Privacy Policy.

Azonic Limited is a New Zealand company based in Auckland. We are responsible for the personal information we collect through azonic.ai, our website forms, recruitment activities, publishing administration and related correspondence. We handle that information in accordance with the New Zealand Privacy Act 2020 and other privacy laws where they apply.

This policy concerns our public website and the activities described here. Information an agency or enterprise processes through Vantage, Lighthouse or a separate pilot is governed by the relevant customer agreement, privacy notices and data-processing arrangements. This website policy does not authorise us to use a customer's investigation data for unrelated purposes.

This policy explains our practices; visiting the website is not, by itself, consent to every use of personal information. Where a particular activity requires your consent, that consent must be obtained separately.

The information we receive depends on how you interact with us. Fields marked as required are needed to handle that request. Other fields are optional. If you do not provide required information, we may be unable to respond, consider an application or provide access.

• Enquiries and briefing requests: your name, work email, organisation, role, country or region, organisation type, team size, intended use, the page from which you submitted the enquiry, and your message. We may associate an enquiry with an existing organisation record using the work email domain.
• Waitlist or access requests: your email address, submission date and subsequent correspondence about your interest in Azonic.
• Recruitment: your name, email, phone number, role applied for, work eligibility, CV, professional profile or portfolio links, application notes and recruitment correspondence. If you include referees or other people's details, make sure you are entitled to share them.
• Publishing accounts and contributions: authorised users' names, email addresses, password authentication records, account roles, login/session information, author biographies, uploaded media, article drafts, revisions, review feedback and publication details.
• Correspondence: information you send by email or otherwise provide when communicating with us, including information needed to investigate a privacy request or a technical issue.

When your browser connects to the site, our hosting and security providers process technical information such as IP addresses, request times, requested pages or files, browser and device information, referring pages, and error or security events. This helps deliver the site, diagnose failures and prevent abuse. Technical logs can contain personal information even when a separate analytics service reports only aggregated statistics.

Our analytics tools can also collect page views, navigation, approximate location, device/browser details and interactions such as clicks and scrolling. Microsoft Clarity provides heatmaps and session replay. Cookies, analytics and your choices are described below.

Do not include passwords, confidential case information or personal details in website URLs. URLs and referring pages may be processed by hosting, security or analytics services.

We may receive professional contact information from someone making an introduction, your organisation, a recruiter or a referee, or from a professional profile or portfolio you ask us to consider. We may also use existing contact or organisation records when responding to you. We use this information for the relevant enquiry, relationship or recruitment purpose, rather than treating an introduction as permission for unrelated uses.

Where we collect personal information about you indirectly, we take reasonable steps to let you know about the collection, its purpose, intended recipients, who holds it and your access and correction rights, unless an exception under applicable law applies. New Zealand's indirect-collection notification requirement, information privacy principle 3A, took effect on 1 May 2026. This general policy does not replace an individual notice where one is required.

• Privacy Commissioner: indirect collection

We use personal information for the purpose for which it was collected, a directly related purpose, or another use authorised or required by law. Our website forms are intended for professional enquiries and recruitment, not for submitting evidence or reporting emergencies.

Where European or UK data-protection law applies, the relevant basis may be taking steps at your request before a contract, performing a contract, meeting a legal obligation, our legitimate interests in operating and securing the website and handling business enquiries or recruitment, or consent where required. We consider the effect on your rights when relying on legitimate interests.

• Responding to enquiries, arranging briefings, assessing requests for access and maintaining relevant business correspondence.
• Assessing applicants, managing the recruitment process, contacting applicants and sending application confirmations or internal recruitment notifications.
• Authenticating authorised publishing users, enforcing permissions, reviewing contributions and publishing approved articles and author information.
• Delivering and improving the website, understanding its use, fixing faults and protecting against spam, fraud, unauthorised access and other abuse.
• Handling requests and complaints, maintaining appropriate business records, and meeting legal obligations or establishing, exercising or defending legal rights.

The website is hosted on Vercel. The following services support the website and its associated workflows. Which providers receive information depends on the feature you use. Providers may use their own infrastructure and subprocessors; their privacy information is linked below.

