Privacy Policy

How we collect, use and protect personal information

Effective Date: 28 September 2026

1. Introduction

Adeptis Learning Limited (Adeptis, we, us or our) is a company incorporated in New Zealand (company number 9324658, NZBN 9429052664113). We provide leadership development, organisational capability, coaching, assessments, business consulting, learning-platform implementation, hosting and support services.

This Privacy Policy explains how we collect, use, disclose, store and protect personal information when we deal with you directly. This includes when you visit our website, contact us, request information, register for an event, download a resource, subscribe to updates, request a proposal, or act for one of our clients, suppliers or business partners.

We handle personal information in accordance with the Privacy Act 2020 (New Zealand) and other privacy laws that apply to us. Depending on where you are located and our relationship with you, you may have additional rights.

Nothing in this Privacy Policy limits any rights you may have under applicable privacy law.

Privacy Officer: Alex Bozga, Director - privacy@adeptislearning.com

2. If you use our services through your organisation

We comply with New Zealand's Information Privacy Principles under the Privacy Act 2020:

  • This Privacy Policy does not generally govern personal information we process solely on behalf of an organisation that uses our learning-platform, programme, assessment, coaching, consulting or related services.
  • If you access an Adeptis platform, programme, assessment, coaching service or learning resource through your employer or another organisation, that organisation is generally responsible for deciding why and how your personal information is collected and used, and should give you its own privacy notice. We process that information on the organisation's behalf, under our agreement with it and applicable law.
  • If you are a learner, participant or other user of services supplied to an organisation, please contact that organisation first with questions about your learner or participant records. We will assist it as our agreement and the law require.

3. Personal information we collect

We may collect:

  • your name, job title, organisation, professional role, work email address, telephone number, business address, country and time zone;
  • information you provide in an enquiry, contact form, meeting request, event registration, resource-download request, proposal request, email or other communication;
  • account, contract and billing information, including client contact details, purchase and invoice details, payment status and business correspondence;
  • event and programme information, including registration, attendance, feedback, and dietary or accessibility requirements where you choose to provide them;
  • marketing preferences, including subscription status, consent records and opt-out requests;
  • technical and website-use information, including IP address, browser and device type, operating system, approximate location, referring source, pages visited, website interactions, cookie identifiers and diagnostic information;
  • professional information from publicly available business sources, such as company websites, professional directories and public professional profiles, where relevant to a business relationship or enquiry; and
  • any other information you choose to give us.

Please do not send us sensitive personal information through our website unless we ask for it and it is reasonably necessary.

If you choose not to give us information we ask for, we may not be able to respond to your enquiry, register you for an event, provide a resource or supply services.

4. How we collect information

We collect personal information directly from you when you:

  • visit, use or interact with our website;
  • complete a contact, enquiry, booking, event-registration, download or other form;
  • communicate with us by email, telephone, video conference, social media or another channel;
  • subscribe to our communications or register for or attend an event, workshop, programme or meeting; or
  • enter into, manage or discuss a contract or potential business relationship with us.

We may also collect it from other sources, including when your organisation nominates you as a contact person, when someone refers or introduces you to us, or from publicly available professional sources. Where we collect your information from another source, we will take reasonable steps to let you know, usually when we first contact you, unless an exception under the Privacy Act applies.

We collect personal information only where it is reasonably necessary for a lawful purpose connected with our activities.

5. Why we use information

We use personal information to:

  • respond to enquiries and provide the information, demonstrations, proposals, resources, event places or services you request;
  • arrange and administer meetings, events, workshops, programmes, coaching, assessments, consulting and other services;
  • manage relationships with clients, prospective clients, suppliers and partners;
  • negotiate, enter into, administer and enforce contracts;
  • administer accounts, invoices, payments and other commercial records;
  • provide support, service communications, technical assistance and security notices;
  • operate, secure, maintain, improve and develop our website, services, content and programmes;
  • understand website usage and measure the performance of our content and marketing;
  • send marketing communications in line with section 6;
  • protect our people, systems, intellectual property, clients and business from security incidents, fraud, misuse or unlawful activity;
  • comply with legal, regulatory, accounting, tax, insurance and record-keeping obligations; and
  • establish, exercise or defend legal claims.

Where the UK GDPR or EU GDPR applies to our processing of your personal data, our lawful basis may be: performing a contract with you or taking steps at your request before entering into one; our legitimate interests in operating, securing, improving and marketing our business in a proportionate way; complying with a legal obligation; or your consent, where we ask for it. You can withdraw consent at any time. This does not affect processing that happened before you withdrew it.

6. Marketing communications

We may send you information about leadership development, organisational capability, coaching, assessments, consulting, learning platforms, events and resources where you have opted in, where you have otherwise given valid consent, or where applicable law permits it.

Every marketing email identifies Adeptis and includes an unsubscribe link. You can also opt out at any time by emailing privacy@adeptislearning.com. Opting out is free. We will action your request promptly and keep limited information so that we continue to honour it.

Opting out of marketing does not stop non-marketing messages we need to send to respond to you, provide services, manage a contract, protect security or comply with the law.

We do not sell, rent or trade personal information or mailing lists.

7. Cookies and similar technologies

We use cookies, tags, local storage and similar technologies to operate our website, remember preferences, protect security, understand website usage, improve content and measure the effectiveness of our communications.

These may be:

  • strictly necessary: required for essential website functions, security, form submission and other services you request;
  • functional: remembering your settings and preferences;
  • analytics: helping us understand website traffic and usage; and
  • marketing : measuring campaign effectiveness or showing more relevant content or advertising, where enabled.

