Privacy

Privacy

Last updated 2026-11-02.

Confidential Risk Consulting (New Zealand) operates this site and follows the New Zealand Privacy Act 2020.

What we collect

Only what you type into the request form: your name, organisation, email address, the named recipients, the purpose, and the business you want researched. We count page visits without cookies and without storing IP addresses.

Why

To confirm the scope of your request, take payment, deliver the brief and keep the business records the law requires.

Where it is kept

In our database (Supabase) and email provider (Resend). Payments are handled by Stripe; we do not see or store card details.

How long

Requests that do not proceed are deleted within 12 months. Records of paid engagements are kept for seven years, as New Zealand tax law requires.

Your rights

You can ask to see or correct the information we hold about you by emailing richard@aetherosint.com. You can also complain to the Office of the Privacy Commissioner (privacy.org.nz).

Research subjects

The briefs we produce are about businesses. Where a public register names a person as a director or shareholder, that name and role are reported as the register records them, and nothing more.