Privacy policy

Who we are

Jelly Digital Limited ("Jelly Digital", "we", "us", "our") is a New Zealand company, NZBN 9429052326363, providing marketing services to trades and small businesses. This policy explains what personal information we collect, why we collect it, who we share it with, and what you can do about it.

We handle personal information in line with the Privacy Act 2020 and its 13 Information Privacy Principles.

Rhys Humphrys is our Privacy Officer. You can reach him at rhys@jellydigital.nz, on +64 20 4029 9258, or by post at 16E Fisher Point Drive, Freemans Bay, Auckland 1010, New Zealand.

Last updated: 25 August 2026

What this policy covers

This policy applies to jellydigital.nz, to any enquiry form we run on other platforms including Facebook and Instagram, and to the work we do for our clients.

It does not cover other websites we link to. If you follow a link away from our site, that site's own privacy policy applies.

What we collect

When you visit our website

We collect some technical and behavioural information automatically:

  • IP address and approximate location, usually to the city or region
  • Device type, operating system, browser and screen size
  • Pages you visited, how long you stayed, and where you arrived from
  • Clicks, scrolling and mouse movement, recorded as anonymous session replays and heatmaps through Microsoft Clarity

We use session replays to work out where a page is confusing. Clarity is set to mask text entered into forms, so we do not see what you type before you submit it.

When you get in touch, or ask for a free check

Whether you use a form on our website, an enquiry form on Facebook or Instagram, email us or call us, we collect what you give us. That usually means:

  • Your name and the name of your business
  • Email address and phone number
  • Your website address, if you have one
  • Your trade, and the town or area you work in
  • What you told us about your current marketing situation
  • Anything else you choose to put in a message

When you become a client

To do the work, we also collect and hold:

  • Billing and invoicing details
  • Access to your advertising, analytics and website accounts, granted by you
  • Performance data from those accounts, which can include enquiries and phone calls that your customers make to you

If you give us access to accounts holding information about your customers, we treat that information as yours. We use it only to do the work you have engaged us for, and never for our own marketing.

What we do not collect

We do not collect credit card or bank details through our website. We do not knowingly collect information from children. We do not buy contact lists.

Why we collect it

We use personal information to:

  • Answer your enquiry and prepare the free check you asked for
  • Deliver and improve the services you have engaged us for
  • Send invoices and keep proper business records
  • Understand how our website and our advertising are performing, so we can improve them
  • Show our advertising to people likely to be interested, and stop showing it to people who have already been in touch
  • Send you marketing about our own services, where you have agreed to it or where we have an existing business relationship with you

Giving us your information is voluntary. If you choose not to, we may not be able to answer your enquiry or provide our services.

Cookies and tracking

Our website uses cookies and similar technologies, loaded through Google Tag Manager. The services we currently run are:

  • Google Analytics 4. Measures how people find and use our website.
  • Google Ads. Measures which ads lead to enquiries, and supports remarketing.
  • Meta Pixel, for Facebook and Instagram. Measures which ads lead to enquiries, and supports remarketing.
  • Microsoft Clarity. Records anonymous session replays and heatmaps.

Remarketing means you may see our ads on other websites, on Facebook or on Instagram after visiting our site. It does not mean those platforms have told us who you are.

You can block or delete cookies in your browser settings. You can also opt out directly:

Blocking cookies may stop parts of our website working properly.

Who we share it with

We do not sell your personal information. We share it only where we need to:

  • Service providers who run our systems. Webflow for website hosting and forms, Google for email, documents, analytics and advertising, Meta for advertising and enquiry forms, and Microsoft for Clarity. These providers process information on our behalf.
  • Our accountant, and the Inland Revenue Department, for billing and tax records.
  • Anyone you have asked us to deal with on your behalf.
  • Where the law requires it, or to establish or defend a legal claim.

If we ever sell or restructure the business, client and enquiry information may transfer to the new owner. We would tell you before that happened.

Where your information is stored

Most of the providers above store information on servers outside New Zealand, mainly in the United States, Australia and the European Union.

Before disclosing personal information overseas we take reasonable steps to satisfy ourselves that the receiving party is subject to safeguards comparable to those in the Privacy Act 2020, as required by Information Privacy Principle 12. In practice that means relying on the contractual data protection terms these providers publish.

How long we keep it

  • Enquiries that do not become clients. Kept for 24 months, then deleted.
  • Client records. Kept for the length of the engagement, then for 7 years after it ends, which is the period required for business and tax records under New Zealand law.
  • Website analytics. Retained on the settings each platform allows, currently up to 14 months for Google Analytics.
  • Account access. Removed when an engagement ends.

You can ask us to delete your information sooner. We will do that unless we are legally required to keep it.

Keeping it safe

We use access controls, two-factor authentication on our business accounts, and reputable providers who encrypt data in transit and at rest. Only people who need access to do the work have it.

No system is completely secure. If a privacy breach happens that is likely to cause you serious harm, we will notify you and the Office of the Privacy Commissioner, as the Privacy Act 2020 requires.

Getting access, and correcting mistakes

Under Information Privacy Principles 6 and 7 you have the right to ask what personal information we hold about you, ask for a copy of it, and ask us to correct anything that is wrong.

Email rhys@jellydigital.nz. We will respond within 20 working days. There is no charge in most cases. If a request would take a lot of work we may charge a reasonable fee, and we will tell you before doing any of it.

We may need to confirm who you are before releasing information.

Marketing, and how to stop it

Every marketing email we send has an unsubscribe link, and we act on it. This is required by the Unsolicited Electronic Messages Act 2007.

You can also reply to any email, or phone us, and ask to be taken off the list. Stopping marketing does not stop the emails we need to send you about work in progress.

Complaints

If you think we have mishandled your personal information, contact Rhys Humphrys first at rhys@jellydigital.nz. We would rather sort it out directly.

If you are not happy with our response, you can complain to the Office of the Privacy Commissioner at privacy.org.nz, on 0800 803 909, or at enquiries@privacy.org.nz.

Changes to this policy

We update this policy when our systems or the law change. The date at the top of this page shows the current version. If we make a significant change we will say so here.

‍