WE AI Limited is a New Zealand company and we handle personal information under the Privacy Act 2020. This page says what we collect, why, where it goes, and how to ask us about it. No tracking, no ad tech, no selling of data.
If you use the contact form we receive what you type: your name, email address, company (optional), how you'd like us to get in touch, and your message.
If you email or call us we keep the correspondence and any notes we take.
If you become a client we collect what the engagement needs — contact details for your team, and information about your business processes and systems. Where an engagement involves your customers' or staff's personal information, that's covered by a written agreement with you, and you stay the owner of it.
Automatically, our hosting provider records standard server logs (IP address, browser type, pages requested, time) for security and to keep the site running. We don't run analytics, advertising pixels or tracking cookies. The only thing we store in your browser is your light/dark theme choice, which never leaves your device.
To reply to you, to scope and deliver work you've asked for, to invoice, and to meet our legal obligations. We don't use your information for marketing unless you've said we can, and you can withdraw that at any time by replying "stop" to anything we send.
We don't sell or rent personal information. We share it only with the services we use to run the business, each under its own privacy and security terms:
Some of these providers store data outside New Zealand, mainly in the United States and Australia. Where that happens we rely on the provider's contractual commitments to protect your information to a standard comparable to the Privacy Act, as the Act allows.
AI tools. We use AI services (principally Anthropic's Claude) in our own work. We use business-tier services whose terms do not permit training on our inputs, and we don't put client personal information into an AI tool unless the engagement agreement with you says we can and how.
Contact-form enquiries that don't lead to work are deleted within twelve months. Client records are kept for seven years after the engagement ends, because New Zealand tax law requires it, then deleted. Server logs are kept by our hosting provider for a short rolling period and then discarded.
Access to our systems is limited to the two of us, protected by multi-factor authentication, and encrypted in transit and at rest by the providers above. Kevin Mason, our Data, Privacy & Governance Lead, is responsible for how we handle information. If we ever have a privacy breach that's likely to cause you serious harm, we'll tell you and the Office of the Privacy Commissioner as the Act requires.
You can ask to see the personal information we hold about you, ask us to correct it, or ask us to delete it. Email hello@weai.co.nz and we'll respond within 20 working days, usually much sooner. If you're not happy with how we've handled something, you can complain to the Office of the Privacy Commissioner.
If we change this policy we'll update the date at the top. If the change matters — say, we start using analytics — we'll say so plainly on this page rather than bury it.
WE AI Limited · Wellington, Aotearoa New Zealand · hello@weai.co.nz