Privacy Policy

Effective date: 13 April 2026

Last reviewed: 13 April 2026

Applies to: bromleygroup.co.nz and all associated business activities

Bromley Group Limited ("we", "us", "our") is committed to protecting the privacy of individuals who interact with our business and website. This Privacy Policy sets out how we collect, use, store, and disclose personal information in accordance with the Privacy Act 2020 (NZ) and its 13 Information Privacy Principles (IPPs).

By using our website or engaging our services, you acknowledge that you have read and understood this Privacy Policy.

1. Who we are

Bromley Group Limited is a civil construction company based in Auckland, New Zealand. We deliver earthworks, drainage, concrete, retaining walls, asphalt, and subdivision civil works across residential and commercial projects.

Business name: Bromley Group Limited

Website: bromleygroup.co.nz

Email: info@bromleygroup.co.nz

Phone: 029 128 5072

Privacy Officer: Jay Price, Bromley Group Limited

Our Privacy Officer is responsible for ensuring our compliance with the Privacy Act 2020 and handling any privacy-related enquiries or complaints.

2. What personal information we collect

We collect personal information only when it is necessary for our business activities. The types of personal information we may collect include:

2.1 Information you provide directly

Full name
Phone number
Email address
Site or property address
Project details, scope, and timing information
Any other information you provide when contacting us via our website form, email, or phone

2.2 Information collected automatically

When you visit our website, we may automatically collect certain technical information, including:

IP address and browser type
Pages visited and time spent on the site
Referring website or search query
Device type and operating system

This information is collected through cookies and website analytics tools (including Google Analytics) and is generally aggregated and non-personally identifying. See Section 8 for more on cookies.

2.3 Information we do not collect

We do not collect sensitive personal information such as health information, financial account details, government-issued identification numbers, or any information relating to children under 16 years of age.

3. Why we collect personal information

We collect personal information for the following purposes (IPP 1 — Purpose of collection):

To respond to enquiries submitted through our website contact form or by phone or email
To assess project requirements and prepare quotes or proposals
To arrange and conduct site visits
To deliver civil construction services
To communicate project updates, invoices, and related correspondence
To comply with our legal and regulatory obligations
To improve our website and services through anonymised analytics data

We will not use your personal information for purposes other than those listed above without your consent, unless permitted by the Privacy Act 2020.

4. How we collect personal information

We collect personal information in the following ways (IPP 2 — Source of personal information):

Directly from you when you submit an enquiry via our website contact form
Directly from you when you contact us by phone or email
Through our website using cookies and analytics tools (see Section 8)
From third parties such as referrers, engineers, or project managers, where necessary and where you would reasonably expect us to receive this information

Where personal information is collected from a third party, we take reasonable steps to ensure that collection is lawful and consistent with the Privacy Act 2020 (IPP 3 — Collection of information from subject).

5. Storage and security of personal information

We take reasonable steps to keep your personal information safe from loss, unauthorised access, use, modification, or disclosure (IPP 5 — Storage and security of personal information). Measures we use include:

Secure email and cloud storage services with access controls
Limiting access to personal information to authorised personnel only
Using reputable third-party platforms (such as Wix) that maintain their own security standards
Not storing personal information longer than necessary

Personal information collected via our website is stored on Wix's servers. Wix maintains internationally recognised security standards. Enquiry information we receive is stored and managed within our business systems.

We will retain personal information for as long as it is required for the purposes for which it was collected, or as required by law (IPP 9 — Retention of personal information). Once information is no longer required, we will take reasonable steps to securely delete or destroy it.

6. Who we share your information with

We do not sell, rent, or trade personal information to third parties. We may share your information in the following limited circumstances (IPP 11 — Disclosure of personal information):

With engineers, surveyors, or subcontractors where necessary to deliver your project and where you would reasonably expect this
With our website platform provider (Wix) and email service provider as part of normal business operations
With Google Analytics for the purpose of aggregated website analytics (non-personally identifying)
Where required by law, regulation, or court order
Where we have your explicit consent

Any third parties with whom we share personal information are required to protect that information in a manner consistent with the Privacy Act 2020.

7. Your rights

Under the Privacy Act 2020, you have the following rights in relation to your personal information:

7.1 Right of access (IPP 6)

You have the right to request access to personal information that we hold about you. We will respond to access requests within a reasonable time frame (generally within 20 working days).

7.2 Right of correction (IPP 7)

You have the right to request correction of personal information that we hold about you if it is inaccurate, out of date, incomplete, or misleading. We will correct or note a request for correction within a reasonable timeframe.

7.3 Right to object to direct marketing

If we use your personal information for direct marketing purposes (for example, to send you information about our services), you have the right to ask us to stop. We will honour such requests promptly.

To exercise any of these rights, please contact our Privacy Officer using the details in Section 10.

8. Cookies and website analytics

Our website uses cookies — small text files stored on your device — to improve your browsing experience and to collect aggregated analytics data about how our site is used.

8.1 Types of cookies we use

Functional cookies: Required for the website to operate correctly (e.g. Wix platform cookies)
Analytics cookies: Google Analytics cookies that collect anonymised data about page visits, duration, and traffic sources. This data does not identify you personally.

8.2 Managing cookies

You can control and manage cookies through your browser settings. Please note that disabling cookies may affect the functionality of some parts of our website. For more information on managing cookies, visit www.allaboutcookies.org.

8.3 Google Analytics

We use Google Analytics to understand how visitors use our website. Google Analytics collects data such as pages visited, time on site, and traffic source. This data is aggregated and used to improve our website. You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on available at tools.google.com/dlpage/gaoptout.

9. Privacy breach notification

Under the Privacy Act 2020, we are required to notify the Office of the Privacy Commissioner (OPC) and affected individuals if a privacy breach occurs that is likely to cause serious harm (IPP — Notifiable privacy breach).

In the event of a notifiable privacy breach, we will:

Notify the Office of the Privacy Commissioner as soon as practicable
Notify affected individuals directly where possible
Take immediate steps to contain the breach and prevent further harm
Document the breach and our response

If you believe your personal information has been subject to a privacy breach, please contact us immediately using the details in Section 10.

10. Contact us and making a complaint

If you have any questions about this Privacy Policy, wish to access or correct your personal information, or have a complaint about how we have handled your personal information, please contact our Privacy Officer:

Privacy Officer: Jay Price

Email: info@bromleygroup.co.nz

Phone: 029 128 5072

We will acknowledge your complaint within 5 working days and aim to resolve it within 20 working days. If you are not satisfied with our response, you have the right to complain to the Office of the Privacy Commissioner:

Office of the Privacy Commissioner

Website: www.privacy.org.nz

Phone: 0800 803 909

Post: PO Box 10094, Wellington 6143, New Zealand

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business practices, legal requirements, or the services we provide. When we make changes, we will update the "Last reviewed" date at the top of this document.

We encourage you to review this Privacy Policy periodically. Continued use of our website or services following any changes constitutes your acceptance of the updated policy.

12. Governing law

This Privacy Policy is governed by the laws of New Zealand. We are bound by the Privacy Act 2020 and its 13 Information Privacy Principles in all our personal information handling activities.

Bromley Group Limited | info@bromleygroup.co.nz | 029 128 5072 | bromleygroup.co.nz