Privacy Policy
Introduction
Natalia Mamea Payroll Consulting (we, us) is committed to protecting your privacy and complying with the New Zealand Privacy Act 2020.
Personal information refers to any details that identify an individual.
This policy explains how we collect, use, disclose, and protect your personal information.
For more details on the Privacy Act, visit www.privacy.org.nz.
Changes to This Policy
We may update this policy from time to time. Any changes will be posted on our website and will take effect from the date of publication.
How We Collect Personal Information
We collect personal information:
- Directly from you when you interact with us (e.g., via our website, email, phone, social media platforms, or when directly engaged with our services).
- From third parties when you have given permission or when the information is publicly available.
Whenever possible, we aim to collect information directly from you.
In the course of providing payroll consulting and assurance services, we may collect, access or process personal information relating to employees, contractors and officers of our client organisations. This may include, but is not limited to, employment terms, remuneration, leave, taxation, payroll calculations, payroll system data, and other employment-related records.
How We Use Personal Information
We use your personal information to:
- Provide and improve our services.
- Communicate with you, including marketing updates (via email, social media or text).
- Process applications or inquiries.
- Comply with legal obligations.
- Use and disclose personal information where necessary to deliver payroll, compliance, assurance or related advisory services to clients, in accordance with our contractual and confidentiality obligations.
- Any other purpose you have authorised.
Sharing Personal Information
We may share your personal information with:
- Service providers who support our business (e.g., IT hosting, data management).
- Regulatory authorities if required by law.
- Any other parties you have authorised.
In rare instances, some service providers may be located outside New Zealand, meaning your information could be accessed offshore.
Where personal information is accessed as part of a client engagement, it is shared only for the purposes of delivering the agreed services and in accordance with the client’s instructions, our contractual obligations and applicable privacy laws.
Protecting Your Information
We take all reasonable steps to safeguard your personal information from loss, unauthorised access, or misuse.
We take all reasonable steps to safeguard your personal information from loss, unauthorised access, use, modification or disclosure, including secure digital storage, restricted access controls, and encrypted transfer where practicable. Personal information accessed or processed as part of a client engagement is handled in accordance with applicable professional, contractual and privacy requirements.
Your Rights
You have the right to:
- Access the personal information we hold about you.
- Request corrections if your details are inaccurate.
To exercise these rights, email us at Natalia@nataliamameaconsulting.co.nz. We may require proof of identity before processing your request. Reasonable costs may apply for providing copies of your information.
Where personal information has been accessed as part of a client engagement, you may also request information about how that data was used, shared or retained, subject to any legal and contractual restrictions.
Internet Use & Cookies
We take precautions to keep online data secure, but sharing information over the internet carries risks. If you follow links to external sites, their privacy policies will apply.
We may use cookies to enhance your website experience. You can disable cookies in your browser settings, but this may limit some website features.
Retention and Disposal of Client Information
Personal information accessed or processed as part of a client engagement is retained only as long as necessary to deliver the services, to meet legal and professional obligations, and in accordance with contractual agreements. Upon completion of the engagement, client data will be securely returned or destroyed unless retention is required by law or agreed otherwise.