Last updated: 27 August 2026
Ghost Monkey Digital Marketing Agency Limited (“Ghost Monkey”, “we”, “us” or “our”) is a New Zealand-based digital marketing agency.
We are committed to protecting your privacy and handling personal information responsibly. This Privacy Policy explains how we collect, use, store and disclose personal information when you visit our website, contact us, engage our services or otherwise interact with us.
We handle personal information in accordance with the New Zealand Privacy Act 2020 and other applicable laws.
1. Who This Policy Applies To
This Privacy Policy applies to personal information we collect from:
- Website visitors
- Prospective and existing clients
- Client representatives and personnel
- Suppliers, contractors and business partners
- Newsletter subscribers
- People who communicate or interact with us
When we manage advertising campaigns, websites, analytics or other digital services for a client, we may process personal information on that client’s behalf. In those circumstances, the client’s own privacy policy may also apply.
2. Personal Information We Collect
The personal information we collect depends on how you interact with us and may include:
Information You Provide
- Your name
- Business or organisation name
- Job title
- Email address
- Telephone number
- Billing and payment information
- Information submitted through website forms
- Communications, enquiries and support requests
- Marketing preferences
- Feedback, survey responses and testimonials
- Information and materials provided while using our services
Information Collected Automatically
When you use our website or interact with our digital communications, we may automatically collect:
- IP address
- Browser and device type
- Operating system
- General location information
- Referring website or source
- Pages viewed and actions taken
- Date, time and duration of visits
- Advertising and campaign interactions
- Cookie identifiers and analytics information
Client Account and Campaign Information
When providing digital marketing services, we may receive access to:
- Advertising and social media accounts
- Website and content management systems
- Analytics and reporting platforms
- Customer relationship management systems
- Campaign performance information
- Customer or audience data made available by the client
We only access and use this information as reasonably necessary to provide the agreed services.
3. How We Collect Personal Information
We may collect personal information:
- Directly from you
- Through our website and contact forms
- When you request a proposal or engage our services
- During meetings, telephone calls or email communications
- When you subscribe to marketing communications
- Through cookies, pixels, analytics and similar technologies
- Through advertising and social media platforms
- From a client that has authorised us to perform services
- From publicly available business sources
- From third-party service providers where collection is lawful
Where reasonable, we will collect personal information directly from the person concerned.
If you choose not to provide information we reasonably require, we may be unable to respond to your enquiry or provide some or all of our services.
4. How We Use Personal Information
We may use personal information to:
- Respond to enquiries and communicate with you
- Prepare proposals, quotations and service agreements
- Provide, manage and improve our services
- Create and manage advertising and marketing campaigns
- Manage our client and supplier relationships
- Process invoices and payments
- Provide reports, support and account administration
- Operate, maintain and improve our website
- Analyse website traffic and campaign performance
- Personalise content and advertising
- Send newsletters and marketing communications where permitted
- Protect our systems and prevent fraud or misuse
- Meet our legal, regulatory and contractual obligations
- Establish, exercise or defend legal claims
- Carry out another purpose you have authorised
We will not use personal information for a purpose that is materially different from the purpose for which it was collected unless you authorise us or the use is otherwise permitted by law.
5. Client Data
When we process personal information on behalf of a client, the client is generally responsible for determining why that information is collected and how it is used.
We will:
- Process client data only as required to provide the agreed services
- Follow the client’s lawful instructions
- Take reasonable steps to protect client data
- Limit access to people who require it to perform the services
- Notify the client of relevant privacy or security incidents when required
- Return or securely delete client data when reasonably required, subject to legal and operational retention requirements
Clients are responsible for ensuring they have the necessary authority, notices and consents to provide personal information to us.
If you have a privacy question concerning information collected by one of our clients, you may need to contact that client directly.
6. Cookies and Tracking Technologies
Our website may use cookies, pixels, tags and similar technologies to:
- Enable website functionality
- Remember preferences
- Understand how visitors use our website
- Measure website and campaign performance
- Improve our content and services
- Deliver and measure relevant advertising
- Create remarketing or audience groups
These technologies may be provided by third parties, such as website hosting, analytics, advertising and social media providers.
You can manage cookies through your browser settings and, where available, our website cookie controls. Disabling some cookies may affect website functionality.
Where required, we will ask for consent before using non-essential cookies or similar technologies.
7. Marketing Communications
We may send you news, updates and promotional communications where you have consented or where we are otherwise permitted to do so.
