supplier organisations, collected in the course of providing or receiving services.
  ‍

We do not intentionally collect sensitive personal information (such as health, financial or identity document information) through our Website or standard business engagement. If you provide such information to us for a specific purpose, we will handle it in accordance with this Policy and the Privacy Act.

‍

‍

3. How We Collect Personal Information

We collect personal information:
‍

• directly from you, when you complete a contact or registration form on our Website, correspond with us by email or phone, or engage with us in the course of business;
• from your organisation, when you a contact person in a contract or business relationship;
• from publicly available sources, such as company websites, LinkedIn and business registers, where relevant to establishing or maintaining a business relationship; and
• automatically, through your use of our Website via cookies and analytics tools (see section 7).
  
  ‍

4. Why We Collect and Use Personal Information

We collect and use personal information for the following purposes:
‍

• to respond to enquiries submitted via our Website or by other means;
• to provide and manage the services we deliver to customers;
• to communicate with customers, suppliers, partners and other business contacts about our services, proposals and contractual obligations;
• to send invoices and manage payments and accounts;
• to consider expressions of interest and applications for employment or contracting roles;
• to provide access to gated content or resources you have requested;
• to comply with our legal and regulatory obligations;
• to protect the security of our systems, networks and premises; and
• to improve our Website and understand how it is used.
  ‍

We will not use your personal information for other purposes without your consent, unless required or permitted by law.

‍

5. Disclosure of Personal Information

We may share your personal information with:
‍

• our employees and contractors who need it to carry out their roles;
• network operators, resellers, partners and subcontractors who assist in the delivery of our services;
• third-party service providers who support our business operations (such as IT systems, cloud platforms and professional advisers), who are required to handle personal information in accordance with our instructions and applicable law;
• regulatory and law enforcement agencies, where required by law; and
• other parties with your consent.
  ‍

We take reasonable steps to ensure that third parties to whom we disclose personal information protect it in a manner consistent with the Privacy Act.
‍

Personal information is primarily stored and processed in New Zealand. Some information is held in Australia, where we use third-party platforms subject to Australian privacy legislation broadly comparable to the Privacy Act. A small amount of information may be processed outside New Zealand and Australia through the third-party analytics and website tools described in section 7.

‍

‍

6. Security and Retention

We hold ISO 27001 certification for information security management and apply appropriate technical and organisational measures to protect personal information from unauthorised access, disclosure, alteration or loss.
‍

We retain personal information for as long as is necessary for the purpose for which it was collected, or as required by law. In general:
‍

• customer and supplier contact information is retained for the duration of the relevant business relationship and for a reasonable period after it ends;
• enquiry and registration information is retained for a period appropriate to the nature of the enquiry; and
• expression of interest and employment application information is retained for a period of up to 12 months from receipt, unless an ongoing employment relationship results.

When personal information is no longer required, we securely destroy or de-identify it.

‍

7. Cookies and Website Analytics

Our Website uses cookies and analytics tools to collect information about how visitors use the site. This may include your IP address, browser type, pages visited and time spent on the site.
‍

We use the following tools:
‍

• Google Analytics – to understand how visitors navigate and engage with our Website. Google Analytics collects anonymised usage data. For information on how Google handles this data, see Google's Privacy Policy.
• Webflow – our website hosting platform, which also collects certain technical and usage data as part of its standard operation. For further information, see Webflow's Privacy Policy.
  ‍

Your choices. When you first visit our Website, you will be asked to consent to the use of non-essential cookies. You can accept or decline. You can also control cookies through your browser settings, though disabling cookies may affect the functionality of some parts of the Website.
‍
‍

8. Your Privacy Rights

Under the Privacy Act, you have the right to:
‍

• access personal information we hold about you (subject to limited exceptions); and
• request correction of personal information that is inaccurate or out of date.
  ‍

To make a request, please contact us at the details in section 9. We may ask you to verify your identity before responding.

If you have concerns about how we have handled your personal information and are not satisfied with our response, you may contact the Office of the Privacy Commissioner at www.privacy.org.nz.
‍

9. Contact Us

For privacy-related enquiries, requests or complaints, please contact: legal.counsel@cello.co.nz

Legal Counsel, Cello Group Limited Level 1, 100 Tory Street Wellington 6011

‍

10. Changes to This Policy

We may update this Privacy Policy from time to time. The current version will always be available on our Website. Where changes are material, we will take reasonable steps to notify affected individuals.

‍