Privacy policy

1. Who we are

Camino Digital Limited, New Zealand. Email: pablo@caminodigital.io

Privacy Officer: Pablo Hurford, pablo@caminodigital.io. Pablo is responsible for how we handle personal information and deals with requests and complaints.

Camino Digital is the agency responsible for the personal information described in this policy, except where section 2 says otherwise.

2. Two different ways we might hold your information

a) You dealt with Camino directly

You enquired about our work, bought something from us, booked a call, talked to our AI assistant, ran one of our free tools (including the Privacy Sorted check), subscribed to our emails, or became a client. Camino Digital is the agency responsible for that information.

b) You gave your details to a business that uses a system we built

Camino builds and hosts lead capture systems for other businesses, for example a QR code on a stallholder's stand at an expo or a form on a client's website. If you used one, your details are held in Camino's CRM, tagged to that business. In that case:

• The business you gave your details to is the agency responsible for why it was collected and what it is used for.
• Camino holds it on their behalf as their service provider (s 11 Privacy Act 2020).
• We do not use those contacts for our own marketing, sell or rent them, or merge them into our prospect lists.
• Contacts from different businesses are kept separate by tagging within one shared system.

You can contact either of us. If you are not sure who holds your information, email pablo@caminodigital.io and we will help or point you to the right agency.

3. What we collect

Clients, prospects and subscribers: name and business name; email and phone; website and social details; what you told us about your business (calls, forms, emails, questionnaires and conversations with our AI assistant); files you send us; correspondence and work records; billing details. We never see or store your full card number: Stripe handles payments.

Free tools: for the Privacy Sorted free check, the website address you enter (we read its public pages to score it) and, if you ask for your report, your name and email. For calculators and quizzes, your answers and any contact details you choose to send. Some calculators run entirely in your browser and send nothing.

Section 2b contacts: name and email, sometimes phone; which business's form or QR code you used, and when; your answers on that form.

Automatically: IP address, browser type, pages visited, referring page, time of visit; cookies and analytics (section 10).

4. How we collect it

Almost always directly from you. In limited cases from other sources: publicly available business information used to research a prospective client, referrals, and analytics providers. Under IPP 3A, the first time we contact you we will tell you where we got your details. This policy gives our name and contact details and explains your access and correction rights (section 9). We do not buy contact lists.

We only collect information by lawful means that are fair and not unreasonably intrusive (IPP 4). We take particular care with children and young people, and we never collect information through deception or pressure.

5. Talking to our AI chat and voice assistants

• You are talking to an AI, not a person. Ask for a human at any point.
• We keep a record. Chats are saved; voice conversations may be recorded and transcribed, stored in our CRM with any contact details you give.
• Why: to answer you, follow up, and improve how the assistant answers.
• How: it runs on HighLevel, which uses third-party AI model providers to process the conversation on our behalf.
• Do not share sensitive information (health, passwords, bank details).

Where we build a voice agent for a client, that client is the responsible agency for its calls and must tell callers they are speaking with an AI and that calls may be recorded.

6. Why we use it

To answer enquiries and quote; deliver and support the work; run the free tools you use and send results; invoice and keep required records; send marketing where asked or to existing clients (section 8); improve our websites, assistants and systems; meet legal obligations. Section 2b contacts are used only to operate the system for that business. We do not sell personal information. Ever.

Keeping it accurate (IPP 8). Before we use or disclose your information, we take reasonable steps to check it is accurate, up to date, complete and relevant. Tell us if something has changed and we will fix it.

Unique identifiers (IPP 13). We do not ask for or use government identifiers such as IRD, driver licence or passport numbers. Our systems give your record an internal ID so it can be found, and that ID is only used inside our own tools.

7. Who else sees it

Your information is stored outside New Zealand with providers acting on our instructions. Beyond them, we disclose only to the business in section 2b, where you asked or agreed, where the law requires, or to professional advisers in confidence.

8. Marketing emails

Clients, subscribers and people who download a free resource may get emails about what we are building. Every one has a working unsubscribe, or just reply “stop”. Service emails for paid work continue. Section 2b contacts never get Camino marketing.

9. Your rights

Access (IPP 6) and correction (IPP 7): email pablo@caminodigital.io. We may confirm your identity first. Response as soon as reasonably practicable and within 20 working days, usually free (we will tell you before any charge). You can ask for a statement of correction to be attached. No general right to be forgotten in NZ, but we delete on request where we have no legal or business reason to keep it. Rights are not limited to residents of any other country.

10. Cookies and analytics

Cookies make the site, chat assistant and forms work and show aggregate traffic patterns. We do not profile you personally. Blocking cookies may break the chat assistant. On this site, page analytics come from Vercel Analytics, which is cookieless.

11. How long we keep it

Client records: the relationship plus a reasonable period. Financial records: seven years. Enquiries, chats and calls that go nowhere: removed when that is clear. Section 2b contacts: while we operate the client's system, removed on their instruction or when it ends.

12. Keeping it secure

Need-to-know access, MFA on systems holding personal information, reputable providers, encrypted transmission. No system is completely secure. If a breach is likely to cause serious harm we notify the Office of the Privacy Commissioner and the people affected; for client-held contacts, we tell the client immediately.

13. Complaints

Tell us first at pablo@caminodigital.io. Then the Office of the Privacy Commissioner: privacy.org.nz · enquiries@privacy.org.nz · 0800 803 909.

14. Changes

The date at the top shows the last revision. Material changes to how we handle information we already hold will be told to you, not quietly edited.

15. Contact us

Camino Digital Limited, New Zealand · pablo@caminodigital.io