Our commercial electronic messages will identify Ghost Monkey and provide a clear method for unsubscribing.
You may unsubscribe at any time by:
- Using the unsubscribe link in the message
- Replying with an unsubscribe request
- Contacting us at info@ghostmonkeynz.com
We will process unsubscribe requests as required by New Zealand law. You may still receive administrative or service-related communications that are necessary for an existing business relationship.
8. When We Share Personal Information
We do not sell or rent personal information.
We may disclose personal information to:
- Employees and contractors who require it to perform their duties
- Website hosting and technology providers
- Cloud storage and email service providers
- Analytics, advertising and social media platforms
- Customer relationship and project management providers
- Payment, accounting and professional service providers
- Photographers, videographers, designers or other approved production partners
- Government, regulatory or law-enforcement agencies where required or permitted by law
- A purchaser or adviser involved in a proposed sale, merger or restructuring of our business
- Other parties you have authorised us to disclose it to
Our service providers may only use personal information for the purposes for which it has been provided, subject to their own legal obligations and applicable agreements.
9. Overseas Service Providers
Some of our technology, cloud storage, analytics, advertising and software providers may store or process personal information outside New Zealand.
Where personal information is disclosed to an overseas person or organisation, we will take reasonable steps to ensure the disclosure complies with the Privacy Act 2020.
Overseas providers may be subject to privacy and data protection laws that differ from New Zealand law.
In some circumstances, information routed through or stored by an overseas service provider may remain legally treated as being held by us rather than disclosed to that provider.
10. Data Security
We take reasonable technical and organisational measures to protect personal information from:
- Loss
- Misuse
- Unauthorised access
- Unauthorised disclosure
- Alteration
- Destruction
These measures may include access controls, passwords, multi-factor authentication, secure service providers, system updates, staff procedures and restricted account access.
No internet transmission or storage system is completely secure. While we take reasonable precautions, we cannot guarantee absolute security.
You are responsible for protecting passwords and access credentials associated with accounts you control.
11. Privacy Breaches
If a privacy breach occurs, we will investigate it and take reasonable steps to limit potential harm.
Where a breach has caused or is likely to cause serious harm, we will notify the Office of the Privacy Commissioner and affected individuals as soon as reasonably practicable, unless an exception under the Privacy Act applies.
12. How Long We Keep Personal Information
We retain personal information only for as long as reasonably necessary to:
- Provide our services
- Maintain business and client records
- Meet tax, accounting and legal obligations
- Resolve disputes
- Enforce agreements
- Maintain system security and backups
Retention periods vary depending on the type of information and why it was collected.
When information is no longer reasonably required, we will securely delete, anonymise or otherwise dispose of it, subject to legal and technical limitations.
13. Accessing and Correcting Your Information
Under the Privacy Act 2020, you may ask us to:
- Confirm whether we hold personal information about you
- Provide access to personal information we hold about you
- Correct personal information that is inaccurate or incomplete
To make a request, contact our Privacy Officer using the details below. We may need to verify your identity before responding.
We will respond within the time required by law. In some circumstances, the Privacy Act allows us to withhold information or decline a request. If this applies, we will explain the relevant reason unless we are legally prevented from doing so.
You may also ask us to delete information. We will consider the request, but deletion rights are not absolute and we may retain information where reasonably necessary or legally required.
14. Third-Party Websites and Platforms
Our website may link to third-party websites, applications or social media platforms.
Those third parties operate under their own privacy policies and terms. We are not responsible for their privacy practices, security or content, and we encourage you to review their policies before providing personal information.
15. Children’s Privacy
Our website and services are intended for businesses and are not directed at children.
We do not knowingly collect personal information from children without appropriate authority. If you believe a child has provided personal information to us without appropriate permission, please contact us.
16. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes to our services, practices, technology or legal obligations.
The latest version will be published on this page with an updated “Last updated” date. Material changes may also be communicated through another appropriate method.
17. Contact Our Privacy Officer
For privacy questions, requests or complaints, contact:
Privacy Officer
Ghost Monkey Digital Marketing Agency Limited
Email: info@ghostmonkeynz.com
Phone: +64 27 583 9919
Location: New Zealand
Please include enough information for us to understand and respond to your request.
18. Privacy Complaints
If you have a concern about how we have handled your personal information, please contact our Privacy Officer first so we can investigate and respond.
If you are not satisfied with our response, you may complain to:
Office of the Privacy Commissioner
Website: www.privacy.org.nz
Telephone: 0800 803 909
