Clear limits before sensitive material is accepted.

First contact

A first enquiry should contain only a brief description of the problem and the decision it affects. Do not include names, allegation details, third-party information or confidential or sensitive records. If the matter appears suitable, an appropriate transfer route will be agreed before records are accepted. Providing enquiry information is voluntary, but without enough general information we may be unable to assess whether the matter fits.

What we may collect

We may collect contact details, enquiry information, engagement and billing records and—only after written scope and source acceptance—authorised information relating only to the client or information contained in an accepted public record, subject to our own collection and privacy obligations.

Information about other people

An accepted public record may contain personal information about people other than the client. Non-public third-party information is not accepted into the working set merely because a client can access or provide it. If received unexpectedly, it is segregated and excluded from substantive work while an appropriate disposition is decided. Where New Zealand privacy law requires notification of indirect collection, we will take reasonable steps to provide it or document the applicable exception as part of engagement scoping.

How information is used

Information is used to assess fit, define and deliver agreed work, communicate with the client, maintain source control and meet ordinary business or recordkeeping obligations. It is not sold.

Technology and service providers

Technology, including AI-assisted tools, may support storage, comparison, reconstruction and quality control. Relevant service providers may process information to provide those functions. Material processing arrangements are addressed as part of engagement scoping before sensitive records are accepted.

Website measurement and optional Google Analytics

Daily aggregate counts are retained in the aggregate table. They record page requests, broad referral categories, sections viewed or engaged with, navigation selections and contact-button selections. Rows older than 24 months are deleted when the website next successfully accesses that table through an ordinary public-page request, an aggregate write or the protected summary. The aggregate table does not retain IP addresses, full referrer URLs, user agents, query strings, cookie identifiers or visitor histories. To produce these counts, the website service transiently processes ordinary request headers such as user-agent and referrer, then stores only the permitted aggregate category and count.

The site is hosted through OpenAI’s ChatGPT Sites service. OpenAI and its subprocessors process ordinary request, log, usage, device and cookie information on our behalf to host, maintain and support the site. This processing may occur outside New Zealand; ChatGPT Sites does not currently offer a New Zealand data-residency commitment.

The hosting service currently sets a first-party HttpOnly cookie named __Host-appgarden-visitor. It is Secure, SameSite=Lax and is currently set to expire in the browser after approximately 90 days. It is used within the hosting service to host, maintain and support the site; OpenAI’s public Sites materials do not identify a narrower feature purpose. The cookie remains active when Google Analytics is declined and is separate from Augmented Intelligence’s aggregate table and optional Google Analytics.

The site's hosting and security infrastructure currently uses Cloudflare. Cloudflare may inject an automated browser-management script and set a temporary HttpOnly __cf_bm security cookie to detect and manage automated traffic. Cloudflare states that the cookie expires after 30 minutes of continuous inactivity, contains encrypted information used for automated-traffic detection and, depending on Cloudflare configuration, may also contain a session identifier. Cloudflare generates the cookie separately for each site and says it does not correspond to a user ID in Augmented Intelligence's application. This processing is part of the site's hosting and security layer. It is separate from the site's first-party aggregate website measurement and optional Google Analytics, and it remains active if you decline Google Analytics.

Google Analytics is separate and remains off unless you choose Allow. If allowed, it receives page and interaction events. Website analytics does not receive email contents. Your email provider and ours process anything you choose to send.

Google Analytics may set analytics cookies and client identifiers and process device, browser, approximate-location and referral information to provide the service. We do not assign our own user IDs, use Google Signals or allow advertising personalisation. Read how Google uses information from sites that use its services.

Your Google Analytics choice is stored only in this browser. You can decline without affecting your use of the website or the first-party aggregate counts, and can change your choice at any time. Withdrawing consent stops future Google Analytics events from the page and removes accessible Google Analytics cookies from this site. It does not erase information already processed by Google.

Who may receive or access information

Access is limited to Jeff and the service providers required for agreed hosting, communication, storage, processing, security and delivery functions. A nominated professional adviser or other external recipient receives client material only where the client separately authorises that use or disclosure and it is permitted by law. We may also disclose information where required or authorised by law. Client material is not released externally on the client's behalf merely because an enquiry has been made.

Retention, correction and concerns

Retention, return and deletion arrangements are set for the engagement, subject to applicable business or legal recordkeeping requirements. To request access or correction, or raise a privacy concern, contact Jeff Garon.