Privacy Policy

Effective Date: 7 May 2025 (NZT)

Privacy Policy

Last updated: 7 May 2025

1. Who We Are

The Kiwi Kit Ltd
Unit 6 / 193 Glenda Drive, Frankton, Queenstown 9300, New Zealand
Privacy contact: [email protected]

2. Scope & Consent

By visiting our website, downloading resources, purchasing products, joining our email list, or opting in to SMS messages, you agree that we may process your personal information as described below.

3. Information We Collect

Sensitive immigration details are treated as strictly confidential.

4. How We Use Your Data

• Deliver free resources, webinars, courses, and consultations

• Send product updates, newsletters, promotions (email & SMS)

• Provide SMS reminders and support messages (see § 6)

• Process payments and fulfil orders

• Analyse site performance and improve our services

• Create custom & look-alike audiences for paid advertising
  Legal basis (GDPR-style): legitimate interests in running and promoting our business, plus consent where required (e.g., SMS or email marketing).

5. Advertising, Analytics & Cookies

We use GA4, Microsoft Clarity, Meta Ads, and Google Ads pixels to measure performance and retarget visitors.
You can opt out via your browser settings, Facebook Ad Preferences, Google Ad Settings, or industry opt-out tools (DAA / NAI).

6. SMS Messaging (Twilio A2P 10DLC Compliance)

• We collect your mobile number and explicit SMS consent when you tick the opt-in box or text a keyword.

• No mobile information (phone numbers, consent data, opt-in) is ever shared with third parties or affiliates for marketing or promotional purposes.

• Subcontractors (e.g., Twilio for message delivery, Help Scout for support) receive only what they need to perform their service under confidentiality agreements.

• You may opt out at any time by replying STOP or UNSUBSCRIBE. Standard message/data rates apply.

7. Data Sharing

We do not sell or rent your personal data. We share it only with:

• Service providers under contract (Kajabi, ConvertKit, Twilio, Meta, Google, Stripe/PayPal, Help Scout, Zapier) for hosting, email delivery, payments, analytics, advertising, or support.

• Legal or regulatory authorities if required by law.

8. Retention

• Email/SMS subscriber data: deleted or anonymised 6–12 months after you unsubscribe or become inactive.

• Transaction records: kept 7 years for accounting and tax.

• Analytics logs: retained for up to 26 months (GA4 default) unless we aggregate or delete sooner.

9. Security

The site is served over HTTPS. We rely on reputable vendors that use encryption in transit and at rest, access controls, and regular security audits.

10. Your Rights

Depending on your jurisdiction, you may have rights to:

• Access, correct, or delete your data

• Object to or restrict processing

• Port your data to another provider

• Lodge a complaint with a supervisory authority
  Email [email protected] to exercise any of these rights.

11. Opt-Out & Preference Management

• Email: click the “unsubscribe” link in any message.

• SMS: reply STOP or UNSUBSCRIBE.

• Ads: adjust your preferences in Facebook and Google settings or use browser ad-blocking tools.

12. Children

We do not knowingly collect data from children under 13. If you believe we have, contact us and we will delete it.

13. Changes

We may update this policy occasionally. Material changes will be posted here and, where appropriate, notified by email.

Contact

Questions? Email [email protected] or write to the address above.