Generic Privacy Policy
Who we are
Our website address is: https://aeronskills.co.nz.
Comments
When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.
An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/.
Media
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
Cookies
If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.
Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
Who we share your data with
If you request a password reset, your IP address will be included in the reset email.
How long we retain your data
If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.
For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
What rights you have over your data
If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
Where your data is sent
Visitor comments may be checked through an automated spam detection service.
PRIVACY POLICY, DATA PROTECTION NOTICE AND INFORMATION NOTICE
Last Updated: December 2025
PRIVACY POLICY STATEMENTS
1. INTRODUCTION
Aeron Skills Limited (NZBN: 9429051361853) (“we”, “us”, “our”, or “Aeron Skills”) is strongly committed to protecting your privacy and providing a safe online experience for all our users while offering the highest quality user experience. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.aeronskills.co.nz (the “Website”), use our services, attend our workshops and seminars, or interact with us through our Learning Management System (LMS) platform.
By using our Website or services, you agree to the terms of this Privacy Policy. We encourage you to read this policy carefully to understand our practices regarding your personal information.
Aeron Skills Limited (NZBN: 9429051361853) is registered in New Zealand in accordance with Companies Act 1993, Company Number # 8761932
If you need more information about this Act, please contact the administering agency: Ministry of Business, Innovation, and Employment.
NZBN: 9429051361853 (Publicly available at https://www.nzbn.govt.nz)
Privacy Contact Email: info@aeronskills.co.nz
2. SCOPE OF POLICY
This Privacy Policy applies to:
- Our website: www.aeronskills.co.nz
- Our Learning Management System (LMS) platform (currently under development)
- Event registrations and RSVPs through The Events Calendar (https://theeventscalendar.com/)
- Website development – WordPress (https://wordpress.com/)
- Contact forms and enquiry submissions
- Email communications and newsletters
- In-person and online workshops, seminars, and training programs
- Social media interactions on our official channels (Facebook: facebook.com/AeronSkills, Instagram: instagram.com/AeronSkills)
3. WHO WE ARE
Aeron Skills Limited is a New Zealand-based company that provides:
- Life skills and soft skills seminars and workshops (conducted by Director Kunjan Vaishnav)
- Arts, crafts, and clay modelling workshops (conducted by Director Shraddha Vaishnav)
- Online and in-person training programs
- Educational courses through our LMS platform
- Webinars and online learning events
We serve customers in New Zealand and internationally, including Australia, United States, APAC region, Sri Lanka, Germany, France, Argentina, Switzerland, and Norway.
4. INFORMATION WE COLLECT
4.1 Information You Provide to Us
You can visit our Website and browse its contents without providing personally identifiable information. However, we collect information that you voluntarily provide when you:
Contact Forms:
- Name
- Company name (optional)
- Contact phone number
- Email address
- Message content
Event Registration and RSVPs:
- Name
- Email address
- Phone number
- Number of additional attendees
- Guest information (if bringing others)
LMS Platform Account Creation:
- Username and password
- Email address
- Name
- Course enrollment information
- Learning progress and completion records
- Certificates earned
- Course interaction data
Children’s Workshop Registrations: When registering children for our sessions, we collect:
- Child’s name and age
- Parent/guardian name and contact information
- Emergency contact details
- Designated pick-up/drop-off person information
Newsletter Subscriptions:
- Email address
- Name
- Communication preferences (weekly, bi-weekly, or monthly)
You can choose not to provide certain information, but this may limit your ability to access certain features, register for events, or use our services.
4.2 Information Collected Automatically
We automatically collect certain information when you visit our Website:
Technical Information:
- Internet Protocol (IP) address
- Browser type and version
- Device type and operating system
- Internet Service Provider (ISP)
- Referring website addresses
- Pages visited on our Website
- Date and time of visits
- Clickstream data
Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies to:
- Track usage patterns on our Website
- Facilitate your online experience
- Remember your preferences
- Analyze website traffic through Google Analytics
- Enable social media features and advertising through Meta/Facebook pixels
- Support functionality of WordPress plugins (Avas theme, The Events Calendar, slider plugins, etc.)