We do not sell enquiry records, applicant information or publishing-account details. Service providers receive information needed for their role. Some analytics providers also process service data for their own purposes under their published terms and privacy notices, as explained in the analytics section.

• Vercel: website hosting and delivery, server-side processing, operational logs, Web Analytics, and Blob storage for uploaded CVs and publishing media.
• Neon (part of Databricks): database hosting for publishing content, author records and authorised CMS accounts where the publishing system is enabled. Payload is the CMS software running within our application, rather than a separate analytics service.
• Attio: management of contact enquiries, professional contacts, organisation associations, job applications and recruitment records.
• Google: Google Analytics 4 and Google Sheets for waitlist records where that workflow is used.
• Microsoft: Clarity usage analytics, heatmaps and session replay.
• Cloudflare: Turnstile security checks on forms and email delivery for recruitment confirmations and notifications.

• Vercel privacy
• Neon / Databricks privacy
• Attio privacy
• Google privacy
• Microsoft privacy
• Cloudflare privacy

Basic, cookieless Vercel Web Analytics runs by default. Google Analytics and Microsoft Clarity are disabled until you select Accept cookies. Reject cookies disables all three without preventing normal browsing, form submissions or CMS sign-in. Use Cookie settings in the footer to change your choice. We remember the choice in local browser storage for up to 180 days, unless you clear that storage or we need to ask again. Withdrawing consent reloads the page to stop already-loaded analytics scripts and removes the analytics cookies we can access on our domain. It does not erase historical records or third-party cookies outside our control.

Essential functions include security verification and session cookies for authorised CMS users and draft previews. Public visitors do not need a publishing account to read articles. Blocking essential cookies or security scripts may prevent sign-in, previews or form submissions from working.

Vercel Web Analytics provides aggregated usage statistics without analytics tracking cookies. Its published documentation describes request-derived visitor identification that is discarded after 24 hours. This does not mean hosting logs contain no IP addresses, or that all analytics reports are deleted after 24 hours.

Google Analytics 4 uses cookies such as _ga to distinguish browsers and sessions and measure site usage. Google processes information about use of its services under its own policies. You can use Google's Analytics opt-out browser add-on or browser tracking controls.

Microsoft Clarity records website interactions for heatmaps and session replay and can use first-party and third-party cookies, including _clck and _clsk. Microsoft may use collected information for purposes described in its privacy statement, including advertising, and non-personal service data to improve products and support research and development under its Clarity terms. Avoid sending sensitive material through general website fields.

You can block or delete cookies using your browser's settings and use tracking-protection tools. These choices apply to the browser or device where you make them, and deleting cookies does not delete information already held by us or a provider. Contact us if you need help understanding the information associated with your interaction with the site.

Cloudflare Turnstile processes device and interaction signals to distinguish legitimate visitors from automated abuse. It is used for website security, separately from marketing or usage analytics.

• Vercel Analytics data practices
• Google's use of partner-site data
• Google Analytics opt-out
• Clarity terms
• Turnstile Privacy Addendum

We limit internal access to people who need information for the relevant work, such as handling an enquiry, assessing an application, maintaining the site or reviewing an article. We may also share information with professional advisers where needed, when you authorise us to do so, or where disclosure is permitted or required by law. A request from a third party does not automatically entitle that party to your information.

Approved articles, author names and biographies, and media used in published content are public. They may appear in search engines, RSS readers, archives and other people's copies. Removing information from our site cannot guarantee removal of copies held elsewhere. Draft articles and internal review notes are not intended for public access.

If ownership of our business changes, relevant records may be disclosed to advisers and prospective or new owners where permitted by law, subject to safeguards appropriate to the transaction and the sensitivity of the information.

Our providers operate internationally. Personal information may be stored, accessed or processed outside New Zealand, including in Australia and the United States and in other locations used by a provider or its authorised subprocessors. We do not promise that all website information stays in New Zealand or in one data-centre region.

Where an overseas provider acts only as our agent for storage or processing, we remain responsible for information entrusted to it under the New Zealand Privacy Act. Where a transfer is an overseas disclosure covered by information privacy principle 12, we must have an applicable basis for it, such as comparable privacy safeguards or another permitted ground. Where additional international-transfer rules apply, those requirements must also be met.

