Legal

Privacy Policy

Last updated: 10 May 2026

1. Who we are

Haumaru Ltd ("Haumaru", "we", "us") is a New Zealand cybersecurity company headquartered in Auckland. We are committed to protecting your privacy in accordance with the New Zealand Privacy Act 2020.

2. Information we collect

We may collect the following personal information:

  • Name, email address, phone number, and company name when you contact us or request a service
  • Technical information such as IP address, browser type, and device information when you visit our website
  • Information provided during security assessments or engagements, as outlined in our service agreements
  • Payment and billing details necessary to process transactions

3. How we use your information

We use personal information to:

  • Provide, maintain, and improve our cybersecurity services
  • Respond to enquiries and communicate about our services
  • Process payments and manage accounts
  • Comply with legal obligations and regulatory requirements
  • Protect the security of our systems and our customers' environments

4. Information sharing

We do not sell or trade your personal information. We may share information with:

  • Trusted service providers who assist in delivering our services (under strict confidentiality agreements)
  • Law enforcement or regulatory bodies when required by law
  • Professional advisors such as lawyers and accountants as necessary

All data processing remains within New Zealand unless otherwise agreed in writing with you.

5. Data security

We implement industry-leading security measures to protect your personal information, including encryption at rest and in transit, access controls, regular security assessments, and continuous monitoring through our SOC.

6. Data retention

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Engagement data is retained in accordance with your service agreement.

7. Your rights

Under the New Zealand Privacy Act 2020, you have the right to:

  • Access your personal information held by us
  • Request correction of inaccurate information
  • Request deletion of your information (subject to legal obligations)
  • Complain to the Office of the Privacy Commissioner if you believe we have breached your privacy

8. Cookies and analytics

Our website uses essential cookies to ensure functionality. We may use analytics tools to understand how visitors interact with our site. You can control cookie preferences through your browser settings.

9. Changes to this policy

We may update this policy from time to time. Material changes will be posted on this page with an updated revision date.

10. Contact us

If you have questions about this privacy policy or wish to exercise your rights, contact us at: