Privacy | Legacy Ag

Who is responsible

Legacy Ag Limited (NZBN 9429051510008) operates this website. Use the privacy request form on this page, or write care of Baker Accounting Limited, 127 Franklin Road, Freemans Bay, Auckland 1011.

Enquiries and bookings

We collect the name, email, organisation, enquiry purpose and message you choose to submit so we can respond and manage professional correspondence. Required fields are marked; without a reply address we cannot respond. Do not submit medical records, card details or banking credentials. Cal.com handles appointment scheduling and payment through its providers under its own privacy policy.

Optional website analytics

If you allow analytics, we collect page views, public-section clicks and relative click positions, section reach, scroll depth, time engaged, coarse traffic-source and campaign-medium categories, device and browser categories, country and performance measurements. A random session identifier groups activity and expires after 30 minutes of inactivity. These are pseudonymous statistics, not a claim that you can never be identified.

What analytics excludes

Our behaviour analytics does not record form values, messages, chat content, names, email addresses, payment information, full URLs, search terms or arbitrary campaign text. It does not make screen recordings, capture keystrokes or fingerprint your device. Raw IP addresses are not stored in the analytics database; Cloudflare uses the address to provide country-level location and network services.

Your choice

Optional behaviour analytics starts only after you select Allow analytics. Declining does not affect the website, enquiries or booking. Change your choice at any time using Analytics preferences in the footer. The choice is saved in your browser for 180 days. Global Privacy Control and Do Not Track signals keep optional analytics off, even if you previously allowed it. Withdrawing stops future collection; it does not identify or automatically erase prior session records.

Service providers and overseas processing

Cloudflare hosts the website and its analytics database. Resend delivers contact-form email to our business mailbox. Cal.com and its payment and calendar providers process bookings separately. These providers may process information outside New Zealand. We use them for the stated services; we do not sell enquiry or analytics information or use it for advertising profiles. Cloudflare’s separate cookie-free Web Analytics measures aggregate site performance.

Retention and protection

Detailed behaviour analytics is removed by daily cleanup after 90 days (up to 91 days until the next cleanup). Cloudflare recovery backups can retain deleted data for an additional provider-defined period. Temporary, rotating security identifiers used to limit abuse expire after at most 30 minutes and are deleted by daily cleanup. Enquiries and booking records are retained only as needed for correspondence, service delivery or legal record-keeping. The analytics dashboard requires an access key.

Access, correction and concerns

You can ask what personal information we hold about you and request access or correction using the privacy request form on this page. You may also ask about deletion; legal retention duties may apply. Provide only what we need to locate your correspondence. We cannot reliably identify old random analytics sessions from your name. If a privacy concern is not resolved, you can contact New Zealand’s Office of the Privacy Commissioner at privacy.org.nz.

Privacy requests

Request access or correction.

Privacy requests reach Legacy Ag with enough context to identify the relevant enquiry or correspondence.