Whitelaw Weber Ltd Privacy Policy

At Whitelaw Weber Limited, we take privacy very seriously.  This Privacy Policy is drafted with reference to the General Data Protection Regulation (EU) 2016/679 (GDPR) and describes how Whitelaw Weber Limited collects and uses the personal information you provide when using our website and services.  This Privacy Policy applies across all websites that we own and operate, and all services we provide, educational training and workshops, accounting programs, and general support (“our Services”).

We’ve created this Privacy Policy to ensure our users understand how we treat Personal Data that we gather or process when you are using our Services.  This Privacy Policy sets out the rights you have in relation to your Personal Data.  Our Services are not intended for children and we do not knowingly collect data relating to children.




‘We’, ‘our’ or ‘us’ refers to Whitelaw Weber Limited Limited.  Our office is at 10 Fairway Drive, Kerikeri, New Zealand.   We provide a website for visitors to view our wide range of Accounting and Business Development services.

We act as a ‘Controller’ as defined in the GDPR which means we are responsible for your Personal Data.


Information you provide to us:

Your Personal Data:  We receive and store any information you knowingly provide us.  We collect Personal Data such as your name and email address.

Information we collect automatically:

Whenever you interact with our website or use our Services, we automatically receive and record information from your browser.  We use cookies and similar tracking technology to record information such as your device, your IP address, browser type, website you were visiting before you landed on our website, the pages you visit on our website and the time you spend on each page.  We use this information to monitor and analyse use of our website and our Services so that we understand how our website and our Services are being used and to improve functionality so as to provide the best client experience possible.


To communicate with you.

We may use your Personal Data to send you various communications.  This may include:

  • Notifications about new or updated services offered in relation to our Services

  • Invitations to our training workshops and events

  • Marketing communications

  • Requests for feedback or to take part in surveys

  • Providing you with information you’ve requested

To enhance our Services.

We track and monitor the use of our Services to determine which are most popular and which may need improvement.  We also track and monitor the use of our website so we can optimise your user experience.

To market to you.

We use your Personal Data to send you marketing communications.  We may obtain your Personal Data, such as name, email address, and place of employment from publicly available information and send you marketing communications where we have a legitimate interest to do so.   You can unsubscribe from these at any time.


Your Personal Data is processed on servers based in Kerikeri, New Zealand.  New Zealand has been identified as providing adequate protection for European Economic Area (EEA) data.  This adequacy status means that Personal Data can be legally sent to New Zealand from Europe for processing without special additional measures being taken by European firms.

We use various online systems and tools, including certain customer relationship management, marketing automation and email delivery services (‘Tools’) to allow us to communicate with our users.  As part of our use of these Tools, certain Personal Data is sent to the providers of the Tools.  We ensure that providers of these Tools comply with the requirements of the GDPR.


There are times when we need to share your Personal Data with third parties.  We’ll only share your Personal Data to:

Third party service providers and partners who assist and enable us to use the Personal Data to support the delivery of, or provide functionality, for our Services, or to market or promote our Services to you.  Such third parties do not have any right to use the Personal Data we share with them beyond what is necessary to assist us and they shall only process your Personal Data in accordance with this Privacy Notice.

Regulators, law enforcement bodies, government agencies, courts or other third parties where we think it’s necessary to comply with applicable laws or regulations, or to exercise, establish or defend our legal rights.  We will notify you of this type of disclosure where possible and appropriate.

An actual or potential buyer (and its agents and advisors) in connection with an actual or proposed purchase, merger or acquisition of any part of our business.

Other people, where we have your consent.


The length of time we keep your Personal Data depends on whether we have an ongoing business need to retain it, e.g. to provide you with a service you’ve requested or to comply with applicable legal requirements.

We’ll retain your Personal Data for as long as we have a relationship with you, and for a period of time afterwards where we have an ongoing business need to retain it, in accordance with our data retention policies and practices.  We’ll make sure it’s deleted after this period.


You have a number of rights in relation to the processing of your Personal Data.  Requests can be made verbally or in writing, to the contact details available at the bottom of this document.  We will respond to all requests within 30 days of receipt of the request.  We won’t charge you for this unless the request is manifestly unfounded or excessive.  We may require you to verify your identity before we can disclose any Personal Data to you.

Right of access.

You have the right to request a copy of the Personal Data we hold about you.  We will provide you with the following information:

  • Confirmation that we are processing your Personal Data;

  • A copy of the Personal Data we hold about you; and

  • Other supplementary information relating to the processing of your Personal Data

Right to rectification.

You have the right to have inaccurate Personal Data rectified, and to have any incomplete data completed.

Right to erasure.

You have the right to have the Personal Data we hold about you deleted from our systems.

Right to restrict processing.

You have the right to request that we restrict or block the processing of your Personal Data in certain circumstances.  We will continue to store your Personal Data, but we won’t use it in any other way.

Right to data portability.

You have the right to obtain the Personal Data we hold about you and reuse it for your own purposes, across different services.  We will provide your Personal Data in a format that is structured, commonly used, and machine readable.

Right to object.

You have the right to object to us processing your Personal Data, where the processing is based on legitimate interests or direct marketing.  If you request that we stop using your Personal Data for direct marketing purposes, we will suppress your details from our marketing lists to ensure your preference not to receive direct marketing is respected in the future.  All of our direct marketing emails will contain a link for you to unsubscribe if you no longer wish to receive them.


We’re committed to protecting your Personal Data and have appropriate technical and organisational measures in place to make sure your Personal Data is kept secure.  We will take all reasonable steps to protect our Services from unauthorised access, modification or disclosure.  Your Personal Data is stored on secure servers that have SSL Certificates.


We may amend or update this Privacy Policy from time to time.  The date of the last update is shown at the top of this document.  Use of Personal Data we collect is subject to the Privacy Policy in effect at the time such Personal Data is collected.

We will notify you of changes to this Privacy Policy and changes to the way we use Personal Data by sending you an email prior to the changes becoming effective.  You are bound by any changes when you use our website or our Services after such changes have been announced.


If you have any questions or concerns regarding this Privacy Policy, or the way we use your Personal Data, please send us a detailed message to tegan@wwc.co.nz.  We will make every effort to resolve your concerns.

You also have the right to complain to your local Data Protection Authority.  If you’re based in New Zealand, you have the right to complain to the Office of the Privacy Commissioner.  If you’re based in the European Union, you have the right to complain to the Information Commissioner’s Office.  If you’re based outside of New Zealand and the European Union, you have the right to make a complaint at any time to the supervisory authority for data protection issues of the country in which you are based, or to the New Zealand Office of the Privacy Commissioner.


You can contact us in the following ways:

a)  Sending an email to tegan@wwc.co.nz;

b)  Calling us on +64 9 407 7117 (NZ);

c)  Sending a letter to Whitelaw Weber Limited, 10 Fairway Drive, Kerikeri, New Zealand; or

d)  Completing the enquiry form on our website.