EU/UK Privacy Policy – PrivacyReady.nz
Last updated: 30 September 2025

This website is operated by CSAS Limited, a New Zealand company. The site demonstrates technical alignment with the EU GDPR and UK GDPR. It is not a commercial service and does not provide legal advice.

Our role

• For demonstration purposes, CSAS Limited is the data controller of any personal data submitted here.

• No third-party advertisers or US-based processors are used.

What personal data we collect

• Contact form submissions (name, email, organisation, message).

• Consent preferences managed via Usercentrics/Cookiebot.

• No analytics or tracking cookies are used.

Legal basis for processing

• Consent (where you provide information via the form).

• Legitimate interest (demonstrating a privacy-aligned stack).

How long we keep data

• Enquiry details are retained only as long as needed to respond.

• Demonstration data may be periodically deleted.

Your rights under the EU GDPR and UK GDPR

• Access, rectification, erasure, restriction, objection, portability.

• Withdraw consent at any time.

• Contact dpo@privacyready.nz to exercise your rights.

International transfers

• Data is stored and processed within the European Union (Germany) or in countries that the European Commission and the United Kingdom each recognise as providing adequate protection under the GDPR.
• No data is transferred to the United States or to jurisdictions without adequacy recognition.

Scope and disclaimer
This privacy policy demonstrates GDPR alignment. It does not replace legal advice and should not be relied on as such.