Pūnaha website privacy policy

Information we collect

If you send a website enquiry, Netlify collects the details you enter, such as your name, email address, organisation, enquiry type, message and consent. If you book a private demonstration, Microsoft Bookings collects the details you enter, such as your name, email, phone number and optional booking notes. It also records the selected appointment, service and consent. If you email us, we receive your email address and the information in your message.

Our hosting provider may process ordinary technical request information needed to deliver and protect the website, such as an IP address, browser details, requested page and time of access. Google Analytics and Microsoft Clarity also receive limited cookieless measurements unless analytics cookies are allowed. Google may receive cookieless page and event pings with technical information such as the requested page, browser, device and campaign parameters. Microsoft may receive limited pageview and basic interaction information without using an analytics cookie to keep a continuous session. These are still network requests to Google and Microsoft. If you allow analytics, those services may also use analytics cookies, connect activity across pages and provide fuller device, approximate location, interaction, heatmap and session information. We do not send the contents of a website enquiry or Microsoft booking to analytics, and the enquiry form is masked from Clarity.

How we use personal information

We use enquiry information to respond, arrange a demonstration, understand the requested product context and maintain an appropriate business record of the conversation.

We do not sell personal information. We do not use an enquiry to add you to an unrelated marketing list without a clear choice.

• Respond to your request. We use the details needed to understand and answer the enquiry.
• Arrange a demonstration. We may use your contact and organisation details to schedule and prepare the requested discussion.
• Protect the website. Technical information may be processed to operate, diagnose and secure the site.

Service providers and location

The public website and its general enquiry form are hosted by Netlify. Netlify processes and stores form submissions and sends a notification to our public contact mailbox. Technical website information may also be processed by Netlify and its service providers in the locations used to provide that service.

Private demonstration appointments are processed through Microsoft Bookings and stored within Microsoft 365 and Exchange Online. Microsoft and its service providers process the booking details needed to provide appointment scheduling, confirmation messages and Microsoft Teams meeting links.

Google Tag Manager loads with analytics storage denied so Google Analytics can send limited cookieless measurements. Microsoft Clarity also loads in no-consent mode and may collect limited cookieless pageview and interaction information. If you choose Allow, Google and its service providers can use analytics storage for fuller website measurement, and Microsoft and its service providers can use analytics storage for connected sessions, heatmaps, usability insights and session recordings. Advertising storage, advertising user data and personalised advertising remain denied, and Clarity is not permitted to share data with Microsoft Ads.

Input fields and the entire enquiry form are masked from Microsoft Clarity. We do not configure names, email addresses, enquiry text or booking notes as analytics event fields.

We may also use ordinary email and business technology providers to receive, store and respond to an enquiry. We limit their use to providing services to us, subject to their terms and our configuration.

Retention and security

We keep enquiry information only for as long as it is reasonably needed for the conversation, related business records, dispute handling and applicable legal obligations. The appropriate period depends on whether an enquiry becomes an ongoing business relationship.

We use reasonable technical and organisational measures for the website and business records. No internet transmission or storage system can be guaranteed completely secure, so please do not send passwords, private records or sensitive operational information through the enquiry form, booking notes or email.

Access, correction and privacy enquiries

You can choose Allow, Skip or Manage, and later change that choice through Cookie choices in the website footer. Choosing Skip, or leaving the message unanswered, keeps analytics storage denied and does not permit optional Google Analytics or Clarity cookies, while limited cookieless measurement continues. Manage shows the optional analytics-cookie preference. You can also clear this website's local storage through your browser.

You can ask what personal information we hold about you through this website context, request correction, or raise a privacy concern by emailing privacy@punaha.com. We may need to verify the request before disclosing or changing information.

Hot Desk Consultancy Services Limited is based in Wellington, New Zealand. This policy was last reviewed in August 2026 and may be updated when the website or its services change.