top of page

Privacy Policy

Effective date: 16th March 2026

Last updated: 16th March 2026

 

1. Who We Are

 

This Privacy Policy explains how TOTO-TOA Limited, a company registered in New Zealand (“TOTO-TOA”, “we”, “us” or “our”), collects, uses, stores, and shares personal information when you visit or interact with www.toa.eco (the “Website”) or otherwise engage with us.

 

We are committed to protecting your privacy and handling personal information in accordance with applicable privacy and data protection laws, including those that may apply in New Zealand, Australia, the European Union, the United Kingdom, and certain U.S. states.

 

2. Scope of This Policy

 

This Privacy Policy applies to personal information we collect through:

  • our Website;

  • contact forms and email communications;

  • newsletter sign-ups and marketing interactions;

  • enquiries about our products, services, or business;

  • recruitment or employment-related interactions; and

  • other communications with us related to our business.

 

This Privacy Policy does not apply to third-party websites, platforms, or services that may be linked from our Website. Those third parties have their own privacy policies and practices.

 

3. Contact Details

 

If you have any questions about this Privacy Policy or our privacy practices, please contact us:

 

TOTO-TOA Limited

Registered in New Zealand

PO BOX 290, Wellington, 6140, New Zealand

hello@toa.eco

 

4. What Personal Information We Collect

 

We may collect the following types of personal information, depending on how you interact with us.

 

Information you provide directly

 

This may include:

  • your name;

  • email address;

  • phone number;

  • postal address;

  • company or organisation name;

  • job title;

  • information you provide in forms, messages, or enquiries;

  • marketing preferences;

  • information submitted in connection with job applications, including CVs or resumes.

 

Information collected automatically

 

When you visit our Website, we may automatically collect certain information, including:

  • IP address;

  • browser type and version;

  • device type and operating system;

  • pages viewed and links clicked;

  • date and time of visits;

  • referral source;

  • approximate location based on IP address;

  • diagnostic, analytics, and usage information.

 

Information from third parties

 

We may also receive personal information from:

  • analytics providers;

  • marketing and advertising partners;

  • website hosting and technical service providers;

  • recruitment partners;

  • publicly available sources;

  • other third parties you authorise to share information with us.

 

5. How We Collect Personal Information

 

We collect personal information when you:

  • browse or use our Website;

  • contact us by email or through a contact form;

  • subscribe to our newsletter or updates;

  • request information from us;

  • engage with our marketing communications;

  • apply for a role with us;

  • otherwise communicate or interact with us.

 

We also collect information through cookies and similar technologies as described below.

 

6. Why We Collect and Use Personal Information

 

We may collect and use personal information for the following purposes:

  • to operate, maintain, and improve our Website;

  • to respond to enquiries and communicate with you;

  • to provide information about our business, products, or services;

  • to send newsletters or marketing communications where permitted by law;

  • to analyse Website traffic and user behaviour;

  • to personalise and improve user experience;

  • to maintain Website security and prevent fraud or misuse;

  • to manage recruitment and employment-related processes;

  • to comply with legal obligations and enforce our legal rights.

 

7. Legal Bases for Processing

 

Where required by applicable law, we process personal information only where we have a lawful basis to do so. These bases may include:

  • your consent;

  • performance of a contract or taking steps at your request before entering into a contract;

  • compliance with legal obligations;

  • our legitimate interests, including operating, improving, securing, and promoting our business, provided those interests are not overridden by your rights.

 

Where we rely on your consent, you may withdraw that consent at any time.

 

8. Cookies and Similar Technologies

 

We use cookies and similar technologies on our Website to help it function, improve performance, understand usage, and support our communications and marketing activities.

 

These technologies may be used to:

  • remember your preferences;

  • understand how visitors use our Website;

  • measure the effectiveness of campaigns;

  • improve Website functionality and performance;

  • support security and fraud prevention;

  • where applicable, deliver more relevant content or advertising.

 

You can manage cookies through your browser settings. If required by law, we will request your consent before using non-essential cookies.

 

Disabling cookies may affect the functionality of some parts of the Website.

 

9. Marketing Communications

 

Where permitted by law, we may send you updates, newsletters, or other marketing communications.

