Privacy Policy
Last updated: 28 June 2026
1. Introduction
This Privacy Policy explains how Auckland Advertising Limited, trading as Page Lab, collects, uses, stores, discloses, and protects personal information.
In this Privacy Policy, “Page Lab”, “we”, “our”, and “us” refer to Auckland Advertising Limited, trading as Page Lab. “You” and “your” refer to visitors to https://pagelab.co.nz/, people who contact us, clients, agency partners, prospective clients, suppliers, contractors, job applicants, and any other person who provides information to us.
Auckland Advertising Limited is a New Zealand limited company. Page Lab is the conversion-focused WordPress website and landing page development branch of Auckland Advertising Limited. Page Lab provides WordPress-based website development, website rebuilds, landing page development, service page development, campaign page development, website improvement work, and related implementation services. We may work with Elementor Pro, WordPress themes, page builders, plugins, forms, analytics tools, tracking tools, CRM integrations, email marketing tools, and other common website technologies. We are not an advertising agency unless this is separately agreed in writing. Our core service is website and landing page development, implementation, and technical build work. Where design, copywriting, advertising, SEO, hosting, maintenance, or strategy services are included, those services will be described in the relevant quote, proposal, agreement, or project scope.
This Privacy Policy applies to information collected through https://pagelab.co.nz/, by email, by phone, through our contact or enquiry forms, through project communications, through payment and invoicing processes, and through any other direct interaction with Page Lab.
We respect your privacy and confidentiality. We aim to collect only the information that is reasonably necessary for our business, our website, our services, and our legal obligations. This Privacy Policy is intended to align with the Privacy Act 2020 and the New Zealand Information Privacy Principles.
If you do not agree with this Privacy Policy, please do not use our website, submit an enquiry, send us project materials, or request our services.
Except as described in this Privacy Policy, we do not sell your personally identifiable information to third parties.
2. Contact details for privacy matters
For privacy-related questions, access requests, correction requests, deletion requests, complaints, or unsubscribe requests, you may contact us through:
Website: https://pagelab.co.nz/contact-us/
Email: [email protected]
Phone: +64 22 580 4444
Postal / business contact address: 14 Owens Road, Epsom, Auckland, New Zealand
We may need to verify your identity before responding to requests about personal information.
3. Information we may collect
We may collect personal information and business information in the following ways:
Information you provide directly to us
This may include your name, email address, phone number, business name, job title, website URL, billing details, message content, project brief, enquiry details, design files or design links, project assets, brand assets, website access details, integration requirements, and any other information you choose to provide.
a. Enquiry and contact form information
If you contact us through our website, we may collect the information shown in the form, the files or links you upload or submit, your IP address, browser user agent, date and time of submission, and any technical data required for spam prevention, security, and form delivery.
b. Project and client information
When you request a website build, website rebuild, landing page build, website improvement, migration, template implementation, integration, support service, or related service, we may collect information necessary to review, quote, build, test, deploy, invoice, and support the project. This may include your design files, Figma links, Adobe XD files, PSD files, images, copy, videos, fonts or font instructions, brand assets, website content, sitemap, page list, page structure, website URLs, existing website information, WordPress website access, staging website access, hosting details, domain or DNS details where required, plugin and theme information, ecommerce or booking setup information where relevant, form integration requirements, CRM integration requirements, email marketing platform requirements, analytics requirements, tracking pixel requirements, payment link requirements, and other technical information relevant to the website or landing page project. Where a project involves an existing website, we may incidentally access personal information already stored in that website, such as form submissions, user accounts, comments, enquiries, customer records, order records, booking records, or analytics information. We will only access such information where it is reasonably necessary for the authorised project work, support, troubleshooting, migration, testing, security, or deployment.
c. Website access and technical credentials
For some projects, you may provide temporary access to your WordPress website, staging website, hosting account, Elementor Pro setup, analytics tools, CRM tools, form tools, or other systems. We use such access only for the purpose for which it is provided and only to perform the work you have requested or authorised.
Billing and payment information
We may collect billing contact details, invoice information, payment status, transaction references, and other records required for accounting, tax, debt recovery, fraud prevention, and business administration. If you pay through an online payment provider, that provider may collect and process payment information under its own privacy and security terms. We do not need, and do not intentionally store, full credit card numbers on our own website systems.
Email, phone, and message information
If you email, call, message, or otherwise communicate with us, we may keep a record of your communication, your contact details, and our response. If you call us, your phone number may be visible to us through calling line identification or similar phone features.
a. Website usage information
We may collect information about how visitors use our website. This may include pages viewed, links clicked, referring websites, approximate location, device type, browser type, operating system, time spent on pages, form interactions, and other usage information.
