Privacy Policy

Last updated: 5 August 2026

1. Who we are

This website is operated by:

Business name: ARTIKI
Owner: Ana Pia Zuazua-Azcárate Menéndez
Spanish Tax Identification Number (NIF): 71641373F
Business address: Centro de Iniciativa Empresarial La Cardosa, Office 13, Calle Cal Jove y Valdés 20, 33820 Grado, Asturias, Spain
New Zealand phone: +64 21 121 1196
Email: info@artiki.digital
Website: https://www.nz.artiki.digital/

ARTIKI is responsible for the personal information collected through this website and acts as the data controller under the European General Data Protection Regulation (GDPR) and as an agency for the purposes of the New Zealand Privacy Act 2020.

2. Scope of this Privacy Policy

This Privacy Policy explains how ARTIKI collects, uses, stores and shares personal information when you:

• Visit this website.

• Complete a contact or enquiry form.

• Contact us by email, phone or WhatsApp.

• Respond to one of our advertisements.

• Request information, a quote or a website proposal.

• Become an ARTIKI client.

Personal information means information about an identifiable individual.

3. Personal information we collect

Depending on how you interact with ARTIKI, we may collect:

• Your name.

• Your email address.

• Your phone number.

• Your business name, location and industry.

• Information about your business, services and website requirements.

• Information you include in messages, forms or enquiries.

• Information needed to prepare a proposal, quote or website.

• Records of our communications with you.

• Contract, billing and transaction information if you become a client.

When you visit the website, we may also collect certain technical information, including:

• Your IP address.

• Browser and device information.

• Approximate location derived from your IP address.

• Pages visited and time spent on the website.

• The website, advertisement or platform that referred you to us.

• Cookie identifiers and information about your interaction with our advertising.

We do not ask you to provide sensitive personal information through our website forms.

4. How we collect your information

We usually collect personal information directly from you when you complete a form, contact us or engage our services.

We may also receive personal information from another source, such as:

• Meta platforms when you respond to a Facebook or Instagram advertisement or lead form.

• Analytics and advertising providers.

• A person or business that refers you to ARTIKI.

• Publicly available business sources, where permitted by law.

Where information is collected indirectly, we will take reasonable steps to make you aware of the collection when required by New Zealand Information Privacy Principle 3A or the GDPR.

Fields marked as required on our forms must be completed so that we can respond to your enquiry. If you do not provide this information, we may be unable to contact you or prepare the information you have requested.

5. How we use personal information

We may use your personal information to:

1. Respond to enquiries and contact requests.

2. Understand your business and website requirements.

3. Prepare quotes, proposals, website drafts or service recommendations.

4. Provide website design, digital marketing, advertising, support and maintenance services.

5. Communicate with you about an enquiry, project or contracted service.

6. Manage contracts, billing and business records.

7. Operate, maintain and protect our website.

8. Measure website traffic and the performance of our advertising campaigns.

9. Improve our website, services and customer experience.

10. Send marketing communications where you have consented or where otherwise permitted by law.

11. Detect or prevent fraud, misuse or security incidents.

12. Comply with legal, accounting, tax and regulatory obligations.

We will not use your personal information for a purpose that is unrelated to the purpose for which it was collected unless we have your permission or are authorised or required to do so by law.

ARTIKI does not use personal information to make solely automated decisions that produce legal or similarly significant effects.

6. Legal basis for processing

As ARTIKI is established in Spain, the GDPR applies to our processing of personal data, including information collected through our New Zealand website.

Depending on the circumstances, we process personal information on one or more of the following grounds:

• Consent: for example, when you agree to receive marketing communications or accept optional analytics and advertising cookies.

• Pre-contractual steps or performance of a contract: when you ask for a quote, request a proposal or engage ARTIKI to provide services.

• Legal obligations: when information must be retained or processed for tax, accounting or regulatory purposes.

• Legitimate interests: where necessary to respond to enquiries, manage our business, protect our systems or improve our services, provided those interests do not override your rights.

Under the New Zealand Privacy Act 2020, we only collect personal information for lawful purposes connected with our business and only when the information is reasonably necessary for those purposes.

7. Cookies, analytics and advertising

This website may use cookies and similar technologies to:

• Ensure the website works correctly.

• Remember visitor preferences.

• Measure website traffic and usage.

• Understand how visitors interact with the website.

• Measure the effectiveness of Facebook, Instagram or other advertising campaigns.

• Show more relevant advertising.

These technologies may be provided by third parties such as Hostinger, Google and Meta.

Where required, optional analytics and advertising cookies will only be activated after you have provided consent through the cookie banner. You can reject optional cookies or change your preferences at any time.

For further information, please see our Cookie Policy.

8. Who we share information with

We do not sell or rent personal information.

