Blue Eagle Limited. Effective 20th October 2026
About this policy
Blue Eagle Limited (‘Blue Eagle’, ‘we’, ‘us’) designs, installs and maintains electronic security for compliance-driven businesses. This policy explains what personal information we collect through blue-eagle.com, why we collect it, who sees it, and how you can see or correct it.
We follow the New Zealand Privacy Act 2020 and its information privacy principles. Our Sydney office also applies the Australian Privacy Principles, described under ‘Sydney office and Australian privacy law’ below.
This policy covers our website, our enquiry and booking forms, the Exposure Check, our industry updates list, and our dealings with prospective clients. It does not cover footage, access records or other data produced by security systems we install for clients. Those belong to the client, who is responsible for them under its own privacy obligations and our service agreement with it.
What we collect and how
We collect personal information only when you give it to us or when your browser sends it as you use the site.
| Where | What we collect |
|---|---|
| Enquiry and contact forms | Name, company, role, phone, email, enquiry type and your message |
| Site assessment booking | The same details, plus the time you choose in our booking calendar |
| Exposure Check | Your sector, your yes or no answers, the score and result band they produce, and your email address if you ask for the Exposure Snapshot |
| Industry updates list | Your email address and the date you agreed to receive updates |
| Phone, email and meetings | What you tell us, and notes we make so we can follow up |
| Site visits (browsing) | Pages viewed, how you reached the site, device and browser type, and an approximate location taken from your IP address |
You do not need to give us your name or email to read the site. You do need to give them to book a site assessment or receive the Exposure Snapshot, because we cannot send either without them.
We do not ask for sensitive information through the site, and we ask that you do not include it in free-text fields. We do not knowingly collect information from children.
How we use it
We use personal information for these purposes, and no others without telling you first:
- Replying to your enquiry, booking and running a site assessment, and preparing quotes and proposals.
- Producing your Exposure Check result and, if you request it, the Exposure Snapshot sent to your email.
- Deciding whether to offer you a site assessment. Each Exposure Check result carries a score based on your sector, the gaps your answers show, the number of sites and how soon a deadline falls. Our sales team uses that score to prioritise follow-up. A person reviews it, and no automated decision is made about you.
- Sending industry updates, only if you opted in. You can unsubscribe at any time using the link in every email.
- Keeping our records accurate, meeting our legal obligations, and improving the site and the Exposure Check from combined, anonymised usage figures.
The Exposure Snapshot is your own self-reported read of your operation. We keep it with your contact record so the person who contacts you has seen the same document you have. If your answers show you are well covered, we say so and do not follow up with a sales approach.
Who sees it and where it goes
Inside Blue Eagle, enquiries and Exposure Check results go to our sales team through [email protected] and our HubSpot account. Enquiries that mention a compliance deadline are also copied to Randy Boon, Security Specialist.
We use a small number of service providers to run the site and our sales process:
| Provider | What it does for us |
|---|---|
| HubSpot | Stores contact records, form submissions, Exposure Check results, the booking calendar and our updates list |
| Google (Analytics, and Maps on the Contact page) | Measures site use and shows our office locations |
| Our website hosting provider [name to be confirmed], within the UBT hosting stack | Hosts the site and its forms |
| Our email delivery service [name to be confirmed] | Sends form confirmations and the Exposure Snapshot |
These providers handle personal information only to deliver their service to us. We do not sell personal information, and we do not give your details to other companies for their marketing.
We may disclose information where the law requires it, or where it is needed to deal with a threat to safety or a suspected offence.
Some of these providers store information outside New Zealand. HubSpot hosts our account in [region, to be confirmed], and Google processes analytics data in several countries. Before relying on any overseas provider, we take reasonable steps to confirm it protects personal information to a standard comparable with the New Zealand Privacy Act.
Cookies and analytics
The site uses cookies, which are small files stored by your browser. Some keep the site working. Others tell us how people use it:
- Analytics cookies (Google Analytics 4) count visits, show which pages are read and where visitors come from.
- HubSpot tracking cookie links your browsing to your contact record once you submit a form, so the person who contacts you can see which sector pages and articles you read. Before you submit a form, the cookie records activity under an anonymous identifier.
You can accept or decline non-essential cookies in the banner on your first visit, and change your choice at any time in your browser settings. Declining analytics cookies does not limit what you can read or do on the site.
Security and how long we keep information
The site runs over an encrypted connection (SSL). Our HubSpot account and email use individual logins, and access is limited to staff who need the information to do their work. We review who has access when roles change.
We keep enquiry, booking and Exposure Check records for [two years] after our last contact with you, then delete or anonymise them. If you are on the industry updates list, we keep your email address until you unsubscribe. Records tied to a quote, contract or maintenance agreement stay for as long as that relationship runs and for the period the law requires us to keep business records.
If we discover a breach of security that is likely to cause you serious harm, we will tell you and the Office of the Privacy Commissioner as soon as practicable.
Your rights
You can ask us for a copy of the personal information we hold about you, and ask us to correct anything that is wrong. We will respond within 20 working days. If we cannot give you the information, we will explain why.
You can also ask us to delete your records, and we will do so unless we need to keep them for a legal or contractual reason, which we will tell you.
To unsubscribe from industry updates, use the link at the bottom of any update. To make any other request, email the privacy officer named below and tell us enough for us to find your record, usually the email address you used.
Sydney office and Australian privacy law
Our Sydney office is at Level 6, 10 Herb Elliott Avenue, Sydney Olympic Park. If you deal with that office, or you are in Australia when you use the site, we handle your information under the Australian Privacy Principles in the Privacy Act 1988 as well as the New Zealand Privacy Act.
In practice that gives you the same rights described above. You can ask for access to, or correction of, your information, and you can ask how we handle it. Information collected through the site is stored with our service providers, including outside Australia in New Zealand and the locations listed above. By giving us your information you accept that it may be held there.
If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au) after raising it with us first.
Questions, complaints and changes
Our privacy officer is [Sam Boon, General Manager]. Contact: [email protected] or 0800 888 655. Post: Blue Eagle Limited, 7-9 Commerce Crescent, Porirua.
If you have a complaint, tell us first and we will respond within 20 working days. If you are not satisfied, you can complain to the New Zealand Office of the Privacy Commissioner (privacy.org.nz).
We will update this policy when our practices change, and publish the new version on this page with its effective date. Where a change affects how we use information you have already given us, we will tell you directly.
Offices: Porirua (7-9 Commerce Crescent), Auckland (The Precinct, 40 Onehunga Mall, Onehunga), Hamilton (2 Daniel Place, St Andrews), Palmerston North (5 Noel Rodgers Place, Milson), Sydney (Level 6, 10 Herb Elliott Avenue, Sydney Olympic Park). All visits are by appointment.