Server logs and security information
Our website, hosting provider, security tools, and spam prevention tools may record technical information such as IP address, browser user agent, timestamps, URLs requested, error logs, login attempts, and other information necessary to keep the website secure and functioning.
Cookies and similar technologies
We may use cookies, pixels, tags, scripts, local storage, and similar technologies to operate the website, remember preferences, improve security, measure website performance, analyse traffic, improve our services, and support marketing or remarketing activities.
Blog, comment, and public interaction information
If comments or similar public interaction features are enabled on our website, we may collect the information shown in the comment form, the visitor’s IP address, and the browser user agent string to help with spam detection. If Gravatar or a similar service is used, an anonymised string created from your email address may be provided to that service to determine whether you use it. After approval of a comment, your profile picture may be visible publicly in the context of your comment.
Media and uploaded files
If you upload images, documents, design files, or other media to us, those files may contain metadata such as author details, device details, timestamps, embedded comments, revision history, or location data. You should remove any unnecessary metadata before sending files to us.
Newsletter and marketing subscription information
If you subscribe to Page Lab updates, newsletters, alerts, or promotional messages, we may collect your name, email address, subscription preferences, sign-up source, and engagement information such as whether emails are opened or links are clicked.
a. Job application and contractor information
If you send us information in connection with employment, internship, contractor work, or supplier arrangements, we may collect your name, contact details, CV, portfolio, references, work history, skills, tax or payment details, and other information relevant to that relationship.
Information from third parties
We may receive information from third-party services used in our business, such as website analytics tools, advertising platforms, CRM systems, project management tools, accounting tools, payment providers, email platforms, security tools, hosting providers, agency partners, or clients. We use such information only where it is relevant to our website, services, communications, security, legal obligations, or business administration.
4. Why we collect information
We may collect and use information for the following purposes:
- To respond to enquiries and communications.
- To review website, landing page, design, content, technical, integration, and project requirements.
- To prepare quotations and explain project scope.
- To request the resources, login details, assets, and technical information necessary to complete a project.
- To build, test, quality assure, revise, migrate, improve, and deploy websites, landing pages, templates, service pages, campaign pages, forms, and approved integrations.
- To configure or support approved website and landing page integrations, such as contact forms, enquiry forms, booking tools, CRMs, email marketing tools, analytics tools, tracking pixels, payment links, ecommerce-related tools where relevant, and other approved third-party systems.
- To manage project workflow, customer service, and progress updates.
- To provide support for minor build-related fixes after delivery, where applicable.
- To issue invoices, receive payments, process accounting records, and manage debt recovery if required.
- To operate, maintain, secure, and improve our website.
- To detect, investigate, and prevent spam, fraud, malicious activity, unauthorised access, and misuse of our website or systems.
- To improve our services, website content, pricing structure, workflow, and customer experience.
- To send newsletters, updates, promotional messages, or service information where permitted by law or where you have requested or consented to those communications.
- To comply with tax, company, accounting, legal, regulatory, and dispute-resolution obligations.
- To protect our rights, property, business, clients, contractors, and users.
- To perform any other purpose that is directly related to the purpose for which the information was collected.
5. Business and project confidentiality
We understand that website and landing page projects may involve confidential business information, unpublished designs, brand assets, product information, campaign details, customer journey information, pricing information, marketing strategy, advertising plans, analytics requirements, website access details, and internal business processes.
We treat client and agency partner project information as confidential unless:
- the information is already public;
- you authorise us to disclose it;
- disclosure is necessary to perform the services you requested;
- disclosure is required to a contractor, supplier, or service provider who helps us deliver the project;
disclosure is required by law; or
- disclosure is necessary to protect our rights, systems, users, clients, or business.
You should avoid sending us sensitive personal information unless it is genuinely necessary for the project. If your landing page, form, CRM, or website contains personal information about your customers or users, you are responsible for ensuring that you have the right to give us access to that information and that your own privacy notices and consents are appropriate.
6. Website access credentials and client systems
Where you provide website, staging, hosting, WordPress, Elementor, analytics, CRM, form, or other system access, we use that access only for authorised project purposes.
We recommend that clients:
- provide temporary access where possible;
- provide the lowest practical access level required for the work;
- avoid sending passwords by insecure channels;
- disable or remove our access after the project is complete if ongoing support is not required;
- keep their own backups before granting access or approving deployment; and
- avoid sharing credentials that are also used for other systems.
We may keep limited records showing that access was requested, received, used, changed, or removed. We may also keep project notes about the technical configuration required to maintain a business record of the project.