We may share information only when reasonably necessary with trusted service providers that help us operate our business, including:

• Website hosting and form providers.

• Email and communications providers.

• Analytics and website measurement services.

• Advertising platforms such as Meta and Google.

• WhatsApp and other communication services you choose to use.

• IT, security, accounting or professional advisers.

• Government authorities, courts or regulators when disclosure is required by law.

These providers may only receive the information necessary to perform their services. Where they process information on our behalf, we require appropriate privacy, confidentiality and security safeguards.

9. International processing and transfers

ARTIKI is based in Spain and provides services to clients in New Zealand. Personal information submitted through this website may therefore be accessed or processed outside New Zealand.

Some of our technology, hosting, analytics, advertising and communication providers may also process information in the European Union, the United States or other countries.

When personal information is disclosed to an overseas recipient, we take reasonable steps to ensure it receives protection comparable to that required by the New Zealand Privacy Act 2020. Depending on the circumstances, this may include contractual privacy safeguards, an applicable legal adequacy mechanism or your express and informed authorisation.

For transfers governed by the GDPR, ARTIKI uses an applicable lawful transfer mechanism, such as an adequacy decision, Standard Contractual Clauses or another safeguard recognised under European data protection law.

Where an overseas provider only stores or processes information on our behalf and does not use it for its own purposes, ARTIKI remains responsible for the information as required by applicable law.

10. How long we keep personal information

We retain personal information only for as long as it is reasonably necessary for the purpose for which it was collected.

This means:

• Enquiry information is kept while we respond to and follow up on the enquiry and for a reasonable period afterwards.

• Client and project information is kept for the duration of the business relationship and as needed to provide ongoing support.

• Contracts, invoices and transaction records are retained for the period required by Spanish tax, accounting and commercial laws.

• Marketing contact information is kept until you unsubscribe or withdraw your consent.

• Technical and analytics information is kept according to the retention settings of the relevant platform and our cookie preferences.

When information is no longer required, we will securely delete or anonymise it, unless the law requires us to retain it.

11. Your privacy rights

Rights under New Zealand law

Under the New Zealand Privacy Act 2020, you may ask us to:

• Confirm whether we hold personal information about you.

• Provide access to the personal information we hold about you.

• Correct personal information that is inaccurate or incomplete.

• Attach a statement of correction if we do not agree to make a requested correction.

Additional rights under the GDPR

Where the GDPR applies, you may also have the right to:

• Request the deletion of your personal data.

• Restrict how your personal data is processed.

• Object to certain processing.

• Receive certain information in a portable format.

• Withdraw your consent at any time.

• Object to direct marketing at any time.

To exercise any of these rights, email info@artiki.digital. We may ask for reasonable information to verify your identity before completing the request.

If you are not satisfied with our response, you may make a complaint to:

• New Zealand Office of the Privacy Commissioner: https://www.privacy.org.nz/

• Spanish Data Protection Agency (AEPD): https://www.aepd.es/

12. Marketing communications

ARTIKI will only send commercial electronic messages where we have your consent or another form of consent recognised by the New Zealand Unsolicited Electronic Messages Act 2007 and applicable European law.

Marketing messages will identify ARTIKI as the sender and provide a functional way to unsubscribe.

You can withdraw your consent or ask us to stop sending marketing communications at any time by:

• Using the unsubscribe option included in the message; or

• Emailing info@artiki.digital.

Unsubscribing from marketing will not prevent us from sending messages needed to respond to an enquiry, provide a contracted service or manage an existing business relationship.

13. Security and privacy breaches

ARTIKI uses reasonable technical and organisational safeguards to protect personal information against loss, unauthorised access, misuse, alteration or disclosure.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

If a privacy breach occurs that has caused or is likely to cause serious harm, ARTIKI will notify the affected individuals and the New Zealand Office of the Privacy Commissioner as required by the Privacy Act 2020. We will also comply with any applicable GDPR breach-notification obligations.

14. Links to third-party websites

This website may contain links to websites or services operated by third parties.

ARTIKI is not responsible for the content or privacy practices of those third-party websites. We recommend reviewing their privacy policies before providing them with personal information.

15. Changes to this Privacy Policy

We may update this Privacy Policy when our services, technology providers or legal obligations change.

The latest version will always be published on this page and will show the date of the most recent update.

16. Privacy Officer and contact details

ARTIKI’s Privacy Officer is:

Ana Pia Zuazua-Azcárate Menéndez
Email: info@artiki.digital
New Zealand phone: +64 21 121 1196
Postal address: Centro de Iniciativa Empresarial La Cardosa, Office 13, Calle Cal Jove y Valdés 20, 33820 Grado, Asturias, Spain

Please use these contact details if you have a privacy question, wish to exercise your rights or want to make a complaint about how your personal information has been handled.