Hero Brands Privacy Policy

Introduction

This Privacy Policy explains how Future Limited, trading as Hero Brands ("Hero Brands", "we", "us", or "our"), collects, uses, stores, and shares personal information.

We are committed to handling personal information in accordance with the Privacy Act 2020 and other applicable New Zealand privacy laws.

This Privacy Policy explains:

• what personal information we collect
• how we collect it
• why we collect it
• how we use it
• when we may share it
• how you can access or correct it
• how we protect it

This Privacy Policy applies to personal information collected through our website, forms, CRM systems, proposals, onboarding processes, communications, and services.

1. Information We Collect

We may collect the following types of personal information:

Information you give us

We may collect personal information when you contact us, submit a form, request a proposal, become a client, use our services, or otherwise interact with us.

This information may include:

• your name
• email address
• phone number
• business name
• job title or role
• billing details
• payment-related information
• address information
• information about your business, marketing needs, systems, customers, and goals
• information you provide during meetings, onboarding, support requests, and service delivery

Information collected through your use of our services

When you use services we provide or systems we manage, we may collect information such as:

• login and account access information
• CRM usage information
• communications and support history
• call logs, form submissions, workflow activity, and system usage data
• technical information relating to access and use of our systems

Information collected from our website

When you visit our website, we may collect information such as:

• IP address
• browser type
• device type
• operating system
• pages visited
• referring website
• time spent on pages
• actions taken on our site
• general location information

We may collect this information using cookies, analytics tools, pixels, and similar technologies.

Information from other sources

Where permitted by law, we may also collect information from:

• your organisation or representatives
• service providers or integration partners you authorise
• publicly available sources
• referral partners
• payment providers
• software platforms connected to your services

2. How We Use Personal Information

We may use personal information to:

• provide information, proposals, products, and services
• create and manage client accounts
• provide CRM, funnel, website, automation, and content services
• onboard clients and manage service delivery
• communicate with you about our services
• send invoices, process payments, and manage accounts
• provide support and respond to requests
• improve our website, systems, and services
• monitor performance, usage, and security
• maintain records of communications and transactions
• comply with legal obligations
• protect our legal rights and enforce our agreements
• send service updates, product updates, and marketing communications where permitted by law

We may also use aggregated or anonymised information for reporting, analytics, service improvement, and internal business purposes.

3. Cookies, Analytics, and Tracking

We may use cookies, pixels, analytics tools, and similar tracking technologies on our website and in some digital services.

These technologies may help us:

• understand website usage
• improve website performance and user experience
• measure campaign effectiveness
• understand visitor behaviour
• support remarketing or advertising activity

Third-party tools we may use can include analytics, advertising, CRM, form tracking, and automation platforms.

You can usually control cookies through your browser settings. If you disable cookies, some parts of our website or services may not function correctly.

4. Marketing Communications

We may send you marketing or promotional communications about Hero Brands' services where permitted by law.

You can opt out of marketing communications at any time by:

• clicking the unsubscribe link in an email, or
• contacting us directly

Even if you opt out of marketing messages, we may still send you service-related communications, billing notices, account notices, and other important operational communications.

5. When We Share Personal Information

With your consent

We may share information with third parties where you have authorised or requested us to do so.

With service providers and contractors

We may share information with trusted suppliers, contractors, and service providers who help us deliver our services, including providers of:

• website and cloud hosting
• CRM and automation systems
• email and SMS systems
• payment processing
• analytics and tracking
• scheduling and communication tools
• design, content, editing, and technical support

These parties may only access personal information to the extent reasonably necessary to perform services for us or on your instructions.

With your organisation

If you engage with us on behalf of a business, organisation, or employer, we may share relevant information with authorised representatives of that organisation.

For legal reasons

We may disclose information where required or permitted by law, including where reasonably necessary to:

• comply with legal obligations
• respond to lawful requests
• protect our rights or property
• investigate fraud, misuse, or security issues
• prevent or lessen a serious threat to any person

Business transfers

If our business or assets are restructured, sold, or transferred, personal information may be transferred as part of that transaction, subject to appropriate confidentiality and legal protections.

6. Third-Party Platforms and Integrations

In delivering our services, we may use third-party software and platforms, including CRM systems, payment gateways, cloud services, analytics tools, domain providers, AI tools, and communication platforms.

Personal information may be processed by those third-party providers in accordance with their own terms and privacy policies.

Where your services involve third-party systems chosen by you or integrated at your request, you are responsible for reviewing the relevant third-party terms and privacy settings.

7. Overseas Storage and Processing

We may store or process personal information in New Zealand or in other countries where we or our service providers operate.

This may include countries such as Australia, the United States, the United Kingdom, and other jurisdictions used by reputable cloud, software, and infrastructure providers.

Where personal information is disclosed or stored overseas, we take reasonable steps to ensure it is protected by appropriate safeguards.

8. Security

We take reasonable steps to protect personal information from loss, misuse, unauthorised access, disclosure, alteration, or destruction.

These steps may include:

• password protection
• access controls
• secure platforms and providers
• encryption where appropriate
• internal process controls
• limiting access to staff and contractors who need it

However, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security.

9. Retention of Personal Information

We keep personal information for as long as reasonably necessary for the purposes for which it was collected, including:

• to provide services
• to maintain business and financial records
• to comply with legal obligations
• to resolve disputes
• to enforce agreements
• to protect our legitimate business interests

We may retain some information after services end where required for legal, accounting, backup, fraud prevention, operational, or compliance reasons.

We may also retain anonymised or aggregated information indefinitely.

10. Your Rights

You may have the right to:

• request access to personal information we hold about you
• request correction of personal information that is inaccurate
• request that we update or amend your information
• opt out of marketing communications

If you would like to request access to or correction of your personal information, please contact us using the details below.

We may require reasonable proof of identity before actioning your request.

11. Client Responsibilities for End-User Data

If you are a client using our websites, forms, funnels, CRM systems, automations, or related services to collect personal information from your own customers, leads, subscribers, or users, you are responsible for:

• ensuring you have the right to collect and use that information
• providing your own privacy policy where required
• complying with applicable privacy and marketing laws
• obtaining any required consents
• determining how end-user information is used in your business

We do not provide legal advice on your obligations to your own end users.

12. AI and Automated Tools

We may use artificial intelligence, automation, and machine-assisted tools in some parts of our business and service delivery.

Where we do so, we will handle personal information in accordance with this Privacy Policy and applicable law.

13. Changes to This Policy

We may update this Privacy Policy from time to time.

The latest version will be published on our website. If we make material changes, we may notify active clients by email or by other reasonable means.

Your continued use of our website or services after an updated version is published may constitute acceptance of the updated policy, to the extent permitted by law.

14. Contact Us

If you have any questions about this Privacy Policy, or if you want to request access to or correction of your personal information, contact:

Future Limited trading as Hero Brands
Website: herobrands.nz
Privacy Policy: herobrands.nz/legal/privacy-policy
Email: support@herobrands.nz