Privacy Policy

Lovain Consulting Limited · Last updated: 28 February 2026

1. Who we are

Lovain Consulting Limited ("Lovain", "we", "us", "our") is a New Zealand registered company providing AI consulting services to businesses. This policy explains how we collect, use, store, and protect your personal information in accordance with the New Zealand Privacy Act 2020.

Contact: Avish Kapadia — avish@lovain.ai

2. Information we collect

We collect personal information that you provide to us directly, as well as information generated through your use of our website and services.

Information you provide: Name, email address, phone number, business name, job title, and any other details you include when completing a contact form, booking a consultation, or engaging our services.

Information collected automatically: When you visit lovain.co.nz, we may collect your IP address, browser type, device information, pages visited, time spent on pages, and referring URL. This is collected through cookies and standard analytics tools.

Information from third parties: We may receive information about you from third-party platforms where you interact with our content, such as LinkedIn.

3. How we use your information

We use your personal information for the following purposes:

Responding to enquiries and providing the services you have requested. Scheduling and conducting consultations. Preparing proposals, reports, and deliverables related to our consulting engagements. Sending you information about our services where you have opted in or where we have a legitimate business relationship. Improving our website, services, and communications. Complying with our legal and regulatory obligations.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

4. AI and data processing

As an AI consulting firm, we want to be transparent about how we handle data in the context of our services.

Client engagement data: During consulting engagements, we may process business data you provide to us (such as operational data, spreadsheets, or workflow information) in order to deliver our services. This data is used solely for the purpose of your engagement and is not shared with other clients.

AI tools: Where we use AI tools to deliver insights or build solutions for your business, your data is processed in accordance with the terms agreed in your engagement contract. We do not use your business data to train AI models for other purposes.

Anonymised data: We may use anonymised, non-identifiable data derived from engagements for the purpose of improving our methodologies, developing case studies, or producing industry research. No individual or business can be identified from this data.

5. Legal basis for processing

We process your personal information on the following grounds:

Consent — where you have given us clear consent to process your information for a specific purpose (for example, subscribing to communications).

Contractual necessity — where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract.

Legitimate interest — where processing is necessary for our legitimate business interests, provided those interests do not override your rights. This includes improving our services, maintaining security, and communicating with prospective clients.

Legal obligation — where we are required to process your information to comply with applicable law.

6. Sharing your information

We may share your personal information with:

Service providers who assist us in operating our business, including website hosting (Squarespace), email services, scheduling tools, analytics providers, and cloud infrastructure providers. These providers are contractually required to protect your information and may only use it to provide services on our behalf.

Professional advisors such as lawyers and accountants, where necessary.

Regulatory bodies or law enforcement, where required by law or to protect our legal rights.

We do not share your information with any parties for their own marketing purposes.

7. Data storage and security

Your personal information is stored on secure servers operated by our service providers. Data may be stored in New Zealand, Australia, or the United States, depending on the service provider. Where data is transferred outside New Zealand, we ensure appropriate safeguards are in place consistent with the Privacy Act 2020.

We take reasonable steps to protect your information from unauthorised access, modification, disclosure, or destruction. These measures include encryption, access controls, and regular security reviews.

No method of electronic storage or transmission is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

8. Cookies

Our website uses cookies and similar technologies to improve your browsing experience and to understand how visitors use our site.

Essential cookies enable core functionality such as page navigation and form submissions.

Analytics cookies help us understand how visitors interact with our website. We use Squarespace Analytics and may use Google Analytics. These tools collect anonymised data about page views, session duration, and traffic sources.

You can control cookies through your browser settings. Disabling cookies may affect the functionality of some parts of our website.

9. Your rights

Under the New Zealand Privacy Act 2020, you have the right to:

Access the personal information we hold about you.

Request correction of any information that is inaccurate, incomplete, or misleading.

Request deletion of your personal information, subject to any legal obligations we may have to retain it.

Withdraw consent at any time where we are processing your information based on your consent. This does not affect the lawfulness of processing carried out before withdrawal.

Opt out of marketing communications at any time by using the unsubscribe link in our emails or by contacting us directly.

To exercise any of these rights, contact us at info@lovain.ai. We will respond to your request within 20 working days, as required by the Privacy Act 2020.

10. Retention

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Consultation enquiry data is retained for up to 24 months after your last interaction with us. Client engagement data is retained for 7 years in accordance with New Zealand tax and business record-keeping requirements. You may request earlier deletion of non-essential data at any time.

11. Third-party links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites. We encourage you to review the privacy policies of any third-party sites you visit.

12. Children

Our services are directed at businesses and business professionals. We do not knowingly collect personal information from individuals under the age of 16. If we become aware that we have collected information from a child, we will take steps to delete it promptly.

13. Changes to this policy

We may update this privacy policy from time to time to reflect changes in our practices, services, or legal requirements. The updated policy will be posted on this page with a revised "last updated" date. We encourage you to review this policy periodically.

14. Complaints

If you believe we have breached your privacy, please contact us at info@lovain.ai and we will investigate your concern. If you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Privacy Commissioner:

Office of the Privacy Commissioner PO Box 10094, Wellington 6143 Phone: 0800 803 909 privacy.org.nz