Legal
Last updated: 14 August 2026
OnePoint Business Solutions helps New Zealand businesses build, strengthen and transform. Looking after the information people share with us is part of doing that job well.
This policy explains what personal information we collect, why we collect it, how we look after it, where it is stored, and the choices and rights you have. It applies to our website and to the enquiries, resource requests and client relationships that come through it.
The legal entity behind this policy is OnePoint Business Solutions Ltd (NZBN 9429053710215), trading as OnePoint Business Solutions. Throughout this policy, "OnePoint", "we" and "us" mean that business.
We handle personal information in accordance with the New Zealand Privacy Act 2020.
Our Contact form asks for your name, email address, and — if you choose to provide them — your business name, phone number, a description of your business or its stage, the subject of your enquiry, your message, and how you heard about us.
We ask for your first name and email address so we can provide the resource and, if you have asked for it, keep in touch. You can also tick an optional box to receive occasional emails about new resources, business tips and OnePoint updates. That box is optional — you will receive the Toolkit either way.
We record whether you ticked it, the exact wording you were shown, and when. We do that so we can always show what you actually agreed to.
If you request the Toolkit more than once, we update your existing record rather than creating a second one, and we note how many times it has been requested.
When someone arrives at our website from an email, an advertisement, a search result or another website, the web address they arrive on can carry campaign information (for example, "utm_source"). Our website stores that information in your browser's local storage, along with the referring website address and the page you first landed on, and attaches it to a form if and when you submit one. It helps us understand which activity brings people to us. It is not used to build a profile of you or to track you across other websites.
Like most websites, ours receives ordinary technical information as part of serving pages — for example, network and browser request information. When a form is submitted, we store a one-way encrypted "fingerprint" of the submitting IP address rather than the address itself. We use it only to limit automated abuse of our forms.
If you engage us, we will collect the information reasonably necessary for that work — for example, contact details, business information, and records of the advice and services we provide.
We use personal information to:
We do not sell personal information.
We want to be straightforward about this, without overstating it.
__cf_bm. Its purpose is bot management and protecting the site from automated abuse. It is not used for advertising or to profile you.If we introduce analytics or other tracking in future, we will update this policy first.
Our website loads two kinds of content from external providers: web fonts from Google Fonts, and some photographs hosted by Unsplash.
When your browser requests those files, the provider serving them receives the ordinary technical information involved in any web request — such as your IP address, browser and request information, and which file or page prompted the request.
To be clear: loading a font or a photograph does not send those providers anything you type into our forms. Your enquiry, your name and your email address are submitted to OnePoint, not to Google or Unsplash.
The Build a Better Business Toolkit PDF is served through our own website domain infrastructure.
We use reputable managed service providers rather than running our own servers. That means some of your information is stored or processed outside New Zealand. Being specific:
We cannot say that information collected through our website is stored solely in New Zealand, and we do not claim that.
Where an overseas provider holds or processes information solely as our agent — storing or processing it on our behalf, and not using or disclosing it for its own purposes — current guidance from the Office of the Privacy Commissioner indicates that this may not amount to a disclosure of personal information under Information Privacy Principle 12.
That does not reduce our responsibility. We remain accountable for personal information handled by providers acting on our behalf, and for choosing providers we consider appropriate for the information involved.
We have not made, and do not claim to have made, any formal equivalence assessment, certification or specific contractual privacy arrangement beyond the standard terms offered by these providers.
We use managed business systems to organise enquiries, resource requests, communications, consent records and related business records — the same kinds of systems most modern businesses use to keep track of who they are talking to and what was agreed.
We are currently preparing to connect our website to a managed business automation environment so that enquiries and Toolkit requests flow directly into our business records. That connection is built but not yet active. Website submissions are not currently being transferred to it.
When we activate it, enquiry details, Toolkit signup details, consent records and the campaign information described above may be processed through that environment, which is hosted in the United States. Activating that connection will not, by itself, change the purposes for which we collect and use your information. If our information practices materially change, we will update this policy accordingly.
We use AI-assisted tools in some of our internal business workflows for administrative and business-support tasks — for example, organising information, summarising material, or helping to draft a document or reply.
Two things are worth being clear about:
We use judgement about when AI-assisted processing is appropriate and maintain human oversight of AI-assisted work. We do not rely on AI tools to independently make significant decisions about our clients, prospects or engagements.
We treat two kinds of communication differently.
Transactional communications relate directly to something you have asked for — a reply to your enquiry, delivery of a resource you requested, or correspondence about work we are doing for you. These are part of dealing with you.
Marketing communications — occasional emails about new resources, business tips and OnePoint updates — are optional and only sent to people who have opted in.
You can withdraw marketing consent at any time. At present, the way to do that is to email us at info@onepointbs.co.nz and we will action it. Where a marketing email includes an unsubscribe link, you can use that instead.
Access to our enquiry and Toolkit records is restricted to authorised OnePoint people through an administrator login. Our website does not allow public access to those records. Information travels to and from our website over an encrypted connection, and our forms include measures to limit automated abuse.
No system can be guaranteed completely secure, but we take reasonable steps appropriate to the information we hold.
We keep personal information only for as long as we reasonably need it — for the purposes it was collected for, for legitimate business and record-keeping reasons, and to meet any applicable legal obligations.
We do not currently operate an automated deletion schedule for website records.
You can ask us to delete information we hold about you. We will remove it where it is appropriate to do so, but we may need to retain some information where legal, regulatory or legitimate business record-keeping requirements apply. If that is the case, we will tell you.
Under the Privacy Act 2020 you have the right to:
To make a request, email info@onepointbs.co.nz. We may need to confirm your identity before we release information. We will respond as soon as we reasonably can, and within the timeframes set by the Privacy Act.
If you have a question or a concern about how we have handled your personal information, please contact us first at info@onepointbs.co.nz. We would genuinely rather hear about it and put it right.
If you are not satisfied with our response, you can raise the matter with the Office of the Privacy Commissioner:
We will review and update this policy when our practices materially change — including if we introduce analytics or make other changes that affect how we collect, use, store, disclose or process personal information. The "last updated" date at the top shows when it was last revised.