 

You can opt out of marketing communications at any time by:

  • clicking the unsubscribe link in an email; or

  • contacting us using the details set out above.

 

Even if you opt out of marketing, we may still send you non-marketing communications where necessary, such as responses to your enquiries or important administrative notices.

 

10. How We Share Personal Information

 

We do not sell personal information for money.

 

We may share personal information with:

  • service providers who help us operate our Website and business;

  • hosting, analytics, communications, and technical support providers;

  • payment providers, where relevant;

  • professional advisers such as lawyers, accountants, and auditors;

  • recruitment and HR service providers, where relevant;

  • regulatory authorities, law enforcement, courts, or other parties where required by law;

  • actual or potential purchasers, investors, or transaction partners in connection with a merger, acquisition, restructure, or sale of assets;

  • other parties where you have given consent or requested us to share the information.

 

We may also share aggregated or de-identified information that does not identify you.

 

11. International Data Transfers

 

Because we operate digitally and may use service providers located in different countries, your personal information may be stored or processed outside your country of residence, including in New Zealand and other jurisdictions.

 

Where required by law, we take reasonable steps to ensure that international transfers are protected by appropriate safeguards.

 

12. Data Retention

 

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

  • provide our Website and related services;

  • respond to enquiries;

  • maintain business records;

  • comply with legal, accounting, and regulatory obligations;

  • resolve disputes and enforce agreements.

 

When personal information is no longer needed, we will delete it, anonymise it, or securely destroy it, unless we are required or permitted by law to retain it for longer.

 

13. Security

 

We take reasonable technical, organisational, and administrative steps to protect personal information from loss, misuse, unauthorised access, disclosure, alteration, or destruction.

 

However, no method of transmission over the internet or method of electronic storage is completely secure. While we work to protect your information, we cannot guarantee absolute security.

 

14. Your Privacy Rights

 

Depending on where you are located, you may have rights in relation to your personal information, including the right to:

  • request access to personal information we hold about you;

  • request correction of inaccurate or incomplete information;

  • request deletion of personal information;

  • object to certain processing;

  • request restriction of processing;

  • withdraw consent where processing is based on consent;

  • request portability of certain information;

  • opt out of direct marketing;

  • opt out of certain targeted advertising or similar data uses where applicable;

  • lodge a complaint with a privacy regulator or supervisory authority.

 

We may need to verify your identity before responding to a request. Some rights are subject to legal exceptions and limitations.

 

To exercise your rights, please contact us at hello@toa.eco

 

15. Regional Privacy Rights

 

New Zealand

 

If New Zealand privacy law applies, you may request access to and correction of personal information we hold about you, subject to lawful grounds for refusal.

 

Australia

 

If Australian privacy law applies, you may request access to and correction of your personal information and make a complaint if you believe your information has been handled in a way that breaches applicable privacy law.

 

European Union / United Kingdom

 

If you are located in the European Union, European Economic Area, or United Kingdom, you may have rights to access, rectify, erase, restrict, object to processing, and request portability of your personal data, as well as the right to lodge a complaint with your local supervisory authority.

 

United States

 

If applicable U.S. state privacy laws apply to our handling of your information, you may have rights to know what personal information we collect, access it, correct it, delete it, and opt out of certain uses such as targeted advertising or certain disclosures defined by law.

 

16. Children’s Privacy

 

Our Website is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13 without the consent required by law.

 

If you believe that a child has provided us with personal information inappropriately, please contact us and we will take appropriate steps.

 

17. Third-Party Links

 

Our Website may contain links to third-party websites or services. We are not responsible for the privacy practices, content, or security of those third parties. We encourage you to review their privacy policies before providing them with personal information.

 

18. Changes to This Privacy Policy

 

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons.

 

When we make changes, we will update the “Last updated” date at the top of this page. Your continued use of the Website after any changes are posted indicates your acceptance of the updated Privacy Policy, to the extent permitted by law.

 

19. Contact Us

 

If you have any questions, concerns, or requests regarding this Privacy Policy or our handling of personal information, please contact us:

 

TOTO-TOA Limited

PO BOX 290, Wellington, 6140, New Zealand

hello@toa.eco

bottom of page