Privacy Policy
How Cyber Security Audits NZ collects, uses and protects personal information, in line with the Privacy Act 2020.
Privacy policy details
What we collect
When you contact us through this site, by phone or by email, we collect the information you provide directly: your name, email address, organisation, approximate staff numbers, and anything you tell us about your enquiry. If you become a client, we also collect the information needed to scope and deliver an audit, which may include details about your systems, policies and staff, as shared by you or your organisation for that purpose.
Why we collect it
We use this information to respond to enquiries, prepare quotes, deliver audit engagements, and meet our own legal and accounting obligations. We do not sell personal information, and we do not use it for anything beyond these purposes without asking first.
Who we share it with
Cyber Security Audits NZ is the audit practice of Gorilla Cyber Security. Information you provide may be handled by staff at Gorilla Cyber Security who work on the audit practice. We do not share personal information with third parties outside Gorilla Cyber Security, except where required by law or where you have asked us to share a report with a named party such as an insurer or broker.
How long we keep it
We keep enquiry and client information for as long as is reasonably needed to deliver our services and meet legal and accounting retention requirements, and delete it when it is no longer needed for those purposes.
Security
We apply reasonable technical and organisational safeguards to protect personal information from loss, misuse and unauthorised access, consistent with the standards we audit our own clients against.
Your rights
Under the Privacy Act 2020, you can ask what personal information we hold about you, request a correction, or ask us to delete it, subject to any legal obligation we have to keep it. To make a request, email audits@cybersecurityaudits.nz or call +64 9 377 8980. If you are not satisfied with our response, you can contact the Office of the Privacy Commissioner at privacy.org.nz.
Changes to this policy
We may update this policy from time to time. The current version always applies, and the date below reflects the last update.
Last updated: July 2026.