Who We Are
This website, the FREE AI Readiness Assessment, the Quinn digital assistant and the Quinn Client Hub (hub.quinnconsult.net) are run by Quinn Consulting Limited, 38 Kensington Avenue, Mount Eden, Auckland 1042, New Zealand ("Quinn Consulting", "we", "us").
For the purposes of the GDPR, Quinn Consulting Limited is the controller of the personal information described in this policy. Our privacy officer is Barrett Quinn, Founder. You can contact us about privacy at info@quinnconsult.net or on +64 9 600 1977.
What We Collect
We only collect what we need. Depending on how you use our services, this can include:
- Contact form: your name, email address, organisation, the topic and timeframe you choose, and your message.
- FREE AI Readiness Assessment: your name, work email, organisation and (optionally) phone number; information about your organisation, such as size, sector and goals; your answers; your generated results; and whether you asked for a call. The assessment is about your organisation, so please don't include sensitive personal information in your answers.
- Quinn, our digital assistant: the messages you type and the assistant's replies. If you ask Quinn to pass on an enquiry, also your name, email, organisation, timeframe and a short summary, which you confirm before anything is sent.
- Email subscriptions: your first name (optional) and email address, and the page you subscribed from.
- Quinn Client Hub (clients only): your name and work email, sign-in records, and the programme information we share with you or you add, such as decisions, approvals and support requests.
- Analytics (only if you accept cookies): pages visited, approximate location, device and browser type, and how you arrived at the site.
- Technical and security information: IP address and basic request details, which our hosting providers log to keep the services secure and working.
- Correspondence: anything you send us by email or phone, and our notes of conversations with you.
We don't knowingly collect special categories of personal information (such as health, ethnicity or religious beliefs), and our services are not intended for anyone under 16.
How We Use It, And Why We're Allowed To
Under the NZ Privacy Act we collect personal information for lawful purposes connected with our business. Under the GDPR, each use needs a lawful basis, shown in brackets:
- To reply to your enquiry and arrange any conversation you ask for (legitimate interests, or steps before entering a contract at your request).
- To produce your AI Readiness report, email you a copy and, with your agreement, follow up about your results (consent, which you give with the tick box, and legitimate interests).
- To run the Quinn assistant and answer your questions (legitimate interests); and to pass on your details only when you confirm (consent).
- To send articles and insights you subscribed to (consent). Every email has an unsubscribe link.
- To manage leads and client relationships in our CRM (legitimate interests in running and growing our business).
- To deliver services to clients, including the Client Hub (performance of a contract).
- To understand how the website is used and improve it, through Google Analytics (consent, given through the cookie banner).
- To keep our services secure, prevent misuse and spam, and meet legal, tax and accounting obligations (legitimate interests and legal obligation).
Automated results. The AI Readiness Assessment scores your answers automatically to produce a report. It is an indicative self-assessment for your organisation and doesn't make any decision about you that has legal or similarly significant effects. A person at Quinn Consulting reviews any follow-up.
AI assistant. Quinn is an AI system, not a person, and can make mistakes. Please don't share sensitive or confidential information in the chat.
Who We Share It With
We don't sell personal information or share it for others' marketing. We use trusted service providers (processors) to run our services, and they may only use the information to provide their service to us:
| Provider | What it does for us | Where data is processed |
|---|---|---|
| Vercel Inc. | Hosts the website and Client Hub | USA and global edge network |
| Supabase Inc. | Database for enquiries, assessments, blog and Client Hub | Sydney, Australia |
| Odoo S.A. | CRM and email marketing | Odoo Online cloud (Odoo S.A. is based in Belgium) |
| Resend Inc. | Sends our website and Client Hub emails | Japan and USA |
| Anthropic PBC | AI model that powers the Quinn assistant | USA |
| Google LLC | Google Analytics (only with your consent) and web fonts | USA and global |
| Microsoft Corporation | Our business email (Microsoft 365) | Microsoft cloud regions |
The newsletter page shows images hosted by LinkedIn, so LinkedIn receives your IP address when that page loads. Links to LinkedIn and other sites take you to services with their own privacy policies.
We may also share information with our professional advisers, with a buyer if our business is sold (under confidentiality), or where the law requires it.
International Transfers
Some of our providers store or process information outside New Zealand and outside the EU and UK. When we send personal information overseas, we take reasonable steps to make sure it is protected to a standard comparable to the NZ Privacy Act (Information Privacy Principle 12). For information covered by the GDPR, we rely on adequacy decisions where they exist (the European Commission recognises New Zealand as providing adequate protection) and otherwise on appropriate safeguards such as the European Commission's Standard Contractual Clauses or the EU–US Data Privacy Framework, where the provider participates.
How Long We Keep It
- Enquiries, assessment results and leads that don't become clients: up to 2 years from our last contact, then deleted or anonymised.
- Client records: for the engagement and then as long as needed for legal, tax and accounting purposes (generally 7 years for financial records).
- Email subscriptions: until you unsubscribe. We keep a record of the unsubscribe so we don't email you again.
- Quinn chat conversations: held in your browser for the session. If you ask Quinn to pass on an enquiry, the conversation is kept with that enquiry.
- Analytics data: kept by Google for the period set in our Google Analytics account (14 months).
Cookies And Similar Technology
We use a small number of cookies and browser storage items:
- Essential: signing in to the Client Hub, remembering your cookie choice, keeping an unfinished assessment in your browser, and keeping your Quinn conversation during your visit. These don't need consent because the service can't work without them.
- Analytics (optional): Google Analytics cookies (names starting
_ga), set only if you click Accept on the cookie banner.
You can change your choice at any time with Cookie settings, also in the footer of every page, or by clearing cookies in your browser.
Your Rights
Under the NZ Privacy Act 2020 you can ask to access the personal information we hold about you and ask us to correct it.
If the GDPR applies to you (for example, you are in the EU, EEA or UK), you also have the right to:
- have your information erased;
- restrict or object to how we use it, including objecting at any time to direct marketing;
- receive your information in a portable format;
- withdraw consent at any time, without affecting what we did before you withdrew it.
To make a request, email info@quinnconsult.net. We may need to confirm your identity. We'll respond as soon as we can, and within 20 working days (NZ) or one month (GDPR). There is normally no charge.
If you're unhappy with how we've handled your information, please tell us first so we can put it right. You can also complain to the Office of the Privacy Commissioner in New Zealand or, if the GDPR applies, to the data protection authority where you live or work.
How We Protect It
We use encrypted connections (HTTPS), access controls that limit who can see what (including row-level security so each Client Hub client sees only their own organisation), password-free sign-in links for the Client Hub, and reputable providers with strong security practices. No system is completely secure. If a privacy breach is likely to cause serious harm, we will notify the Privacy Commissioner and the people affected as the NZ Privacy Act requires and, where the GDPR applies, the relevant authority within 72 hours.
Changes To This Policy
We may update this policy as our services or the law change. The date at the top shows when it last changed. If a change is significant, we'll make it clear on this page and, where appropriate, tell you directly.
Contact Us
Privacy Officer, Quinn Consulting Limited
38 Kensington Avenue, Mount Eden, Auckland 1042, New Zealand
info@quinnconsult.net · +64 9 600 1977