Privacy Policy

Introduction

This privacy policy applies to websites operated by Colossal Ltd., including garethbdavies.com and colossal.nz. The company has created this document to explain its information gathering and dissemination practices.

Visiting the site, registering for offers, or providing consent constitutes agreement with this policy. Disagreement means you should not use the website.

Section 1: Information Collection

Personally Identifiable Information

The company collects names, email addresses, phone numbers, and addresses when voluntarily submitted. Customer information is primarily stored in Infusionsoft (a third-party CRM system), not directly on company servers. Credit card details go to EasyPay Direct and are not retained by the company.

Personal information purposes include: (1) to deliver the products and/or services to you that you have requested; (2) to validate your compliance with the terms and conditions; and other service-related uses.

The company will not share personal information with third parties without explicit permission, except to fulfill accepted third-party offers.

Chat Assistant

colossal.nz has an AI chat assistant. Messages you type into it are sent to an AI model run by Cloudflare to generate a reply. Colossal does not store or log the conversation, and it is kept only in your browser tab until you close or reload the page.

If you choose to leave your details through the chat, the name, email address and optional message you enter, plus the page you were on, are stored in Airtable and used only to reply to your enquiry.

To prevent abuse, a one-way hashed identifier derived from your IP address is kept for up to two days. It changes every day and cannot be turned back into your IP address.

Email Communications

Email subscribers agree to receive messages and can unsubscribe anytime. The company uses email addresses for custom Facebook advertising to opted-in contacts. Subscribers can manage preferences through "Manage Subscriptions" links in emails.

Telemarketing

Providing phone numbers constitutes authorization under the Amended Telemarketing Sales Rule and Canadian regulations, exempting subsequent telemarketing calls.

Non-Personally Identifiable Information

The company collects aggregate data through cookies, web beacons, pixel tags, and analytics tools like Google Analytics. Third-party retargeting networks display advertisements across websites.

Page views are also counted with Umami, which runs on a server the company rents and manages itself rather than on an analytics company's. It records the page opened, the site that referred the visit, the browser, device and screen size, the language, and approximate location down to the city. It sets no cookie and stores nothing in your browser. Your IP address is used to work out that location and to tell one visit from another, and it is not saved. Page addresses are recorded without anything after a question mark.

Cookies are text files used by your browser to store preferences and enhance user experience. Most browsers allow disabling cookies, though this may limit website functionality.

Email newsletters use techniques to track open rates, forwards, device types, and location data associated with IP addresses.

Section 2: Third Party Actions

The company promotes external sites but cannot control their actions, content, or privacy practices. Users should provide feedback about third-party experiences to help improve future recommendations.

Section 3: Children's Privacy

The website restricts age access, so it does not knowingly collect information from children under 18. Parents can request deletion of minor children's data by contacting the company.

Section 4: IP Addresses

IP addresses help prevent fraud, diagnose server problems, gather demographic information, and offer relevant products and services.

Section 5: Data Security

Information is stored in a technically and physically secure environment with limited access. The company uses firewalls, encryption, token authentication, application proxies, monitoring technology, and network abuse detection.

No data transmission over the Internet can be guaranteed to be 100% secure, so users should take steps to protect their information.

Section 6: Updating, Removing, or Exporting Personal Information

Users can customize subscriptions via "Manage Subscriptions" links. To request data details, deletion, or export, email the company with subject lines: "Data Usage Request," "Forget Me," or "Export My Data."

Requests must come from verified account information. The company retains legally required data and may anonymize deleted information rather than remove it completely.

Section 7: Contact Information

Email: [email protected]

Address: Colossal Ltd., PO Box 58028, Porirua, New Zealand

Section 8: Withdrawing Consent

Users can unsubscribe through instructions in company communications or by contacting third-party services directly.

Section 9: Terms of Use

The Terms and Conditions Policy is incorporated by reference into this privacy policy.

Section 10: Severability

If any provision is invalid, the remainder stays in effect while that portion is interpreted to reflect original intentions.