Home/Privacy
Privacy policy
What we collect, why we collect it, and what we do with it, written plainly, and to meet the Privacy Act 2020.
This policy explains what personal information Heather & Co. collects, why we collect it, and what we do with it. It is written to meet our obligations under the Privacy Act 2020.
Heather & Co. is a trading name of NZ Art Services Limited (NZBN 9429053585776), based in Auckland, New Zealand.
What we collect
We only collect what we need to answer your enquiry and do the work.
- When you contact us: through the website form, by email, by phone or through WhatsApp: your name, email address, phone number if you give it, the service you are interested in, and whatever you choose to tell us about your collection.
- When we take on work: details of the items involved, photographs, provenance documents, and where relevant the details of an estate, its executors and its beneficiaries.
- When you browse the site: we do not run analytics or tracking. Our hosting provider keeps standard server logs, including IP addresses, to serve and secure the site, and the site loads its animation library from a content delivery network and a few photographs from a stock image service, which see the request for those files. The only thing stored in your browser is your light or dark theme preference, and that never leaves your device.
Why we collect it
- To respond to your enquiry and provide the service you have asked for
- To prepare valuations, catalogues and reports, and to keep proper records of the work
- To meet legal and professional record-keeping obligations, including the evidential trail a valuation report has to carry
- To understand how the website is used so it can be improved
We do not use your details for marketing unless you have asked us to, and we never sell them.
Who else sees it
Your information stays with us except where we need a service provider to deliver something, or where the law requires disclosure.
- Netlify hosts this website, keeps standard server logs and receives contact form submissions. Netlify's servers are outside New Zealand.
- Cloudflare (cdnjs) and Unsplash serve the site's animation library and some of its photographs, and see your IP address when your browser requests those files. The site's fonts are served from our own hosting.
- JotForm hosts the enquiry form linked from our trading card advertising and receives what you enter into it. JotForm's servers are outside New Zealand.
- Email and messaging providers carry our correspondence with you.
- Third parties you ask us to deal with: for example your insurer, solicitor or a buyer, and only with your instruction.
Because some of these providers are overseas, your information may be stored outside New Zealand. Providers that hold information for us do so as our agents, and we remain responsible for it under the Privacy Act 2020. Where we disclose information to an overseas organisation for its own purposes, we do so only where information privacy principle 12 allows.
Confidentiality
Collections, estates and their values are private. We do not discuss a client's holdings, publish identifying photographs, or use a piece of work as an example without permission. Where we describe past work publicly it is anonymised.
How long we keep it
Enquiries that do not become work are deleted within twelve months. Records connected to a completed valuation, catalogue or sale are kept for at least seven years, because valuations are relied on by insurers, courts and the executors of estates, sometimes years after they are written, and the file has to be able to support the opinion.
Keeping it safe
Information is held in access-controlled accounts with multi-factor authentication. The website is served over HTTPS. No system is perfectly secure, but we take reasonable steps to protect what you give us, and we do not retain what we no longer need.
Seeing and correcting your information
Under the Privacy Act 2020 you can ask us what personal information we hold about you, ask for a copy, and ask us to correct anything that is wrong. Email us and we will respond within 20 working days. There is no charge.
Analytics and cookies
This site does not use analytics, advertising cookies or tracking pixels. It stores one preference in your browser, your choice of light or dark theme, which is never sent to us or to anyone else. If we ever add analytics, this policy will be updated before it goes live.
Complaints
If you are unhappy with how we have handled your information, please tell us first. We would rather fix it directly. If you are not satisfied with our response you can complain to the Office of the Privacy Commissioner at privacy.org.nz or 0800 803 909.
Contact
Heather & Co. · Auckland, New Zealand
luke@heatherandco.co.nz · 027 489 7801