Privacy Policy


Who we are

The Cawthron Institute is referred to as ‘our’, ‘us’, and ‘we’ in this privacy notice.

When we use the term ‘visitor’ or ‘you’, we are referring to the person using our website. When we refer to ‘Personal information’, this is any information that relates to you (or from which you can be identified).

We are committed to ensuring that your privacy is protected and being transparent in the handling of all personal information. Should we ask you to provide certain information by which you can be identified when using this website, then you can be assured that it will only be used in accordance with this privacy statement, the New Zealand Privacy Act 2020 and all other relevant privacy legislation and regulatory requirements (Privacy Laws).
This privacy document explains how we may collect and use personal information from you when you use our website (

What personal data we collect and why we collect it

As part of the normal operation of this website, we collect some personal information from you, including:

  • your contact details (when you fill out a contact form or sign up to our newsletter)
  • details about your business and/or project if you request a quote or more information from us
  • visitor analytics using a privacy focused analytics service.

We also currently use Google Analytics, a third-party service that set cookies.


Google Analytics

This website currently uses Google Analytics to help analyse how customers use the site. These analytical tools use ‘session cookies’, which are text files placed on your computer, to collect standard internet log information and visitor behaviour information in an anonymous form.

The information generated by the Google Analytics cookie about your use of the website, including your IP address, is transmitted to and stored by Google outside New Zealand. The tracking data is stored in a database managed by Google. The tracking data is then used by Google to compile statistical reports on website activity for us to evaluate site use. This allows us to:

  • discover what information is most and least used
  • determine technical design specifications, and
  • help make our sites more useful to visitors.


Why we collect this information (and how we use it)

We may use your information for the following purposes:

Review generalised visitor analytics to improve our products and services.

  • We primarily use a privacy focused analytics tool that anonymises IP addresses.
  • This site uses Google Analytics, as mentioned in the cookies section above.
  • We may use the information to customise the website according to your interests.

To deliver any products/services you have requested.

  • We use your information to deliver the specific information, products or services you have requested. For example, if you have requested further information on our services or content, or wish to subscribe to our newsletter or service, or submit an enquiry through this site. We will only use the email address you provide to us to respond to that request. Without your express consent, we will not use your contact details for any other purpose.


Improving your experience on the website.

  • Cookies are set if you close or interact with a popup on the website to prevent it from loading every time you visit the site and improve your experience on the site.

We ensure that we always have an appropriate legal basis for processing your personal information. For the most part, the processing of your personal information is based either on:

a) your legitimate interests related to us providing you services you have requested or otherwise your customer relationship with us, or
b) your consent, where requested.


How we store your personal information

We are committed to ensuring your personal information is kept secure and confidential and not kept for longer than is necessary for the purpose they were processed.

From time to time we may ask third party service providers to help us manage our information technology systems and provide services to you. Some of these systems may be located in other countries than our area of business, including countries located outside the European Economic Area (EEA).

We will only transfer your information to a third party service provider or overseas, where we are satisfied that adequate levels of protection are in place to protect the integrity and security of any information being processed and compliance with applicable privacy and data protection laws. These measures may include the use of Standard Contractual Clauses, the EU-US Privacy Shield, Swiss-US Privacy Shield or your consent. You may request further information on the legal security measures used for such transfers via the contact details given in this Privacy Notice.


Securing your personal information

We are committed to ensuring that your information is secure. We have implemented appropriate technical and organisational security measures in place to prevent unlawful or unauthorised use, access or accidental loss of personal information. We also seek to ensure our service providers do the same.


Who we share your data with

We do not sell or rent any personal information about you to any third party.

If we are working with a third-party service provider to deliver a service or product you have requested, it may be necessary to share some information with that provider. We are upfront about who we work with. We always ensure the security of such disclosures and transfers in accordance with the applicable privacy and data protection laws.

We may disclose personal information in response to legal process, for example in response to a court order or a subpoena, or in response to a law enforcement agency’s request, or where we believe it is necessary to investigate, prevent or take action regarding illegal activities, and as otherwise required by law. Our agents and contractors may have access to personal information to help carry out the services they are performing for us.

If you request a password reset, your IP address will be included in the reset email.


What rights you have over your data

If you have used our Contact Form, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.


Your general rights

If you wish to stop receiving marketing communications from us then please click on the ‘unsubscribe’ link at the bottom of the relevant mail. If you wish to opt-out completely then please contact us using the details provided below.

In respect of a request for correction, if we think the correction is reasonable and we are reasonably able to change the personal information, we will make the correction. If we do not make the correction, we will take reasonable steps to note on your personal information that you requested the correction.

If you would like us to delete your information from our records, please contact us using the contact details below and we will respond within a reasonable time. Please note that we may be required to retain certain information by law and/or for our own legitimate business purpose.

Before you exercise this right, we will need evidence to confirm that you are the individual to whom the personal information relates.

We may charge you our reasonable costs of providing to you copies of your personal information or correcting that information.


What are cookies?

Cookies are small packets of information stored by your web browser when you visit certain websites, including our website. Cookies are generally used by websites to improve your user experience by enabling that website to ‘remember’ you, either strictly for the duration of your visit (using a ‘Session’ cookie which is erased when you close your browser) or for repeat visits (using a ‘Permanent’ cookie). Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.


How to reject cookies

The procedure for rejecting cookies varies from one browser application to another. If you wish to reject cookies from our site, but wish to accept those from other sites, you may choose the option in your browser settings to receive a notice before a cookie is stored on your device. Please consult the ‘Help’ section of your browser for more information.

To find out more, please consult the following: and By disabling cookies, you may be prevented from accessing some features of our site or certain content or functionality may not be available.


Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website. We have no control over this embedded content, and it is not covered by this privacy policy.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.


Updates to this privacy notice

We reserve the right to update this Privacy Notice at any time and from time to time. The most recent version of the Privacy Policy is reflected by the version date located at the bottom of this Privacy Policy. All updates and amendments are effective immediately upon notice, which we may give by any means, including, but not limited to, by posting a revised version of this Privacy Policy or other notice on this website. We encourage you to review this Privacy Policy regularly to stay informed of changes that may affect you, as your continued use of the website signifies your continuing consent to be bound by this Privacy Policy.


How to contact us

If you have any questions about our approach to privacy or you would like to exercise any of the rights mentioned in this Privacy Notice you can contact our Privacy Officer in any of the following ways:


98 Halifax Street East
Nelson 7010, New Zealand