Effective date: 12 May 2026 | Last reviewed: 12 May 2026
1. About this policy
Little Giant Interiors (“we”, “us”, “our”) is the trading name of Little Giant Interiors Limited, a company registered in New Zealand. Our registered office is at 26g William Pickering Drive, Rosedale, Auckland.
We are committed to protecting your privacy and handling your personal information in accordance with the Privacy Act 2020 (New Zealand) and the thirteen Information Privacy Principles (IPPs) set out in that Act, including the new Information Privacy Principle 3A (notification of indirect collection) which came into force on 1 May 2026.
This policy explains what personal information we collect, how we collect it, why we collect it, who we share it with, how we protect it, and the rights you have over your information.
This policy applies to information collected through our website littlegiants.co.nz, our showroom and offices, our phone and email communications, our social media channels, and any forms or platforms we use to interact with you.
2. Our Privacy Officer
Under section 201 of the Privacy Act 2020, we have a designated Privacy Officer responsible for ensuring our compliance with the Act, dealing with your requests for access to or correction of your personal information, and working with the Office of the Privacy Commissioner when needed.
You can contact our Privacy Officer at:
3. What personal information we collect
The types of personal information we collect depend on how you interact with us. We may collect:
3.1 Information you provide directly
- Contact details: your name, email address, phone number, and physical address.
- Property details: the address of the property you want to refurbish or fit out, type of dwelling, ownership status, and details about the work you are considering.
- Enquiry and design details: the services you are interested in, your budget range, timeframe, interior style preferences, lifestyle information relevant to the design brief, and any other information you share with us in messages, calls, consultations or our showroom.
- Identity and verification information: information we may need to verify your identity if you ask to access or correct your information, or if you apply for financing.
- Photos and measurements: photos, plans, mood boards or measurements of your property that you share with us, or that we take during site visits and consultations (with your knowledge).
- Marketing preferences: whether you have opted in to receive marketing emails, SMS or other communications.
- Reviews and testimonials: feedback, reviews, photographs and quotes you provide that you have agreed we may publish.
3.2 Information we collect automatically when you use our website
- Device and browser information: IP address, browser type, operating system, device identifiers, and screen size.
- Usage information: the pages you visit, the time and date of your visit, the time spent on each page, the website you came from, and the links you click.
- Location information: approximate location derived from your IP address (we do not collect precise GPS location).
- Cookies and similar technologies: see section 8 below for details.
3.3 Information we collect from other sources (indirect collection)
From 1 May 2026, the Privacy Act 2020 (as amended by the Privacy Amendment Act 2025) requires us to tell you when we collect your personal information from someone other than you. This is called “indirect collection.”
Most of our leads come directly from people who contact us through our website, by phone, or in person. However, in some circumstances we may also receive your personal information indirectly from:
- Referrals: when a designer, architect, real estate agent, building consultant, supplier or existing customer refers you to us and passes on your contact details (with your knowledge).
- Sub-contractors and suppliers: if a sub-contractor or supplier we work with passes on your enquiry to us.
- Social media lead forms: if we run a Facebook or Instagram lead-form ad and you submit your details through it, Meta provides those details to us.
- Finance provider: if you apply for finance through Q Mastercard, we may receive limited information from them about the status of your application.
- Public sources: publicly available information such as property records, business registers, or publicly visible social media profiles, used only where reasonably necessary for the work you have engaged us for.
When we collect your personal information indirectly, we will take reasonable steps to make you aware of the matters set out in IPP3A as soon as reasonably practicable, unless an exception under the Act applies (for example, if you have already been made aware, or if telling you is not reasonably practicable in the circumstances).
4. Why we collect your personal information
We only collect personal information for purposes connected with our business. The main purposes are:
- To respond to your enquiry and provide you with information about our services.
- To prepare a quote, design proposal, mood board, or contract for your interior project.
- To arrange and conduct consultations, site visits and design appointments.
- To carry out interior design, fit-out and joinery work that you have engaged us for, including coordinating sub-contractors, suppliers and project managers.
- To process payments, manage accounts, issue invoices and meet our tax, accounting and record-keeping obligations under New Zealand law.
- To assess your eligibility for finance through Q Mastercard (if you apply for it).
- To communicate with you about the progress of your project, including scheduling, variations and follow-up.
- To ask for feedback, reviews and testimonials about your experience with us.
- To send you marketing communications about our services, offers, design inspiration and interior tips, where you have opted in to receive them.
- To improve our website, services, customer experience and marketing effectiveness.
- To meet our legal obligations under the Building Act 2004, the Health and Safety at Work Act 2015, the Consumer Guarantees Act 1993, the Fair Trading Act 1986, the Tax Administration Act 1994, and any other applicable New Zealand law.
- To enforce our terms and conditions, protect our legal rights, and respond to legal claims or regulatory investigations.