7. Agency partners and white-label work
Page Lab may provide website development, landing page development, website improvement, and related WordPress implementation services to marketing agencies, design agencies, and web development agencies. Some work may be white-label or agency-managed.
If an agency partner provides information about its client, that agency partner is responsible for ensuring that it has authority to provide that information to us. We will generally communicate with the agency partner unless we are authorised to communicate directly with the end client.
Where required to deliver the project, information may be shared between Page Lab, the agency partner, and approved suppliers or contractors involved in the project.
8. Third-party integrations configured for client websites landing pages
Page Lab may configure client websites and landing pages to work with third-party services requested or approved by clients, including email marketing platforms, CRMs, analytics tools, tracking pixels, contact forms, enquiry forms, booking tools, advertising platforms, payment links, ecommerce features, or similar systems.
When Page Lab builds, rebuilds, edits, supports, or integrates a website or landing page for a client, that website or landing page remains the client’s website unless otherwise agreed in writing.
The client is responsible for:
deciding which tools, forms, integrations, tracking systems, cookies, and third-party platforms are used;
ensuring those tools and integrations are lawful and appropriate for the client’s business, users, location, services, and campaigns;
ensuring the client’s own privacy policy, cookie notice, consent mechanism, website terms, form wording, marketing permissions, and data-handling practices are accurate and suitable;
ensuring any personal information collected through the client’s website, landing page, forms, CRM, ecommerce system, booking system, analytics tools, or third-party platforms is handled properly; and
complying with laws that apply to the client’s business, website, users, campaigns, and data handling.
Page Lab may help implement forms, tracking, analytics, CRM connections, email marketing tools, booking tools, payment links, ecommerce features, or other website functionality requested or approved by the client. However, the client remains responsible for deciding what information is collected from its users, why it is collected, how it is used, how long it is kept, and which third-party tools are used on the client’s website or landing page.
Where we access personal information inside a client’s website, CRM, form tool, analytics tool, ecommerce system, booking system, or related platform, we do so only for authorised project, support, troubleshooting, migration, testing, integration, deployment, security, or maintenance purposes.
The privacy practices of third-party tools are governed by the privacy policies and terms of those providers. Page Lab is not responsible for how third-party platforms collect, use, disclose, store, or process information, except to the extent that we directly control their use on our own website.
9. How we use website analytics and marketing tools
We may use analytics, advertising, remarketing, and measurement tools from time to time. These tools may include services such as Google Analytics, Google Search Console, Google Ads, Meta/Facebook tools, LinkedIn tools, email marketing tools, CRM tools, heatmap tools, or similar platforms.
These tools may collect or receive information from our website and elsewhere on the internet and use that information to provide measurement services, improve advertising relevance, prevent fraud, or support marketing activities.
Where required, we will use consent or preference mechanisms to support cookie and tracking choices. You may also be able to manage some tracking preferences through your browser settings, device settings, advertising platform settings, or third-party opt-out tools.
10. Cookies
Cookies are small text files placed on your device through your browser when you visit a website. They are widely used to make websites work, improve efficiency, remember preferences, measure performance, and provide information to website owners.
We may use cookies and similar technologies for the following purposes:
- To allow essential parts of the website to operate.
- To operate our content management system.
- To support contact forms, enquiry forms, spam prevention, and security features.
- To remember whether you have accepted or rejected cookies, where a cookie notice is used.
- To collect information about how visitors use the website.
- To improve website content, layout, usability, and performance.
- To support analytics, advertising, conversion tracking, and remarketing.
- To support embedded content such as videos, maps, social media content, or external media.
- To support login functionality for authorised administrators, editors, or contributors.
- To support comment functionality if comments are enabled.
Some cookies last only for the duration of your visit. Others may remain until they expire or until you delete them.
You can usually disable or delete cookies through your browser settings. If you disable cookies, some website features may not work properly.
11. WordPress-related cookies and comments
Because our website is built using WordPress or WordPress-related technologies, certain WordPress cookies may be used in standard situations.
If you visit a login page, WordPress may set a temporary cookie to check whether your browser accepts cookies. This cookie contains no personal data and is usually discarded when you close your browser.
When authorised users log in, WordPress may set cookies to save login information and screen display choices. Login cookies and screen option cookies last for the periods defined by WordPress or the website configuration.
If an authorised user edits or publishes content, WordPress may save an additional cookie in the browser. This cookie usually contains no personal data and indicates the post ID of the article or page just edited.
If comments are enabled and you leave a comment, you may be able to opt in to saving your name, email address, and website in cookies so that you do not need to fill in those details again when leaving another comment.
