Privacy Policy

This policy explains what personal information Webgun collects, why we collect it, who we share it with, and what you can do about it. It is written to meet our obligations under the New Zealand Privacy Act 2020.

Who we are

Webgun is a web design and digital marketing company based in West Auckland, New Zealand. We build and host websites and manage search and advertising performance for our clients.

94b Henderson Valley Road, Henderson, Auckland 0612, New Zealand
hello@webgun.nz

What we collect

Information you give us

When you submit a form on this website — a contact enquiry, an audit request, or an application — we collect the details you enter. Depending on the form, that may include your name, email address, phone number, business name, website address, indicative budget, and whatever you write in the message field.

You choose what to put in those fields. Please do not include information you would not want us to hold — a form on a website is not the place for anything sensitive.

Information collected automatically

• Google Analytics 4 — pages viewed, approximate location, device and browser, and how you arrived at the site. Used to understand how the site is performing.
• Meta Pixel — page views and form submissions, used to measure and target our own advertising on Facebook and Instagram.
• Server and security logs — our host records standard request data, including IP address, for delivery, performance and abuse prevention.

Both analytics scripts are loaded lazily, after your first interaction with the page or a short delay, so they do not slow the site down.

How we use it

• To reply to your enquiry and to quote for or deliver work you have asked about.
• To provide, support and improve the services a client has engaged us for.
• To understand how this website performs and to improve it.
• To measure our own advertising.
• To meet legal and record-keeping obligations.

We do not sell personal information, and we do not share it for anyone else’s marketing.

Who we share it with

We use a small number of service providers to run our business. They process information on our instructions and for no other purpose:

• Cloudflare — website hosting, form handling and storage of enquiries.
• Resend — delivering enquiry notification emails to us.
• Google — analytics, and the advertising and search tools we operate for clients.
• Meta — advertising measurement.
• Our own client management system — where enquiries are recorded so we can follow them up.

We may also disclose information where the law requires it.

Google user data

Webgun operates an internal tool that connects to Google APIs so we can manage the advertising and search accounts our clients have asked us to look after. This section sets out how that tool accesses, uses, stores and shares Google user data.

What we access

With the account owner’s authorisation, and only for accounts linked to our Google Ads manager account or to which we have been granted access, the tool reads:

• Google Ads campaign, budget and performance data — impressions, clicks, cost, conversions.
• Google Ads conversion actions and their status, so we can confirm conversion tracking is recording correctly.
• Keyword ideas and search volume estimates, for keyword research.
• Google Search Console and Google Analytics reporting data for the client’s own properties, where we manage those.

The tool can also make a narrow set of changes to a client’s Google Ads account — pausing or re-enabling a campaign, setting a campaign daily budget, and adding negative keywords. Every change requires explicit per-change confirmation by a Webgun staff member and is recorded in an audit log.

How we use it

Solely to provide the service the client has engaged us for: reporting on their account, diagnosing problems, and making the optimisations described above. Nothing else.

How we share it

We do not share, transfer, sell or disclose Google user data to anyone. It is not passed to third parties, data brokers, advertising networks, or any other client.

We specifically do not use Google user data for targeted advertising, do not sell it to data brokers, do not use it to determine creditworthiness or for lending purposes, and do not use it to train generalised or non-personalised artificial intelligence or machine learning models.

How we store and retain it

Google user data is read at the time it is needed and displayed to the Webgun staff member operating the tool. It is not copied into a database or data warehouse. Credentials used to access Google APIs are held in an encrypted password manager, injected at runtime, and are never written to source control or to disk.

Our access ends when the engagement ends or when the client revokes it, whichever is first. A client can revoke our access at any time by removing our manager account or user access in their own Google account settings, and can ask us to delete any retained records by emailing hello@webgun.nz.

Webgun’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Storage and overseas disclosure

The providers listed above are based outside New Zealand and information may be stored on servers overseas, including in Australia, the United States and the European Union. We only use providers that are subject to privacy obligations comparable to those in the Privacy Act 2020, or that we are otherwise permitted to disclose to under that Act.

How long we keep it

We keep enquiry information for as long as we need it for the purpose it was collected — typically while we are in contact with you and for a reasonable period afterwards, so we have a record of the conversation. Client records are kept for the duration of the engagement and for as long as afterwards as our legal and tax obligations require. When information is no longer needed for a lawful purpose, we delete it.

Security

We take reasonable steps to protect personal information from loss, misuse and unauthorised access. Access to enquiry and client data is limited to the people who need it to do their job, credentials are held in a password manager rather than in code or documents, and data is transmitted over encrypted connections.

No system is perfectly secure. If a privacy breach occurs that is likely to cause serious harm, we will notify the people affected and the Office of the Privacy Commissioner as the Privacy Act requires.

Cookies

This site uses cookies and similar technologies for analytics and advertising measurement, as described above. You can block or delete cookies in your browser settings. Doing so will not stop the site working. You can also opt out of Google Analytics using Google’s browser opt-out add-on.

Your rights

Under the Privacy Act 2020 you have the right to ask what personal information we hold about you, to get a copy of it, and to ask us to correct it if it is wrong. Email hello@webgun.nz and we will respond within 20 working days.

If you are not satisfied with how we have handled your information or your request, you can complain to the Office of the Privacy Commissioner.

Changes

We may update this policy from time to time. The date at the top shows when it last changed.

Contact

Questions about this policy, or about the information we hold: hello@webgun.nz.

See also our Terms of Service.