We use Google Analytics to understand how visitors use our website. It may collect device and browser information, IP-derived approximate location, pages viewed, time on page, traffic source and website interactions. We do not intentionally send names, email addresses, assessment data, coaching information, learner records or other directly identifying information to Google Analytics.

We ask for your consent before using non-essential cookies. You can accept or reject them, and change your choice at any time, through Cookie Settings in our website footer or through your browser settings. You can also use Google's Analytics opt-out browser add-on. If you reject non-essential cookies, the website will still work, although some optional features may not.

8. Who we share information with

We may disclose personal information to:

  • our contractors, facilitators, coaches and professional advisers who need it to perform their work for us;
  • service providers that help us run our business, including website hosting, cloud hosting (Microsoft Azure), analytics, customer relationship management, email, event management, payment, communications, security and support providers;
  • AI and productivity tools that help us draft, summarise or organise communications and documents. We only use these on terms or settings that do not allow the provider to use your information to train its models;
  • our clients, programme sponsors or event partners where this is needed to administer a programme, event, service or contract and we have told you about it;
  • regulators, government agencies, courts, law-enforcement bodies, insurers or auditors where required or permitted by law;
  • parties to a proposed or actual sale, merger, financing or restructuring of our business, subject to confidentiality and privacy protections; and
  • anyone else with your consent or at your direction.

We require service providers that handle personal information for us to protect it and use it only for the purposes we authorise.

9. Overseas disclosure and storage

We are based in New Zealand, but some of our service providers and contractors are located in, or access information from, other countries. Depending on the service, your personal information may be stored or accessed in New Zealand, Australia, the United States, the United Kingdom, the European Union, Singapore, Canada or other countries where our approved service providers operate.

When we disclose personal information overseas, we take the steps required by applicable law to protect it. These may include choosing providers subject to comparable privacy safeguards, using contractual privacy and security protections, using recognised transfer mechanisms such as standard contractual clauses or the UK International Data Transfer Addendum, or obtaining your consent where required.

For information we process on behalf of an organisational client, the hosting region, sub-processors and transfer safeguards are set out in our agreement with that client.

10. Security

We use reasonable technical and organisational safeguards to protect personal information against unauthorised access, loss, misuse, alteration and disclosure. Depending on the system, these include access and authentication controls, encryption in transit and at rest, secure cloud hosting, backups, security monitoring, and confidentiality obligations for our contractors.

No system is completely secure, so we cannot guarantee absolute security. If you think your dealings with us are no longer secure, please contact us immediately.

11. How long we keep information

We keep personal information only for as long as reasonably necessary for the purpose we collected it for, and to meet legal, tax, accounting, insurance and record-keeping obligations, resolve disputes and defend legal claims. As a guide:

  • enquiry and prospective-client records: up to 2 years after our last contact, unless a business relationship follows;
  • client, contract and financial records: 7 years after the end of the relationship or transaction, to meet New Zealand tax and business record-keeping requirements;
  • marketing preferences: while you are subscribed, and a minimal opt-out record afterwards so we can honour your request; and
  • website analytics data: according to our analytics settings, which limit retention to no more than 14 months.

We may keep de-identified or aggregated information that does not identify you, your organisation or anyone else. For information we process on behalf of an organisational client, retention, export and deletion are governed by our agreement with that client.

12. Your privacy rights

Subject to applicable law, you can:

  • ask whether we hold personal information about you and request access to it;
  • ask us to correct information that is inaccurate, incomplete or out of date;
  • withdraw consent where we rely on it;
  • opt out of, or object to, direct marketing;
  • request deletion or restriction of, or object to, certain processing;
  • request a copy of certain information in a portable format; and
  • complain to a privacy regulator.

Some of these rights have legal limits, for example where we must keep information by law or where disclosure would affect someone else's privacy.

To make a request, email privacy@adeptislearning.com with the subject line "Privacy Request", describing your request and enough detail for us to find the relevant records. We may ask you to verify your identity. We will respond within the timeframe required by law. Under New Zealand law, we respond to access and correction requests within 20 working days, subject to any permitted extension.

If we hold your information on behalf of an organisational client, please contact that organisation first. We will help it respond.

13. Complaints

If you have a concern about how we have handled your personal information, please contact our Privacy Officer at privacy@adeptislearning.com. We will acknowledge your complaint, investigate it and respond within a reasonable time.

If you are not satisfied, you can complain to a privacy regulator. In New Zealand, this is the Office of the Privacy Commissioner (privacy.org.nz). Elsewhere, you may be able to contact the Office of the Australian Information Commissioner, the UK Information Commissioner's Office, the Office of the Privacy Commissioner of Canada, Singapore's Personal Data Protection Commission or Malaysia's Personal Data Protection Department.

14. Privacy breaches

If we become aware of a suspected privacy breach, we will investigate, contain and assess it. Where required, we will notify affected individuals, the Privacy Commissioner or other regulators in accordance with applicable law. Where we hold the information on behalf of an organisational client, we will notify and assist that client as our agreement with it requires.

15. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes in our practices, services or legal obligations. The current version will always be on our website with its effective date. If we make a material change, we will take reasonable steps to bring it to the attention of affected people.

16. Contact us

Privacy Officer: Alex Bozga, Director

Privacy enquiries: privacy@adeptislearning.com

General enquiries: contact@adeptislearning.com

Postal address: PO Box 25506, St Heliers, Auckland 1740, New Zealand

Website: www.adeptislearning.com

This Privacy Policy is effective as of 28th September 2026 and supersedes all previous versions.
Regular updates ensure continued compliance with evolving privacy laws and business practices.