Privacy Policy

1. Who we are

SaaSKool is a Salesforce consulting partner based in Auckland, New Zealand, serving clients across New Zealand and Australia. SaaSKool is the data controller responsible for the personal information you provide through this website.

Contact: KiaOra@saaskool.com

2. Information we collect

Information you provide to us. When you submit our contact form, request a free Salesforce Health Check, or subscribe to our newsletter, we collect the details you share — such as your name, email address, phone number, company name, role, your Salesforce edition and user count, and the contents of your message.

Information collected automatically. When you visit our website, our hosting provider (Vercel) automatically logs limited technical information such as your IP address, browser type and version, operating system, the pages you view, and the date and time of your visit. This is used for security, debugging, and performance monitoring.

Cookies and similar technologies. See our Cookie Policy for a detailed breakdown of the cookies we use and how to manage them.

3. How we use your information

We use the information we collect to:

• Respond to your enquiries and prepare the consulting proposals or Health Check reports you've asked for
• Deliver, maintain, and improve our consulting services
• Send service-related communications (e.g. confirmation of a submission, follow-up on an active engagement)
• Send marketing emails — only where you have opted in — that you can unsubscribe from at any time
• Understand how visitors use our site so we can improve it (only where you have accepted analytics cookies)
• Meet our legal, accounting, and regulatory obligations

Lawful basis (EU/UK visitors). Where GDPR applies, we rely on: (a) your consent for marketing emails and optional analytics; (b) the necessity to take steps at your request before entering a contract for consulting-enquiry handling; (c) our legitimate interests in running, securing, and improving our business; and (d) compliance with legal obligations.

4. Who we share your information with

We do not sell or rent your personal information. We share it only with the trusted service providers ("sub-processors") we rely on to run our business, and only to the extent they need it to provide their services to us:

• Vercel Inc. — website hosting and request logs (data processed in their global edge network).
• SaaSKool Lead Manager (hosted on Vercel) — our internal lead intake service, which receives contact-form and Health Check submissions and routes them to our consulting team.
• Salesforce, Inc. — our CRM, used to track client relationships and consulting engagements.
• Email service providers — used to send transactional and (where opted-in) marketing emails. We will list the specific provider here once integration is finalised.
• Professional advisors — accountants, auditors, and lawyers, where required.

We may also disclose your information where required by law, in response to lawful requests by public authorities, or to protect our rights, property, and safety or that of others. If SaaSKool is involved in a merger, acquisition, or asset sale, your information may be transferred to the acquirer under continuing confidentiality obligations.

5. International data transfers

SaaSKool operates from New Zealand. Some of our sub-processors (including Vercel and Salesforce) store and process data outside New Zealand and Australia, including in the United States and the European Union. Where personal information is transferred overseas, we take reasonable steps to ensure it is handled in line with the New Zealand Privacy Act 2020 and the Australian Privacy Principles, and that EU/UK Standard Contractual Clauses or equivalent safeguards are in place where required by GDPR.

6. Cookies and tracking technologies

We use a small number of essential cookies to make our website work (for example, to remember your cookie preference and your light/dark theme choice). We do not currently run third-party analytics or advertising trackers. If we add analytics in the future, they will only load after you accept analytics cookies via our cookie banner. For full details, see our Cookie Policy.

7. Data security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These include encrypted transport (TLS) for all form submissions, access controls on internal systems, and contracts requiring our sub-processors to maintain comparable safeguards. No internet transmission or storage system is ever 100% secure, however, and we cannot guarantee absolute security.

8. Your rights

You have the following rights in relation to the personal information we hold about you. To exercise any of these rights, email us at KiaOra@saaskool.com. We respond to requests within 20 working days under the NZ Privacy Act, and within one month under GDPR.

• Access — request a copy of the personal information we hold about you.
• Correction — ask us to correct information that is inaccurate or incomplete.
• Deletion — ask us to delete information we no longer need to hold (also known as "right to be forgotten" under GDPR).
• Restriction and objection — ask us to pause processing, or object to processing based on our legitimate interests (including direct marketing, which you can opt out of at any time).
• Portability — receive a copy of the information you have provided to us in a structured, commonly used, machine-readable format.
• Withdraw consent — where we rely on your consent (for example, marketing emails or analytics cookies), you can withdraw it at any time without affecting prior processing.
• Lodge a complaint — you can complain to the Office of the Privacy Commissioner (NZ), the Office of the Australian Information Commissioner, or your local EU/UK data protection authority.

9. Data retention

We retain your personal information only for as long as we need it for the purposes set out in this policy. Typical retention periods:

• Unconverted enquiries — up to 24 months from your last interaction with us.
• Active client records — for the duration of our engagement plus 7 years (to meet New Zealand and Australian tax and accounting record-keeping requirements).
• Marketing subscribers — until you unsubscribe, after which we keep a minimal suppression record so we don't email you again.

When information is no longer needed, we securely delete or anonymise it.

10. Children's privacy

Our services and website are intended for businesses and professionals. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child, please contact us and we will delete it.

11. Third-party links

Our website may contain links to third-party websites or services (for example, LinkedIn, the Salesforce AppExchange, or our partner organisations). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the "Last updated" date. If we make material changes, we will take reasonable steps to notify you — for example by a banner on the site or, where we have your email, by email.

13. Contact us

For privacy questions, to exercise your rights, or to raise a concern:

Email: KiaOra@saaskool.com
Phone: +64 027 246 9195
Location: Auckland, New Zealand