Privacy policy

Last updated: 23 October 2026

This Privacy Policy explains how Reboot Enterprise Limited (NZBN registered, trading as Reboot, "we", "us", "our") collects, uses, discloses and protects personal information. We are bound by the Privacy Act 2020 (New Zealand) and its Information Privacy Principles. Where we handle personal information for clients in Australia or elsewhere, we also take reasonable steps to meet the privacy laws that apply there.

By using our website at reboot.nz (the "Site"), contacting us or using our services, you agree to the practices described in this policy.

1. Who we are

Reboot Enterprise Limited, Unit 1, 55 Cabourne Drive, Glenview, Hamilton 3206, New Zealand. Privacy enquiries: use the details on our contact page and mark your message "Privacy".

2. What we collect

Information you give us. When you enquire, request a quote, book a call, chat with us, subscribe to updates or become a client, we may collect your name, job title, organisation, email address, phone number, postal address, the content of your messages and any other information you choose to provide.

Information collected automatically. When you use the Site we collect technical information such as IP address, browser and device type, pages visited, referring page, approximate location derived from IP address, and the date and time of visits. This is collected through server logs, our content delivery provider and privacy-respecting analytics. See section 7 on cookies.

Information from clients and their systems. When we provide managed IT, support, development or hosting services we may have access to personal information held in our clients' systems (for example mailboxes, user directories, files, databases and application data). We handle that information only as instructed by the client, under our service agreement with them, and only to the extent necessary to provide the services. The client remains responsible for the collection of that information and for notifying the individuals concerned.

Information from third parties. We may receive information about you from our partners and suppliers (for example Microsoft, 3CX, LastPass, Tawk.to), from publicly available sources, and from referrals.

3. Why we collect it

We collect and use personal information to:

respond to enquiries, provide quotes and communicate with you;
deliver, support, secure, monitor and improve our services;
administer accounts, licences, subscriptions and billing, and collect payment;
send service notices, security alerts, renewal reminders and other operational communications;
send marketing about our services where you have opted in or where permitted by law (you can opt out at any time);
maintain security, detect and prevent fraud, abuse and unauthorised access, and keep audit records;
comply with our legal obligations and enforce our agreements; and
analyse how the Site and our services are used so we can improve them.

We will not use personal information for a purpose that is not connected with the purpose for which it was collected unless you authorise it or the Privacy Act permits it.

We do not sell personal information. We may share it with:

Service providers and partners who help us operate, such as hosting and cloud providers (including Microsoft, Amazon Web Services and Cloudflare), email delivery, ticketing and remote-monitoring tools, payment and accounting providers (such as Xero and Stripe), live chat (Tawk.to) and analytics providers. These providers may only use the information to provide services to us.
Software vendors and distributors where necessary to provision licences or support on your behalf.
Professional advisers, insurers and auditors, under confidentiality obligations.
Law enforcement, regulators or courts where required by law, or to protect our rights, property or safety or those of others.
A successor if we sell, merge or reorganise our business, in which case the successor will be bound by this policy.

5. Overseas disclosure

Some of our providers store or process information outside New Zealand, including in Australia, the United States and other countries where Microsoft, Amazon Web Services and Cloudflare operate data centres. Where we disclose personal information overseas we take reasonable steps to ensure it is protected by comparable safeguards, including contractual terms, and we prefer providers with Australian or New Zealand data residency where available.

6. Security

We protect personal information with technical and organisational safeguards appropriate to its sensitivity, including multi-factor authentication, encryption in transit and at rest, access controls on a least-privilege basis, endpoint protection, logging and monitoring, and tested backups. No system is completely secure, and we cannot guarantee the security of information transmitted over the internet. If we become aware of a privacy breach that is likely to cause serious harm we will notify the Office of the Privacy Commissioner and affected individuals as required by the Privacy Act.

7. Cookies and analytics

The Site uses a small number of cookies and similar technologies:

Strictly necessary: for security, spam prevention and, if you log in to a client or admin area, to keep you signed in.
Analytics: we use privacy-focused analytics to understand aggregate traffic. Where Google Analytics or similar tools are enabled, IP addresses are truncated where the tool allows and data is used only in aggregate.
Live chat: if you use the Tawk.to chat widget, Tawk.to sets cookies and processes the chat in accordance with its own privacy policy.
Third-party embeds: videos, maps or booking widgets may set their own cookies.

You can block or delete cookies in your browser settings. Doing so may affect some features of the Site.

8. Marketing communications

We only send marketing emails to people who have asked for them or with whom we have an existing business relationship, in accordance with the Unsolicited Electronic Messages Act 2007. Every marketing email includes an unsubscribe link, and you can also opt out by contacting us.

9. Retention

We keep personal information for as long as needed for the purposes above, to meet our legal and contractual obligations (for example, financial records are kept for seven years under the Tax Administration Act 1994), to resolve disputes and to enforce our agreements. Information held in client systems is retained according to the client's instructions and our service agreement; when an engagement ends we return or securely delete it as agreed.

10. Your rights

You may ask to see the personal information we hold about you and ask us to correct it. We will respond within 20 working days as required by the Privacy Act. We may need to verify your identity first, and in limited circumstances the Act allows us to refuse a request (for example where the information is subject to legal privilege or the request is vexatious). If we refuse, we will tell you why.

If you are not satisfied with how we have handled your personal information, please contact us first. You may also complain to the Office of the Privacy Commissioner at privacy.org.nz.

11. Children

Our Site and services are intended for businesses and adults. We do not knowingly collect personal information from children under 16.

12. Changes

We may update this policy from time to time. The date at the top shows when it was last changed. Material changes will be announced on the Site. Continued use of the Site or our services after a change means you accept the updated policy.