4.3 Information from Third Parties
We may receive information about you from:
- HubSpot: Email marketing and customer relationship management data
- Google Analytics: Website usage analytics
- Meta Business Suite: Social media engagement and advertising data
- Payment processors (Stripe): Transaction and payment information when processing payments through our LMS platform
- Video conferencing platforms: When you attend online sessions via Zoom, Jitsi, BigBlueButton, Webex, Microsoft Teams, or On24 (each platform has its own privacy policy)
- Educrypt.ai: Our LMS platform provider that hosts and manages our learning management system
5. HOW WE USE YOUR INFORMATION
We use the collected information for the following purposes:
5.1 Service Delivery
- Processing event registrations and RSVPs
- Managing workshop and seminar attendance
- Providing access to our LMS platform and online courses
- Facilitating online and offline training programs
- Communicating event details, meeting links, and updates
- Tracking course progress and issuing certificates
5.2 Communication
- Responding to inquiries submitted through contact forms
- Sending newsletters (weekly, bi-weekly, or monthly based on your preferences)
- Providing customer support
- Sending important service announcements
- Marketing our services and upcoming events (with your consent)
5.3 Safety and Child Protection
- Maintaining emergency contact information for children attending workshops
- Verifying authorized pick-up/drop-off persons for in-person children’s sessions
- Ensuring the safety and wellbeing of minor participants
5.4 Business Operations
- Evaluating and improving our Website and services
- Analyzing usage patterns and user preferences
- Troubleshooting technical issues
- Conducting internal business analysis
- Managing our relationship with you
5.5 Legal and Compliance
- Complying with New Zealand tax regulations (Inland Revenue Department requirements)
- Maintaining financial records for up to 7 years as required by law
- Meeting legal obligations and protecting our legal rights
- Preventing fraud and ensuring security
5.6 Marketing and Analytics
- Understanding user behavior through Google Analytics
- Conducting targeted advertising through Meta/Facebook
- Improving our marketing strategies
- Measuring the effectiveness of our campaigns
6. LEGAL BASIS FOR PROCESSING (GDPR COMPLIANCE)
For users in the European Economic Area (EEA), United Kingdom, and other jurisdictions with similar data protection laws, we process your personal data based on the following legal grounds:
Consent: When you provide explicit consent (e.g., subscribing to newsletters, accepting cookies)
Contract Performance: When processing is necessary to fulfill our contractual obligations (e.g., providing courses you’ve enrolled in, processing event registrations)
Legitimate Interests: When we have legitimate business interests (e.g., improving our services, fraud prevention, network security) that do not override your rights
Legal Obligation: When we must comply with legal requirements (e.g., tax record retention, child safety regulations)
You have the right to withdraw consent at any time, which will not affect the lawfulness of processing based on consent before withdrawal.
7. HOW WE SHARE YOUR INFORMATION
7.1 Service Providers and Partners
We share personal information with trusted third parties who assist us in operating our business:
Technology and Platform Providers:
- LMS platform provider for educational course delivery
- Website hosting services
- Payment processing services for transactions
- WordPress plugin developers for website functionality
- Video conferencing platforms including Zoom, Jitsi, BigBlueButton, Webex, Microsoft Teams, and On24 (each has its own privacy policy)
Marketing and Analytics:
- HubSpot: Email marketing and CRM services
- Google Analytics: Website analytics
- Meta Business Suite: Social media management and advertising
- Atlassian Jira: Project management and service operations
Other Service Providers:
- Technical and database consultants
- IT support providers
- Professional advisors (lawyers, accountants)
All service providers must comply with our privacy standards and are contractually prohibited from selling your information or using it except as authorized by us or required by law.
7.2 Legal Requirements
We may disclose your information when required or permitted by law:
- To comply with legal obligations, court orders, or government requests
- To protect our rights, property, or safety, or that of our users or the public
- To enforce our Terms of Use or other agreements
- To investigate potential violations of law or policy
- To detect, prevent, or address fraud, security, or technical issues
7.3 Business Transfers
In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred to the acquiring entity, subject to this Privacy Policy.
7.4 With Your Consent
We may share your information for purposes not described in this policy when we have your explicit consent.
8. INTERNATIONAL DATA TRANSFERS
Aeron Skills Limited is based in New Zealand. When you provide information to us, it will be processed and stored in New Zealand. We also use service providers located in other countries, including Australia, Finland, India and the United States, where our hosting, LMS platform, and other service providers operate.
