Privacy policy

This policy explains what personal information ColdGoat (coldgoat.com) collects, why we collect it, and how we handle it. We comply with the New Zealand Privacy Act 2020 and the Information Privacy Principles (IPPs).

If you have questions, email ….

What we collect

When you submit a brief, we collect:

Your name and business name
Your email address (and phone number if you supply one)
What you are making, including the description, stage, target run size, certifications, preferred region, and timing
Your consent to us reading the brief and talking to manufacturers

When you visit the site, we and our service providers automatically collect:

Your IP address, approximate country, browser and device information, referring URL, and the pages you view
Interaction events such as clicks, form field focus, and session recordings (with form inputs masked by default)
Cookies and similar identifiers used by Google Tag Manager, Google Analytics 4, Google Ads, HubSpot, and PostHog

Why we collect it

To read your brief and match it against our manufacturer directory
To call manufacturers on your behalf and come back to you with a shortlist
To respond when you contact us
To measure how the site performs, fix issues, and improve it
To measure the effectiveness of our advertising, including Google Ads conversion tracking

Where you submit a brief, we treat your consent on the form as your agreement for us to use your information for these purposes.

We share what we need to, only with people who help us run the service. We do not sell your information.

Manufacturers: we talk product details with them to find a fit, but we do not share your name until you give the go-ahead, and we do not share your recipe.
Email and infrastructure providers: Mailgun (email delivery) and Cloudflare (hosting, security, network routing).
Analytics and marketing providers: Google (Analytics 4, Tag Manager, Ads), HubSpot (website analytics and chat), and PostHog (product analytics and session replay).

For Google Ads conversion tracking we share hashed versions of your name, email, and phone (SHA-256) so Google can match your action to an ad click without us sending Google your raw details.

Where your information is held

Some of our service providers store and process information outside New Zealand, including in the United States and the European Union. When personal information is disclosed overseas, we rely on the recipient being subject to comparable privacy safeguards or on the authorisation of the individual under IPP 12 of the Privacy Act.

Cookies and tracking

We use cookies and similar technologies to keep the site working, understand how it is used, and measure advertising. The main tools we use are:

Google Analytics 4 and Google Tag Manager for page analytics.
Google Ads for conversion tracking, including Enhanced Conversions for Leads.
HubSpot for site analytics and the chat widget.
PostHog for product analytics and session replay.

You can block or delete cookies through your browser settings. If you do, parts of the site may not work as expected.

How long we keep it

We keep brief submissions for as long as we need to follow up with you and to keep a record of the work we did. Analytics and tracking data is kept for the default retention periods of each provider unless we shorten them. If you ask us to delete your information, we will do so unless we are required to keep it.

Security

We take reasonable steps to keep personal information secure, including using providers that encrypt data in transit and at rest, and limiting who on our team can see briefs.

Your rights

You can ask us what we hold about you and ask us to correct it if it is wrong. Email … and we will get back to you.

Changes

We may update this policy from time to time. The last updated date at the top of the page tells you when. If we make a material change, we will let you know on the site.

Contact

ColdGoat

Email: …