5. Who we share your personal information with
We share your personal information only as needed to deliver our services and run our business. We do not sell your personal information to third parties for their own marketing purposes.
The categories of recipients we may share your information with are:
- Our staff, designers, project managers and consultants involved in your project.
- Sub-contractors and tradespeople we engage to carry out work for your project (joiners, cabinet-makers, painters, installers, electricians, and similar trades).
- Suppliers of products and materials used in your fit-out (for example, when we order cabinetry, tiles, fixtures, soft furnishings or appliances on your behalf).
- Q Mastercard, if you apply for finance.
- Our IT, marketing and business service providers, including Microsoft 365 (email, calendar, document storage), Constant Contact (email marketing), our website hosting provider, our accounting software, and our project management software.
- Advertising and analytics platforms: Meta (Facebook and Instagram) and Google (including Google Ads, Google Analytics, Google Tag Manager, and Google reCAPTCHA), which we use to measure and improve our advertising and website. See section 8 for more on tracking technologies.
- Our professional advisors, such as our lawyers, accountants, insurers and auditors, where reasonably required.
- Government, regulatory and law enforcement agencies, where required or authorised by law (for example, Inland Revenue, Auckland Council, MBIE, WorkSafe, the New Zealand Police, or in response to a court order or formal regulatory request).
- Buyers and successors, if we sell or restructure our business, where the information forms part of the assets being transferred.
All third parties who handle personal information on our behalf are required to keep it confidential and use it only for the purposes we have authorised.
6. Sending personal information overseas
Some of the third parties we use to provide our services are based outside New Zealand, or store personal information on servers located outside New Zealand. This means your personal information may be disclosed overseas, including to:
- The United States: for example, Microsoft (Microsoft 365), Google (Workspace, Ads, Analytics, reCAPTCHA), Meta (Facebook, Instagram) and Constant Contact.
- Australia and other countries: where our service providers operate data centres or support teams in other jurisdictions.
Under Information Privacy Principle 12 (IPP12), we will only disclose your personal information to a recipient outside New Zealand if:
- You authorise the disclosure;
- The recipient is subject to privacy laws that, overall, provide comparable safeguards to the Privacy Act 2020;
- The recipient is required to protect the information in a way that, overall, provides comparable safeguards (for example, through contractual terms); or
- Another lawful basis under IPP12 applies.
Some of the countries we send information to may not have privacy laws that provide the same level of protection as New Zealand. By providing us with your personal information, you understand and agree that it may be transferred and stored outside New Zealand for the purposes set out in this policy.
7. How we tell you about collection at the point of collection
When we collect personal information directly from you (for example, through a form on our website, in person at our showroom, or over the phone), we will make you aware of:
- The fact that we are collecting your information;
- The purpose for which we are collecting it;
- Who we intend to share it with;
- That Little Giant Interiors Limited is the agency collecting and holding the information, and our contact details;
- Any law that requires or authorises the collection (where relevant); and
- Your right to access and correct your information.
On our online forms, we provide a short notice at the point of collection and a link to this Privacy Policy for full details.
8. Cookies, tracking technologies and online advertising
Our website uses cookies and similar technologies. A cookie is a small text file stored on your device when you visit a website. We use cookies and similar technologies for the following purposes:
8.1 Strictly necessary
- To make our website work (for example, session cookies and form security).
- Google reCAPTCHA: we use reCAPTCHA on our forms to protect against spam and abuse. reCAPTCHA collects hardware and software information (such as device and application data), and sends this data to Google for analysis. Use of reCAPTCHA is subject to the Google Privacy Policy and Terms of Service.
8.2 Analytics
- Google Analytics 4 (GA4): we use GA4 to understand how visitors use our website so we can improve it. GA4 collects information such as pages visited, time spent on the site, and approximate location. You can opt out using the Google Analytics Opt-out Browser Add-on.
8.3 Advertising and remarketing
- Meta Pixel and Meta Conversions API (CAPI): we use the Meta Pixel and Meta’s Conversions API to measure the effectiveness of our advertising on Facebook and Instagram, to show you relevant ads, and to understand which actions on our website resulted from our ads.
- Google Ads: we use Google Ads conversion tracking and remarketing to measure ad performance and show relevant ads to people who have previously visited our website.
Your choices: You can manage cookies through your browser settings and adjust how Google and Meta personalise advertising for you through your Google Ad Settings and Meta Ad Preferences. You can also use opt-out tools provided by the Network Advertising Initiative and the Digital Advertising Alliance.
If you turn off cookies, some parts of our website may not function properly.
9. Marketing communications
We send marketing communications (emails, SMS, and similar) only to people who have opted in to receive them, in accordance with the Unsolicited Electronic Messages Act 2007 (UEMA). Our marketing emails are sent through Constant Contact.