By using our services, you consent to the transfer of your information to countries outside your country of residence, which may have different data protection standards. We take appropriate measures to ensure your data receives adequate protection, including:
- Entering into data processing agreements with service providers
- Ensuring service providers comply with recognized data protection frameworks
- Implementing appropriate technical and organizational security measures
For EEA and UK users, we ensure transfers comply with GDPR requirements through appropriate safeguards such as Standard Contractual Clauses, appropriate SLAs, contractual agreements, terms of usage, EULAs (End-user license agreement), etc.
9. COOKIES AND TRACKING TECHNOLOGIES
9.1 What Are Cookies?
Cookies are small text files stored on your device when you visit websites. They help websites remember your preferences and improve your browsing experience.
9.2 How We Use Cookies
We use cookies and similar technologies for:
- Essential Cookies: Required for website functionality (e.g., session management, security)
- Analytics Cookies: Google Analytics to understand how visitors use our site
- Marketing Cookies: Meta/Facebook pixels for targeted advertising and remarketing
- Functional Cookies: Remembering your preferences and settings
- Plugin Cookies: WordPress plugins like The Events Calendar, Avas theme, and slider components
9.3 Managing Cookies
You can control cookies through your browser settings:
- Accept or decline cookies
- Delete existing cookies
- Set preferences for specific websites
- Receive notifications when cookies are set
Please note that disabling cookies may affect website functionality and your user experience. Our Website remains viewable with cookies disabled, but some features may not work properly.
9.4 Third-Party Cookies
Third-party services like Google Analytics and Meta may place cookies on your device. These are governed by their respective privacy policies:
- Google Analytics: https://policies.google.com/privacy
- Meta/Facebook: https://www.facebook.com/privacy/policy
10. DATA RETENTION
We retain your personal information for different periods depending on the purpose:
Contact Form Submissions: Retained until you request removal or as long as necessary for business purposes.
Event Registration Data:
- Online events: Name and email address retained for up to 7 years if an invoice was generated (IRD tax compliance requirement)
- Physical registration forms: Securely shredded using destruction bins after the event concludes and the certificates are issued. In case of requests for reissue of certificates, the attendee would need to prove their attendance and provide proof of payment, certificate number, etc. as such information is not stored after end of the event. We can’t reissue certificates without proper verification since we don’t retain that data
- Marketing purposes: Removed upon request or unsubscribe
LMS Platform Data: Retained for the duration of your account and course access, plus any period required for tax or legal compliance.
Newsletter Subscriptions: Retained until you unsubscribe or request removal.
Children’s Workshop Data: Emergency contact and pick-up/drop-off information retained only for the duration of workshop sessions and deleted afterward, except where required for legal compliance.
Financial Records: Retained for 7 years in compliance with New Zealand Inland Revenue Department (IRD) regulations.
Analytics and Cookie Data: Retention periods are governed by the respective third-party service policies (Google Analytics, HubSpot, etc.).
When data is no longer needed, we securely delete or anonymize it in accordance with our data retention procedures.
11. YOUR RIGHTS AND CHOICES
11.1 Rights Under New Zealand Privacy Act 2020
Under New Zealand law, you have the right to:
- Access: Request access to personal information we hold about you
- Correction: Request correction of inaccurate or incomplete information
- Deletion: Request deletion of your personal information (subject to legal retention requirements)
- Objection: Object to certain processing of your information
- Complaint: Lodge a complaint with the Privacy Commissioner if you believe your privacy has been breached
11.2 Additional Rights Under GDPR (for EEA and UK Users)
If you are in the European Economic Area or United Kingdom, you have additional rights:
- Data Portability: Receive your data in a structured, machine-readable format
- Restriction: Request restriction of processing under certain circumstances
- Withdrawal of Consent: Withdraw consent for processing based on consent
- Automated Decision-Making: Object to decisions based solely on automated processing
11.3 How to Exercise Your Rights
To exercise any of these rights, contact us at: Email: info@aeronskills.co.nz
We will respond to your request within:
- 20 working days (New Zealand Privacy Act)
- 1 month (GDPR), extendable by 2 months for complex requests
11.4 Marketing Communications
Unsubscribing from Newsletters: You may unsubscribe from our email newsletters at any time by:
- Clicking the “unsubscribe” link in any email
- Contacting us at info@aeronskills.co.nz
- Updating your preferences in your LMS account (when available)
We will process opt-out requests promptly, but please allow:
- Up to 30 days for email communications
- Up to 60 days for printed materials already in production
11.5 Cookie Preferences
You can manage cookie preferences through your browser settings at any time. See Section 9 for details.
