About this policy
Qualified Leads Limited (“Qualified Leads”, “we”, “us”) is a New Zealand company. Our registered office is Level 1, 72 Taharoto Road, Takapuna, Auckland 0622.
We are a digital marketing and lead generation agency. We run advertising campaigns for our clients and pass the enquiries those campaigns generate to the client who paid for them.
That means we handle personal information in two different situations, so this policy is in two parts:
- Part A covers information about you when you visit our website, contact us, or become our client.
- Part B covers information about you when you respond to an advertisement or fill in a form on a campaign we run for one of our clients.
Part C covers storage, disclosure and overseas transfer, and applies to both.
This policy is governed by the Privacy Act 2020 and the thirteen Information Privacy Principles. Where we handle information about people in other countries, additional laws may apply; see “If you are outside New Zealand”.
The insurances.co.nz Pay Per Lead programme has its own separate privacy disclosure, which is available on that website. This policy does not cover it.
Who to contact
Simon Anderson, Privacy Officer Qualified Leads Limited Level 1, 72 Taharoto Road, Takapuna, Auckland 0622 privacy@qualifiedleads.com
We are required to have a Privacy Officer under section 201 of the Privacy Act 2020. Any question, request or complaint about your personal information should go to the address above.
Part A: When you deal with us directly
What we collect
When you use our website or contact us, we may collect:
- Your name, email address, phone number and company
- What you told us in an enquiry form, a booking request or a newsletter signup
- Records of our correspondence with you
- If you become a client, the information needed to run your account and bill you
We also collect technical information automatically when you visit the site: IP address, browser type and version, operating system, the page you arrived from, the pages you viewed, and how long you spent on them. This is used to understand how the site is performing and to identify misuse.
Why we collect it
- To respond to your enquiry, and to arrange and hold meetings with you
- To provide our services if you become a client
- To send you marketing emails, where you have subscribed or enquired
- To improve our website and our services
- To meet our legal and tax obligations
Cookies and tracking
Our website uses cookies and similar technologies for analytics and advertising, including tools that record how visitors move through the site.
Most browsers accept cookies by default and allow you to decline them in settings. Declining may affect how parts of the site work.
We do not track visitors across unrelated third-party websites over time. Advertising platforms we use may set their own cookies when you interact with our advertisements, and their own privacy policies govern that.
Marketing emails
We send marketing emails only to people who have subscribed or who have enquired about our services.
Every marketing email identifies us as the sender and carries a working unsubscribe link, as required by the Unsolicited Electronic Messages Act 2007. Unsubscribing takes effect promptly and applies across our marketing lists.
Testimonials and case studies
We publish client testimonials and case studies. These are published only with the client’s express agreement, given either on camera or in writing.
Part B: When you respond to a campaign we run for a client
The situation
If you clicked an advertisement, visited a landing page, or filled in a form, that campaign may have been run by us on behalf of one of our clients. The advertisement will usually carry that client’s branding rather than ours.
What we collect
This varies by campaign. In nearly all cases it is:
- Your name
- Your phone number
- Your email address
Some campaigns ask additional questions relevant to what the client offers, such as your location, the service you are interested in, or a preferred contact time. You choose whether to answer these.
Who we are collecting it for
We collect this information so that it can be given to the client whose campaign you responded to. That client will contact you about your enquiry.
Once the information reaches the client, the client is responsible for it under the Privacy Act and their own privacy policy applies. We remain responsible for our own copy of it.
What we do with it
- We pass it to the client, usually into their customer relationship management system
- We keep a record so that campaign performance can be measured and reported to the client
- We do not sell it
- We do not use it to market our own services to you
- We do not combine it with information from other campaigns to build a profile of you
AI voice agents
Some campaigns use an AI voice agent to answer or return calls. Where that happens, the agent identifies itself as an AI at the start of the call and states that it is collecting your information to pass on. Calls may be recorded and transcribed.
How long we keep it
We keep campaign enquiry records for the duration of our engagement with the client, and for 12 months after that engagement ends, unless the client instructs otherwise or the law requires us to keep them longer.
Records may be kept longer where an unresolved dispute or complaint makes it necessary.
Part C: Storage, disclosure and overseas transfer
Who we share information with
We use third-party service providers to run our business and our clients’ campaigns. Personal information may be processed by providers in the following categories:
- Advertising and social media platforms
- Website hosting and form tools
- Customer relationship management systems
- Data integration and automation tools
- Analytics and measurement tools
- Artificial intelligence and transcription tools
- Communication and meeting platforms
- Project management and document tools
- Accounting and administration systems
These providers receive only what they need to perform their function and are not permitted to use it for their own purposes. A current list of the categories of provider we use is available on request from our Privacy Officer.
We do not sell personal information.
We may disclose personal information where the law requires it, where it is necessary to protect someone’s safety, or to investigate fraud. If our business is sold or merged, personal information may transfer as part of that sale.
Where information is stored
Our systems are cloud-based and are not all located in New Zealand. Personal information we hold may be stored or processed in Australia, the United States, the European Union and the United Kingdom, depending on the provider.
Members of our team work outside New Zealand and access our systems from those countries in the course of their work.
Information Privacy Principle 12 of the Privacy Act 2020 requires us to be satisfied on reasonable grounds that information sent overseas is protected by comparable safeguards. We select providers on that basis and document that assessment.
How we protect information
- Access to systems is controlled and granted on the basis of what a person needs for their role
- Multi-factor authentication is in place on our core systems
- Credentials are held in a managed password vault rather than shared informally
- Access is reviewed, and removed when someone leaves
- Staff receive ongoing security and privacy training
- We maintain a documented information security management system covering these controls
No system connected to the internet can be guaranteed secure. What we can say is that we treat information security as a managed programme rather than an assumption.
If something goes wrong
If we become aware of a privacy breach, we assess whether it has caused, or is likely to cause, serious harm. Where it has, we notify the Office of the Privacy Commissioner and the affected people, as required by Part 6 of the Privacy Act 2020.
Your rights
Under the Privacy Act 2020 you have the right to:
- Ask what we hold about you, and receive a copy. We will respond within 20 working days.
- Ask us to correct it if it is wrong. If we do not agree to make the correction, we will attach a note recording the correction you asked for.
- Ask us to delete it, which we will do unless we are required to keep it.
- Unsubscribe from any marketing at any time.
To exercise any of these, contact our Privacy Officer using the details above. We may need to verify your identity before acting on a request.
Complaints
If you are not satisfied with how we have handled your information or your request, please contact us first using the details above.
If you are still not satisfied, you can complain to the Office of the Privacy Commissioner:
- privacy.org.nz
- 0800 803 909
If you are outside New Zealand
If you are in the European Union or the United Kingdom, the General Data Protection Regulation may apply to our handling of your information, and you may have additional rights including data portability and the right to object to processing. You may also complain to your local data protection authority.
If you are in Australia, the Privacy Act 1988 (Cth) and the Spam Act 2003 may apply.
If you are in the United States, state privacy laws such as the California Consumer Privacy Act may apply to residents of those states.
In each case, contact our Privacy Officer and we will tell you what applies to your situation.
Children
Our website and our services are aimed at businesses and adults. We do not target children and we do not knowingly collect information from anyone under 16.
Changes to this policy
We review this policy at least annually, and whenever our systems or practices change materially. Material changes will be notified on this page.
Last updated: 01 July 2026