You can contact us for information about the arrangements relevant to your enquiry, application or account. A customer deployment's hosting and data-residency commitments are determined by its separate agreement.

• Privacy Commissioner: overseas disclosures

We retain personal information for no longer than is needed for a lawful purpose. The appropriate period depends on the type of record, whether an enquiry or recruitment process is ongoing, the relationship with you, legal record-keeping requirements and any dispute or investigation. There is no single retention period for every website record.

Enquiry and waitlist records are kept while needed to handle your request and relevant follow-up. Recruitment information is kept for assessment and necessary recruitment records; we seek your consent before keeping an unsuccessful application on file for future vacancies. Publishing accounts, revisions and security records are retained as needed to manage access, editorial accountability and security. Published articles may remain available as part of our publication archive.

When information is no longer needed, we delete or de-identify it, subject to applicable legal requirements. Backups and provider logs may expire on separate schedules. You can ask us about a particular record or request deletion; we will explain if there is a lawful reason to retain it. This policy does not promise automatic deletion after a fixed number of days.

We use measures appropriate to the information and the service, including encrypted connections, restricted credentials, publishing roles and access-controlled storage. CVs are stored in private storage and made available to the recruitment workflow through download links; anyone given such a link should treat it as confidential. No website, email system or storage service can be guaranteed completely secure.

Do not use our general contact form or ordinary website uploads to send classified material, active case evidence, victim or suspect records, passwords, government identity documents or other highly sensitive information. Ask us to agree an appropriate channel first. The website is not an emergency service or a crime-reporting portal.

If a privacy breach has caused, or is likely to cause, serious harm, we will notify the New Zealand Privacy Commissioner and affected people as soon as practicable where required by law, subject to any applicable exceptions. Suspected security issues can be reported to security@azonic.ai.

• Report a security issue

Under the New Zealand Privacy Act, you can ask whether we hold personal information about you, request access to it and ask for a correction. If we decline a correction, you can ask us to attach a statement of the correction sought. We may need reasonable information to verify your identity or the authority of someone acting for you.

We will respond to access or correction requests as soon as reasonably practicable and normally within 20 working days, subject to lawful extensions or other applicable rules. If we withhold information or extend the response period, we will explain the basis and your complaint options as required by law. The response deadline is not a promise that every request can be fully completed within that period.

Depending on the law that applies to you, you may also have rights to request deletion, restrict or object to processing, receive certain information in a portable format, or withdraw consent. These rights are not absolute, and New Zealand law does not provide a general right to erasure in every situation. Withdrawing consent does not affect processing that was lawful before withdrawal.

Send requests to legal@azonic.ai with enough detail to identify the interaction or records concerned. Please do not send an identity document unless we have explained why it is necessary and how to provide it appropriately.

• Privacy Commissioner: access and correction

Submitting an enquiry or application allows us to respond about that request. It does not require you to agree to unrelated marketing. If you receive promotional communications from us, you can use the unsubscribe option provided or ask us to stop at legal@azonic.ai. Necessary service, recruitment or legal correspondence may still be sent where appropriate.

The website is directed at professional and organisational audiences and is not designed to collect information from children. If a child has supplied information that should not have been collected, contact us so we can assess and address it.

Links to external websites and professional profiles lead to services with their own privacy practices. Embedded YouTube or Vimeo videos connect to their provider when you choose to play them; the provider may then process your IP address, device details, viewing activity and cookies under its own policies.

We review this policy when our website practices or legal obligations change. The date above identifies the latest revision. If a change materially affects how we use information already collected, we will provide additional notice or obtain consent where required; updating this page does not retrospectively authorise an incompatible use.

Contact our privacy contact at legal@azonic.ai if you have a question, want to exercise a right or wish to complain. Tell us what happened and how you would like us to resolve it. You can also complain to the Office of the New Zealand Privacy Commissioner, or another privacy regulator where applicable. You do not waive that right by using this website.

• Make a complaint to the Privacy Commissioner