12. SECURITY OF YOUR INFORMATION
12.1 ISO 27001 Alignment
We align our information security practices with ISO 27001 standards, implementing appropriate technical and organizational measures to protect your personal information against:
- Unauthorized access or disclosure
- Accidental loss or destruction
- Misuse or alteration
- Unlawful processing
12.2 Security Measures
Our security practices include:
- Access Controls: Limiting access to personal data to authorized employees and service providers with a specific need to access the information
- Encryption: Using industry-standard encryption for data transmission (SSL/TLS)
- Secure Storage: Storing data on multiple secure systems in controlled environments
- Regular Reviews: Conducting internal security audits and reviews regularly
- Staff Training: Ensuring staff understand and follow data protection procedures
- Vendor Management: Requiring service providers to maintain appropriate security standards
- Physical Security: Secure destruction of physical documents using destruction bins
- Incident Response: Maintaining procedures to respond to data breaches
12.3 Security Limitations
While we implement industry-standard security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we continuously work to protect your information using reasonable security measures appropriate to the sensitivity of the data.
12.4 Data Breach Notification
In the event of a data breach that poses a risk to your rights and freedoms, we will:
- Notify the Privacy Commissioner (New Zealand) without undue delay
- Notify affected individuals where required by law
- Take immediate steps to mitigate the breach
- Document the breach and our response
13. CHILDREN’S PRIVACY
13.1 Children’s Workshops and Services
We offer numerous workshops and conduct events that may be attended by children, including school-age children. We are committed to protecting children’s privacy and safety.
13.2 Parental Consent and Involvement
For children under 16 years of age:
- We require parental or guardian consent for registration
- We collect only information necessary for safety and emergency purposes
- Parents/guardians must provide emergency contact information
- Parents/guardians must designate authorized pick-up/drop-off persons for in-person sessions
13.3 Information Collected About Children
We collect minimal information about children:
- Name and age
- Parent/guardian contact information
- Emergency contacts
- Authorized pick-up/drop-off persons
- Workshop attendance records
This information is used solely for:
- Safety and emergency purposes
- Facilitating workshop participation
- Communicating with parents/guardians
- Compliance with child safety regulations
13.4 Children’s Online Privacy Protection
For online workshops and webinars attended by children:
- Parents/guardians receive meeting links and registration details via email
- We explicitly announce if sessions will be recorded or photographed
- Children can turn off cameras and have their names hidden if uncomfortable
- Third-party video conferencing platforms have their own privacy policies
13.5 Data Deletion
Information about children is retained only as long as necessary for the purposes outlined above and is securely deleted afterward, except where legal retention requirements apply.
13.6 Parental Rights
Parents and guardians have the right to:
- Review information we hold about their child
- Request correction or deletion of information
- Withdraw consent for further processing
- Object to certain uses of their child’s information
13.7 Monitoring and Safety
We encourage parents to:
- Monitor their children’s participation in online sessions
- Discuss online safety with their children
- Review this privacy policy with their children when appropriate
14. VIDEO AND PHOTO RECORDING
14.1 Recording Notice
When we record workshops, seminars, or events (video or photo):
- We provide explicit advance notice to all attendees
- Attendees are informed of the purpose of recording (e.g., marketing, content creation, documentation)
- Recording announcements are made at the beginning of sessions
14.2 Your Control
If you are uncomfortable being recorded or photographed:
- You may turn off your camera during online sessions
- You may request that your name be hidden
- You may position yourself outside the recording area at in-person events
- You may notify us that you do not consent to being included in promotional materials
14.3 Use of Recordings
Recorded content may be used for:
- Marketing and promotional purposes
- Creating educational content
- Event documentation
- Social media sharing (with appropriate consent)
By attending events where recording is announced, you consent to being recorded unless you exercise your opt-out rights as described above.