12. Emails, newsletters, and service messages
If you subscribe to Page Lab newsletters, updates, alerts, promotions, or similar communications, we may send you emails or other messages about Page Lab, our services, website development, landing page development, WordPress services, website updates, resources, offers, service changes, or related information.
Marketing emails will usually include an unsubscribe link or unsubscribe instruction. You may unsubscribe from a specific type of email while still receiving other necessary service-related emails.
If an unsubscribe link does not work as expected, or if you want to be removed from all active marketing lists, contact us at [email protected] or through https://pagelab.co.nz/contact-us/.
Even after unsubscribing, we may retain limited information where necessary to respect your unsubscribe request, maintain business records, resolve disputes, comply with legal obligations, or prevent misuse.
13. Payment and financial information
For direct clients, we may issue an invoice for each project. For long-term agency partners, we may issue periodic or monthly invoices for completed projects. Payment may be made by bank transfer, online payment, or another payment method agreed with us.
If you use an online payment service, your payment information may be processed by a third-party payment provider. We do not intentionally collect or store full credit card numbers on our own website systems. Payment providers may retain payment information according to their own privacy policy, terms, security standards, and legal obligations.
We may keep invoice, transaction, and accounting records for as long as required for business, tax, accounting, legal, and dispute-resolution purposes.
14. Information we disclose to others
We may disclose personal information or business information where reasonably necessary for the purposes described in this Privacy Policy.
This may include disclosure to:
- employees, directors, contractors, developers, QA personnel, designers, support staff, and other people working with or for Page Lab;
- hosting providers, website administrators, security providers, and technical support providers;
- email, CRM, project management, file storage, communication, and productivity service providers;
- accounting, invoicing, banking, debt collection, and payment service providers;
- analytics, advertising, measurement, and marketing service providers;
- agency partners, where the project is agency-managed or white-label;
- client-approved third-party platforms required for a project, such as CRM, email marketing, analytics, forms, or tracking systems;
- professional advisers, including accountants, lawyers, auditors, or insurers;
- law enforcement, regulators, courts, tribunals, government agencies, or other authorities where required or permitted by law;
another business or owner if we restructure, sell, transfer, or merge part or all of our business, provided reasonable confidentiality protections are applied where appropriate; and
- any other person or organisation where you have authorised the disclosure.
We do not sell your personal information.
15. Third-party content and external links
Our website may include links to third-party websites, social media platforms, embedded content, videos, images, articles, maps, fonts, scripts, or other external resources.
Third-party content may behave as if you visited the third-party website directly. Those third parties may collect information about you, use cookies, embed additional tracking, and monitor your interaction with their content.
This Privacy Policy does not control the privacy practices of third-party websites or platforms. You should review the privacy policies of those third parties before interacting with them or providing information to them.
16. Social media
Page Lab may maintain social media profiles or links, including platforms such as Facebook, LinkedIn, Instagram, X/Twitter, YouTube, or similar services.
If you interact with us through social media, the platform may collect and process information according to its own privacy policy and settings. We may see information you make available to us through that platform, such as your profile name, handle, comments, messages, reactions, or shared content.
17. Public testimonials, case studies, and portfolio material
We will not intentionally publish confidential client project information, private design files, login details, or sensitive business information as public portfolio material without appropriate permission.
If you provide a testimonial, review, quote, case study approval, brand logo approval, or similar permission, we may publish the approved information on our website, social media, sales material, or other marketing channels.
If you later want us to remove or update published testimonial or portfolio information that identifies you or your business, please contact us. We will consider the request and take reasonable steps where appropriate.
18. Information posted publicly on our website
If you post information publicly on our website, such as through comments or similar public features, that information may be visible to other visitors and may be indexed by search engines. We are not responsible for how other people use information that you choose to make public.
We may moderate, edit, refuse, or remove public comments or submissions where we consider it appropriate, including for spam prevention, security, legal compliance, brand protection, or website quality.
19. Information about children
Our website and services are intended for businesses, agencies, professionals, and adults. We do not intentionally market our services to children.
If you are under 18, you should use our website or contact us only with consent from a parent or guardian. If we become aware that we have collected personal information from a child without appropriate consent, we may delete that information unless we are legally required to retain it.
20. Job applications, internships, and contractor enquiries
If you send us information in connection with a job application, internship, contractor enquiry, or supplier relationship, we may use that information to assess suitability, communicate with you, check references, and manage recruitment or engagement processes.
If we do not engage you, we may retain your information for a reasonable period in case another suitable opportunity arises, unless you ask us to delete it and we are not required to retain it for legal or business reasons.
If we engage or employ you, we may collect and retain information relevant to the working relationship, payment, tax, health and safety, performance, access management, and legal obligations.
