Privacy Statement

Last updated: 24 September 2026

At Aotea Group, we are committed to protecting your privacy.

This Privacy Statement (Statement) explains how we collect, use, store and disclose your personal information and is informed by Aotea Group's responsibilities under the Privacy Act 2020 (NZ) (Privacy Act).

In this Statement, "Aotea Group", "we", "us" and "our" means AGHL Limited (NZBN 9429049183689) together with its subsidiaries.

This Statement applies to personal information collected by us:

when you access, and/or use any website operated by Aotea Group;
when you contact us, including through our website, email, phone or otherwise;
when you enquire about, request or receive services from us;
when you supply goods or services to us, or work with us as a subcontractor or a business partner; or
when you otherwise interact with us in connection with our business.

This Statement does not apply to personal information we collect and hold about our employees, contractors or other personnel.

We encourage you to read this Statement carefully. If you have any questions about it, please contact us using the details provided below.

We may update this Statement from time to time. The current version will be available on our websites. If we make material changes to this Statement, we may take further steps to notify you in accordance with our obligations under the Privacy Act, including through notices posted on our websites or via email.

In this Statement:

applicable privacy laws means the Privacy Act together with all other data privacy laws applicable to our processing of your personal information;

personal information has the meaning given in applicable privacy law, generally meaning identifiable information about you; and
where we refer to processing your personal information, we mean all activities relating to our use of that personal information, from its collection through to its storage and disposal and everything in between.

1. COLLECTING YOUR PERSONAL INFORMATION

The personal information we collect depends on how you interact with us (for example, whether you are a customer, supplier, subcontractor, or business partner).

Personal information you provide to us directly

We collect your personal information so that we can provide and/or perform our services, manage our relationship with you, and comply with our legal and regulatory obligations.

We may collect personal information directly from you when you:

contact us through our website, by email, telephone or otherwise;
request a quote, proposal or information about our services;
engage us to provide services;
enter into a contract with us as a customer, supplier, subcontractor or business partner;
submit an enquiry, complaint, feedback or request; or
attend meetings or site visits involving Aotea Group.

The information may include your name, contact details (such as your email address, phone number and physical address), job title and employer, billing and payment details, information relating to your enquiry, project or service requirements, communication preferences, and other information necessary to facilitate our provision of services to you.

You can choose not to provide us with your personal information. However, if you do not provide the requested information, we may not be able to respond to your enquiry, enter into a contract with you or otherwise provide our services.

Personal information collected automatically

Our websites use cookies and similar technologies to ensure core functionality and to help us understand how our websites are used.

Cookies may collect information about your device and how you interact with our websites, including your IP address, browser type and version, device or platform information, approximate location, pages visited, time spent on pages, the date and time of visits and referring pages.

We may use information generated by cookies to:

improve our website, services and user experience;
understand how visitors use our website;
help diagnose technical issues and ensure the security of our systems; and
analyse website traffic and usage trends.

Most web browsers allow you to manage your cookie preferences, including by deleting or disabling cookies. However, disabling cookies may affect the functionality of our website and certain features may not be fully available.

Personal information collected indirectly

While most personal information about you we collect will be directly from you, in some cases, we may collect personal information about you from other sources, including:

other companies within the Aotea Group;
your employer or the organisation you represent;
our customers, suppliers, subcontractors, business partners;
third parties who refer you to us or provide your details in connection with our services; and
where we have your authorisation, or to the extent otherwise permitted by law.

Where we collect personal information about you from a third party, we will do so in accordance with applicable privacy laws.

If you provide us with any personal information about another individual, you must ensure that you have that individual’s consent to do so.

2. HOW WE USE YOUR PERSONAL INFORMATION

We collect your personal information primarily to provide our services to you. We may use your personal information:

providing services: to provide, manage and support the services we offer, including responding to enquiries, preparing quotes, administering projects and performing our contractual obligations;
supplier and subcontractor management: to engage and manage suppliers, subcontractors and other business partners and administer our contractual relationships with them;
billing and payment processing: to generate invoices and other payment-related documentation and process payments;
marketing and communications: if you opt-in to receive promotional materials or updates from us, we may use your personal information to contact you by email with the information you have opted-in to receive;
customer support and enquiries: to monitor and respond to your enquiries, requests and feedback, and keep records of our correspondence with you;
operations and improvement: to operate, maintain and enhance our website, services, systems and business operations;
security: to detect and/or prevent illegal activity that may threaten us, our systems, business or operations;
record keeping and reporting: to create and maintain our databases, back-up copies of our databases and business records generally;
risk management: where necessary, for the establishment, exercise, or defence of legal claims or to respond to regulatory or law enforcement requests. We may also use your personal information where necessary for the purposes of obtaining or maintaining insurance, managing risks and/or obtaining professional advice; and
consent and compliance: where we otherwise have your consent, in accordance with that consent, or to the extent otherwise permitted by applicable privacy law.

3. DISCLOSURE OF YOUR PERSONAL INFORMATION

We may disclose your personal information:

to other companies within the Aotea Group to support the provision of our services, manage customer relationships and support our operations;
to our suppliers, subcontractors and business partners who assist in providing our services or operating our business;
to third-party service providers who assist us with our operations, including payment processors, website hosting and cloud service providers;
to third parties where you have authorised the disclosure;
to regulators, law enforcement bodies, government agencies, courts or other third parties (such as legal or other professional advisors) where it is necessary to comply with any applicable law or regulation, or to exercise, establish or defend our legal rights; and
where the disclosure is otherwise required or permitted by law.

We take reasonable steps to ensure that third parties who receive your personal information keep it confidential and use it only for the purposes for which it was disclosed.

4. HOW WE PROTECT YOUR PERSONAL INFORMATION

In accordance with our obligations under the Privacy Act, we take reasonable steps to protect your personal information from loss, unauthorised access, use or disclosure.

We maintain reasonable safeguards to help protect the security and integrity of the personal information we hold, including by ensuring appropriate internal information-access restrictions are in place.

We will not keep your personal information for longer than is reasonably necessary for the purposes for which it was collected, unless required or permitted by law.

In the event of a privacy breach that we believe is likely to cause serious harm, we will notify affected individuals and the Office of the Privacy Commissioner as required by law.

5. YOUR RIGHTS

Under the Privacy Act, you have the right to request access to, and correction of, your personal information. If you wish to exercise these rights, please contact us using the details provided below.

If you are unsatisfied with our handling of your request, you may contact the Office of the Privacy Commissioner in New Zealand for review of our handling of your request.

6. CONTACT US

If you have any questions about this Statement or our handling of your personal information, you can contact our Privacy Officer at hr@aoteagroup.co.nz.