Every marketing email or SMS we send will:
- Identify Little Giant Interiors as the sender;
- Provide accurate sender contact information; and
- Include a clear and functional way to unsubscribe.
You can unsubscribe from our marketing communications at any time by clicking the unsubscribe link in any marketing email, replying STOP to a marketing SMS, or emailing us at the address in section 2. Once you unsubscribe, we will stop sending you marketing communications, but we may still need to contact you about your project, account, or other non-marketing matters.
10. How we protect your personal information
Under Information Privacy Principle 5 (IPP5), we are required to take reasonable steps to protect your personal information from loss, unauthorised access, use, modification or disclosure.
The steps we take include:
- Storing electronic personal information on secured systems with restricted access.
- Requiring our staff and contractors to keep personal information confidential.
- Limiting access to personal information to those staff who need it for their role.
- Using secure transmission (such as HTTPS / TLS) for our website forms and online payments.
- Using reputable cloud service providers that maintain appropriate security standards.
- Reviewing and updating our security practices periodically.
No method of transmitting or storing information is completely secure. While we take reasonable steps to protect your personal information, we cannot guarantee absolute security.
11. How long we keep your personal information
Under Information Privacy Principle 9 (IPP9), we only keep your personal information for as long as we have a lawful purpose for holding it.
In practice, the periods below apply (you can ask us about our current retention practices at any time):
- Enquiries that do not become projects: up to 24 months from the date of the enquiry.
- Customer records for completed projects: at least 7 years from project completion, to meet our tax, warranty and legal record-keeping obligations. Some records may be retained longer where required by law.
- Accounting and tax records: at least 7 years, in accordance with the Tax Administration Act 1994.
- Marketing database records: until you unsubscribe or ask us to remove your details, after which we keep a minimal record (your email address on a suppression list) to ensure we do not contact you again.
- Website analytics and advertising data: retained for the periods set by Google, Meta and our other providers (typically 14 to 26 months for individual-level data).
When we no longer have a lawful purpose for holding your personal information, we will securely delete, destroy or de-identify it.
12. Your rights
Under the Privacy Act 2020, you have the following rights:
12.1 Right to access your information (IPP6)
You have the right to ask us to confirm whether we hold personal information about you and, if so, to be given access to that information.
12.2 Right to correct your information (IPP7)
You have the right to ask us to correct any personal information we hold about you that you think is wrong, misleading or out of date. If we do not agree to correct the information, you can ask us to attach a statement of correction to it.
12.3 How to make a request
Send your request to our Privacy Officer using the contact details in section 2 above. To help us respond, please:
- Include your full name and contact details;
- Be as specific as possible about what information you want to access or what you want corrected;
- Provide proof of identity (we may need this to confirm you are the person whose information is being requested).
We will respond to your request as soon as reasonably practicable, and in any case within 20 working days, as required by the Privacy Act 2020. We do not normally charge for access requests, but we may charge a reasonable fee in line with the Act in some circumstances (and we will tell you in advance).
12.4 Right to complain
If you are unhappy with how we have handled your personal information, please contact our Privacy Officer first so we have the chance to fix it.
If you are still not satisfied, you can make a complaint to the Office of the Privacy Commissioner: www.privacy.org.nz, or phone 0800 803 909.
13. Children’s privacy
Our services are intended for homeowners, property owners and adults responsible for interior design decisions. We do not market our services to children and do not knowingly collect personal information from children under 16 without parental or guardian consent.
If you believe we hold personal information about a child that was provided without appropriate consent, please contact our Privacy Officer and we will take steps to delete it.
14. Notifiable privacy breaches
If a privacy breach occurs and we believe it is likely to cause serious harm to you, we will notify you and the Office of the Privacy Commissioner as soon as practicable after becoming aware of the breach, as required by Part 6 of the Privacy Act 2020.
In assessing whether serious harm is likely, we will consider the factors set out in section 113 of the Act, including the sensitivity of the information involved, the nature of the harm, the steps we have taken to reduce the risk of harm, and who has obtained or may obtain the information.
15. Third-party websites and content
Our website may include links to third-party websites, social media platforms, and embedded content (such as YouTube videos or supplier product pages). We are not responsible for the privacy practices of these third parties. We encourage you to read the privacy policies of any third-party sites you visit.
16. Do Not Track signals
Some browsers offer a “Do Not Track” (DNT) setting. There is no industry-agreed standard for how websites should respond to DNT signals. Our website does not currently respond to DNT signals, but you can manage cookies and advertising preferences using the methods described in section 8.
17. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices, in our services, or in the law. When we make a significant change, we will update the “Last reviewed” date at the top of this policy and, where appropriate, notify you by email or through a notice on our website.
We encourage you to review this policy periodically.
18. Contact us
If you have any questions about this Privacy Policy or our handling of your personal information, please contact:
Steven, Privacy Officer
Little Giant Interiors Limited