15. THIRD-PARTY LINKS AND SERVICES
15.1 External Websites
Our Website may contain links to third-party websites, including:
- Social media platforms (Facebook, Instagram)
- Video conferencing platforms (Zoom, Webex, BigBlueButton, Jitsi, Microsoft Teams, etc.)
- Payment processors (Stripe, PayPal, AirWallex, etc.)
- Other educational or professional resources
We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.
15.2 Third-Party Platform Policies
When you use third-party services through our platform:
- LMS Platform: Subject to our LMS provider’s privacy policy
- Video Conferencing Platforms: Each platform (Zoom, Jitsi, BigBlueButton, Webex, Microsoft Teams, On24) has its own privacy policy and terms of use
- Payment Processors: Payment processor privacy policies apply to transactions
- Email Marketing: Email marketing platform privacy policies govern communications
We encourage you to review these third-party policies, as we do not control their practices.
16. CHANGES TO THIS PRIVACY POLICY
16.1 Updates
We may update this Privacy Policy periodically to reflect:
- Changes in our business practices
- New legal or regulatory requirements
- Improvements to our services
- User feedback and concerns
16.2 Notification of Changes
When we make material changes to this policy:
- We will update the “Last Updated” date at the top of this policy
- We will post the revised policy on our Website
- For significant changes, we will provide prominent notice on our Website prior to implementation
- We may email registered users about material changes
16.3 Review and Acceptance
We recommend that you review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our Website and services after changes are posted constitutes acceptance of the updated policy.
16.4 Non-Retroactive Changes
We will not make retroactive material changes in how we handle previously collected personal information without your consent, unless legally required to do so.
17. GDPR COMPLIANCE SUMMARY
For users in the European Economic Area and United Kingdom, we comply with the General Data Protection Regulation (GDPR) by:
Lawful Processing: Processing personal data only on lawful grounds (consent, contract, legitimate interests, legal obligation)
Data Minimization: Collecting only data necessary for specified purposes
Accuracy: Maintaining accurate and up-to-date information
Storage Limitation: Retaining data only as long as necessary
Security: Implementing appropriate technical and organizational security measures
Accountability: Maintaining records of processing activities and demonstrating compliance
Rights Fulfillment: Honoring all GDPR rights including access, rectification, erasure, restriction, portability, and objection
Data Protection Impact Assessments: Conducting assessments for high-risk processing activities
Data Breach Notification: Notifying supervisory authorities and affected individuals of breaches within required timeframes
International Transfers: Ensuring appropriate safeguards for data transfers outside the EEA/UK
18. CONTACT INFORMATION AND COMPLAINTS
18.1 Privacy Inquiries
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Email: info@aeronskills.co.nz
NZBN: 9429051361853
Please include detailed information about your inquiry, including the URL or service involved, so we can assist you effectively.
18.2 Complaints
If you believe your privacy rights have been violated:
New Zealand Users: You may lodge a complaint with the Office of the Privacy Commissioner:
- Website: https://www.privacy.org.nz
- Phone: 0800 803 909
- Email: enquiries@privacy.org.nz
EEA and UK Users: You have the right to lodge a complaint with your local supervisory authority:
- UK: Information Commissioner’s Office (ICO) – https://ico.org.uk
- EEA: Your country’s data protection authority
Other Jurisdictions: Contact your local data protection authority or privacy regulator.
We encourage you to contact us first so we can address your concerns directly. We are committed to working with you to resolve any privacy issues.
19. TERMS OF USE
Your use of our Website and services is also governed by our Terms of Use. Any disputes regarding privacy are subject to this Privacy Policy and our Terms of Use, including limitations on damages and resolution of disputes. Please review our Terms of Use in conjunction with this Privacy Policy.
20. ACKNOWLEDGMENT AND CONSENT
By using www.aeronskills.co.nz, registering for our events, creating an account on our LMS platform, or otherwise engaging with our services, you acknowledge that:
- You have read and understood this Privacy Policy
- You consent to the collection, use, and disclosure of your information as described
- You understand your rights regarding your personal information
- You agree to the international transfer of your data as necessary for service delivery
If you do not agree with this Privacy Policy, please do not use our Website or services.
This Privacy Policy is effective as of the date stated at the top of this document.
Aeron Skills Limited
NZBN: 9429051361853
Email: info@aeronskills.co.nz
Website: www.aeronskills.co.nz
