Privacy Policy

Introduction

Leonard Harvey Limited ("Leonard Harvey", "we", "us", or "our") is committed to protecting your privacy and handling your personal information with transparency, care, and respect for your rights under New Zealand's Privacy Act 2020.

This Privacy Policy explains what personal information we collect, why we collect it, how we use it, and your rights in relation to that information. It applies to all interactions with our website at www.leonardharvey.com and any services we provide to you.

By using our website or engaging our services, you agree to the collection and use of information in accordance with this policy.

1. Who We Are

Business name: Leonard Harvey Limited
Trading as: Leonard Harvey
Location: Christchurch, New Zealand
Contact: hello@leonardharvey.com
Website: www.leonardharvey.com

Leonard Harvey is a boutique creative studio providing website design, AI video production, marketing strategy, UI/UX design, and related creative services to businesses across New Zealand and Australia.

2. Information We Collect

We collect personal information in the following ways:

Information you provide directly

When you contact us, submit a form, or engage our services, we may collect:

• Name — to address you personally and manage our relationship
• Email address — to respond to your enquiry and communicate about your project
• Phone number — if provided, to contact you about your project
• Company name — to understand your business context
• Website URL — if you request a website or marketing audit
• Project details and brief — information you share about your project, goals, and requirements
• Budget range — to ensure we recommend appropriate services
• Payment information — processed securely via our payment provider; we do not store card details directly

Information collected automatically

When you visit our website, we automatically collect:

• IP address — for security and analytics purposes
• Browser type and version
• Pages visited and time spent
• Referring website — how you arrived at our site
• Device type — desktop, tablet, or mobile
• Geographic location — country/region level only, derived from IP address

This information is collected via Google Analytics 4 and is used in aggregated, anonymised form to understand how our website is used and how to improve it.

Information from third parties

We may receive information about you from third parties in limited circumstances — for example, if a partner agency refers you to us, or if you connect with us via LinkedIn or social media.

3. How We Use Your Information

We use the personal information we collect for the following purposes:

• Responding to enquiries — to reply to your messages and provide the information you requested
• Delivering services — to design, build, and deliver the work you have engaged us for
• Project communication — to keep you informed about the progress of your project
• Sending quotes and invoices — to provide pricing and process payments for services
• Improving our website — to understand how visitors use our site and make it better
• Marketing communications — only if you have opted in or have an existing client relationship with us (see Marketing section below)
• Legal and compliance — to meet our obligations under New Zealand law

We do not use your information for automated decision-making or profiling that has legal or similarly significant effects on you.

Marketing communications

If you are an existing client or have submitted an enquiry, we may occasionally send you information about our services, new offerings, or relevant updates. You can opt out of these communications at any time by replying to any email with "unsubscribe" or by contacting us at hello@leonardharvey.com.

We do not purchase email lists or send unsolicited marketing to people who have not interacted with us directly.

4. Cookies & Tracking

Our website uses cookies — small text files stored on your device — to help us understand how the site is used and to improve your experience.

Types of cookies we use

Essential cookies
Required for the website to function. These cannot be disabled. They include session management and security cookies.

Analytics cookies
We use Google Analytics 4 to collect anonymised data about website usage — pages visited, time on site, traffic sources, and device types. This data is aggregated and does not identify you personally.

Google Analytics cookies include:

• _ga (expires 2 years)
• _ga_[ID] (expires 2 years)
• _gid (expires 24 hours)

No advertising cookies
We do not use advertising or retargeting cookies. We do not run remarketing campaigns that track you across other websites.

Managing cookies

You can control and delete cookies through your browser settings. Disabling analytics cookies will not affect your ability to use our website — it simply means we receive less information about how you use it.

For more information about cookies and how to manage them, visit www.allaboutcookies.org.

5. Third-Party Services

We use a small number of trusted third-party services to operate our business. Each has its own privacy policy governing how they handle data:

Google Analytics
Website analytics. Data is anonymised and aggregated. Google Privacy Policy: policies.google.com/privacy

Google Workspace (Gmail)
We use Gmail to send and receive email communications. Enquiry form submissions are delivered to our Gmail inbox. Google Privacy Policy: policies.google.com/privacy

Supabase
We use Supabase as our database for storing enquiry and lead data submitted through our website forms. Supabase is SOC 2 Type 2 certified. Supabase Privacy Policy: supabase.com/privacy

Lovable
Our website is hosted on the Lovable platform. Lovable Privacy Policy: lovable.dev/privacy

Xero / payment processors
We use Xero for invoicing and accounting. Payment processing is handled by our payment provider.

We do not sell your personal information to any third party. Ever.

6. Data Retention

We retain personal information for as long as necessary to fulfil the purposes for which it was collected, including meeting legal requirements.

Specifically:

• Enquiry data — retained for 2 years from the date of enquiry, or for the duration of an active client relationship plus 2 years
• Client project data — retained for 7 years following project completion to meet tax and accounting obligations under New Zealand law
• Analytics data — retained for 14 months in Google Analytics (the default retention period)
• Marketing email data — retained until you unsubscribe or request deletion

When data is no longer required, we delete it securely or anonymise it.

7. Security

We take reasonable steps to protect your personal information from unauthorised access, disclosure, alteration, or destruction. These measures include:

• HTTPS encryption on our website
• Password-protected access to systems containing personal data
• Limited access to personal data — only team members who need it to perform their role
• Regular review of our data handling practices

No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security.

If you believe your personal information has been compromised, please contact us immediately at hello@leonardharvey.com.

8. Your Rights

Under the New Zealand Privacy Act 2020, you have the following rights:

Right to access
You may request a copy of the personal information we hold about you at any time. We will respond within 20 working days.

Right to correction
If you believe information we hold about you is incorrect or out of date, you may request that we correct it.

Right to deletion
You may request that we delete personal information we hold about you, subject to our legal obligations to retain certain records.

Right to object
You may object to us using your personal information for marketing purposes at any time.

Right to complain
If you believe we have breached the Privacy Act 2020, you have the right to make a complaint to the Office of the Privacy Commissioner at www.privacy.org.nz.

To exercise any of these rights, please contact us at: hello@leonardharvey.com

We will respond to all privacy requests within 20 working days.

9. Children's Privacy

Our website and services are not directed at children under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us and we will delete it promptly.

10. Links to Other Websites

Our website may contain links to third-party websites — including client websites and portfolio work. We are not responsible for the privacy practices of those websites and encourage you to review their privacy policies independently.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements.

When we make significant changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

Continued use of our website after changes are posted constitutes your acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy, how we handle your personal information, or wish to exercise any of your privacy rights, please contact us:

Leonard Harvey Limited
Christchurch, New Zealand
Email: hello@leonardharvey.com
Website: www.leonardharvey.com

We are committed to resolving any privacy concerns promptly and transparently.