21. Complaints
If you make a complaint, we may collect and use the information you provide to investigate and respond to that complaint.
If the complaint reasonably requires us to contact another person, contractor, service provider, agency partner, client, legal adviser, insurer, or authority, we may disclose relevant information as necessary to deal with the complaint.
We may also use complaint information in a general, non-identifying way to improve our website, services, workflow, training, and customer service.
22. Storage and security
We take reasonable steps to protect personal information against loss, unauthorised access, misuse, modification, disclosure, or other harm.
Security measures may include SSL/TLS encryption, password protection, access controls, secure hosting, website security tools, spam prevention tools, limited access permissions, backups, staff or contractor confidentiality expectations, and other practical safeguards.
No website, email system, online form, cloud service, or internet transmission is completely secure. You should avoid sending highly sensitive information unless it is necessary. If you need to send passwords, credentials, or sensitive project information, please ask us about the most appropriate way to provide it.
If we become aware of a serious privacy breach, we will assess the situation and notify affected people and/or the Office of the Privacy Commissioner where required by law.
23. Retention of information
We keep personal information only for as long as reasonably necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law.
In general:
- Business, accounting, tax, invoice, and contract records may be kept for at least seven years.
- Project records may be kept for as long as needed to support the project, provide follow-up support, maintain business records, resolve disputes, or protect legal rights.
- Enquiry records may be kept for a reasonable period to manage follow-up, customer service, sales, reporting, and business improvement.
- Website logs and security records may be kept for a period appropriate to security, troubleshooting, and website maintenance needs.
- Marketing subscription records may be kept until you unsubscribe or until the records are no longer required.
- Suppression or unsubscribe records may be kept to ensure we do not contact you again for marketing purposes.
- Access credentials should be removed, disabled, rotated, or deleted when no longer needed, unless ongoing support or a legal/business reason requires retention of limited related records.
- Job application and contractor enquiry information may be kept for a reasonable recruitment or business period unless a longer period is required or permitted by law.
When information is no longer required, we may delete it, anonymise it, archive it, or securely destroy it.
24. Accessing and correcting your information
You may request access to personal information we hold about you. You may also request correction of personal information that is inaccurate, incomplete, outdated, or misleading.
To make a request, contact us at [email protected] or through https://pagelab.co.nz/contact-us/.
We may need to verify your identity before providing access or making corrections. In some situations, we may be allowed or required to refuse access or correction, for example where disclosure would affect another person’s privacy, breach confidentiality, prejudice legal rights, or be contrary to law.
25. Removal or deletion requests
You may ask us to delete personal information we hold about you. We will consider deletion requests and take reasonable steps where appropriate.
We may not be able to delete information where it is required for accounting, tax, legal, security, dispute-resolution, contractual, fraud prevention, backup, or legitimate business record purposes.
If deletion is not practical or legally appropriate, we may limit active use of the information where reasonable.
26. International processing and overseas service providers
Our website, email, hosting, analytics, CRM, file storage, payment, accounting, project management, security, and other business tools may be provided by companies located in New Zealand or overseas.
This means personal information may be stored, processed, accessed, or backed up outside New Zealand.
Where we disclose personal information outside New Zealand, we will take reasonable steps to ensure appropriate protections are in place where required by the Privacy Act 2020, including consideration of Information Privacy Principle 12.
27. Government, legal, and regulatory disclosure
We are subject to the law. We may disclose information to courts, tribunals, law enforcement, regulators, government agencies, or other authorities where required or permitted by law, including under a warrant, court order, statutory request, or other lawful process.
We may also disclose information where necessary to establish, exercise, or defend legal claims, prevent fraud, protect security, recover debts, or protect our rights, users, clients, contractors, or business.
28. Accuracy of website and service information
We aim to keep information on our website accurate and up to date. However, website content, service descriptions, pricing ranges, workflow details, availability, inclusions, timelines, and support terms may change.
This section is not intended to limit your privacy rights. It simply explains that operational details on the website may be updated from time to time.
29. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our website, services, technologies, legal obligations, business structure, or privacy practices.
The updated version will be posted on https://pagelab.co.nz/. The “Last updated” date at the top of this document will indicate when it was last revised.
Your continued use of our website or services after a revised Privacy Policy is published indicates that you accept the updated policy, to the extent permitted by law.
30. Questions
If you have any questions about this Privacy Policy or how Page Lab handles personal information, please contact us:
Website: https://pagelab.co.nz/contact-us/
Email: [email protected]
Phone: +64 22 580 4444
Address: 14 Owens Road, Epsom, Auckland, New Zealand