Only the information needed to understand and respond to your request.

Last updated 12 August 2026

1. Who collects and holds the information

Client Report Works is a New Zealand professional service operated by Nova MacCourt in Auckland, New Zealand. Client Report Works is the agency that collects and holds the personal information described in this statement.

Privacy contact: privacy@clientreportworks.co.nz
Website: https://clientreportworks.co.nz

2. What this statement covers

This statement covers personal information collected through this public website, the report fit-check form, direct email, Calendly scheduling and optional Google Analytics. A paid client engagement may involve additional project information and project-specific handling terms in the proposal, statement of work, data-handling schedule or other engagement documents.

3. Information we collect

Information you provide through the website or email

The report fit-check form or a direct enquiry may collect:

• your name, work email, organisation and any contact details you choose to provide;
• report frequency, current format, approximate number and type of inputs;
• approximate production time and the main reporting problem;
• a high-level, non-confidential description of the current workflow;
• whether sensitive or regulated information may be involved;
• optional weekday availability and the contents of related correspondence;
• information needed to prepare a requested diagnostic, proposal or engagement.

The public website does not offer report-file upload. Do not submit client names, report figures, passwords, tokens, credentials, confidential source content, health information, student information or other highly sensitive material through the public form.

Information you provide when booking through Calendly

If you open the booking window and schedule a meeting, Calendly may collect your name, email address, time zone, selected time, answers to booking questions and related technical information. Client Report Works receives the booking details needed to arrange and conduct the meeting. Calendly processes this information as a service provider for scheduling and under its own privacy notice.

Information collected automatically for security and operation

The website and hosting service may process limited technical information needed to serve, secure and troubleshoot the site, such as IP address, browser and device information, requested page, referring page, date and time, server logs and security events. The fit-check form stores a one-way hashed form of the submitting IP address for rate limiting and abuse prevention rather than adding the raw address to the form record.

An essential session cookie may be used on form-related pages to protect against cross-site request forgery, preserve validation messages and operate basic anti-abuse controls. A first-party browser storage value records your analytics choice. These functions are not used for advertising or cross-site profiling.

Optional Google Analytics information

Google Analytics 4 is used only after you select Allow analytics. It may collect or derive information such as pages viewed, approximate location, browser and device category, referring source, session timing and non-personal interaction events such as opening the booking window. Client Report Works does not intentionally send names, email addresses, report details or other form-field content to Google Analytics.

Advertising storage, advertising user data, advertising personalisation, remarketing and Google Signals are not enabled through this website implementation.

4. Why we collect and use information

We collect and use personal information only where reasonably necessary for the lawful functions of the business, including to:

• assess whether a recurring report appears to fit the service boundary;
• reply to your enquiry and arrange, administer or conduct a fit check;
• prepare a requested diagnostic, proposal, statement of work or engagement;
• maintain an enquiry and correspondence record and avoid duplicate or abusive submissions;
• operate, secure, diagnose and improve the website and enquiry process;
• understand, in aggregate, which pages and actions are useful where analytics consent has been given;
• manage client relationships, invoices, records, complaints and disputes;
• meet applicable legal, accounting, insurance or professional obligations.

A fit-check request does not automatically subscribe you to a marketing list.

5. Where the information comes from

Most information comes directly from you through the website, email or Calendly. Technical information comes from your browser, device, network and the providers used to deliver the website and scheduling service. Client Report Works may also receive relevant business contact information from a person who introduces or refers you. Where indirect collection requires notice, reasonable steps will be taken to make sure you are informed.

6. Who may receive or process it

Access is limited to people and providers who need the information for the purposes above. These may include:

• Nova MacCourt and an authorised Client Report Works contractor where access is necessary for an approved task;
• GoDaddy, which provides domain, DNS and shared web-hosting services;
• Google, which provides Google Workspace email and calendar services and, after consent, Google Analytics;
• Calendly, which provides the optional scheduling experience;
• professional advisers, insurers, payment providers or authorities where reasonably necessary to administer the business, comply with law, or establish, exercise or defend a legal claim;
• a successor or purchaser if the business or relevant assets are transferred, subject to appropriate confidentiality and lawful handling.

Client Report Works does not sell enquiry information. A contractor does not receive project material merely because an enquiry was submitted.

7. Overseas processing

GoDaddy, Google and Calendly operate internationally and may process or store information in New Zealand, Australia, the United States or other countries where they or their service providers operate. Those countries may have privacy safeguards that differ from New Zealand law. Client Report Works selects established providers, limits the information sent to each provider and uses available account, access and contractual controls.

Project files are handled separately from the public website. Client-controlled accounts and the minimum practical access are preferred wherever possible.

8. Cookies, local storage and consent choices

• Essential operation: form-related pages may use a short-lived session cookie for security and continuity.
• Consent preference: the site stores your analytics choice in local browser storage so it can be respected on later visits.
• Google Analytics: the Google tag is not loaded unless you choose to allow analytics.
• Calendly: the Calendly frame is not loaded until you deliberately open the booking window. Calendly then applies its own cookie and privacy controls within that service.

You can change the website analytics choice at any time using Privacy settings in the footer. You can also clear site data through your browser. Withdrawing consent stops future optional analytics collection from this browser; it does not automatically erase information already lawfully collected.

9. How long we keep information

• Protected server-side backups of fit-check submissions are automatically pruned after 180 days.
• Unprogressed enquiry, email and scheduling records are reviewed and normally deleted or anonymised within 24 months of the last meaningful contact, unless a shorter period is appropriate.
• Google Analytics user-level event data is intended to be retained for 14 months, subject to the applicable Google Analytics setting and aggregated reporting.
• If a paid engagement begins, project, contract, invoice and related records are retained for the period reasonably needed to deliver the work, support the client, meet legal and accounting requirements, and resolve claims. Project-specific deletion arrangements may be stated in the engagement documents.

Information may be retained longer where required by law, needed for a current dispute or security investigation, or subject to a preservation obligation. It is deleted or anonymised when the purpose no longer justifies keeping it.

10. How we protect information

Reasonable controls include HTTPS, restricted hosting and mailbox access, multi-factor authentication where supported, protected server-side storage, anti-abuse rate limiting, cross-site request forgery protection, security headers, data minimisation, no public file upload and documented access boundaries. Providers are accessed through individual authenticated accounts rather than shared passwords wherever practical.

No internet service is completely risk-free. For that reason, confidential client-report material and system credentials are kept outside the public enquiry channel and transferred only through an agreed controlled method.

11. Access and correction

You may ask whether Client Report Works holds personal information about you and request access to or correction of that information, subject to applicable exceptions. Email privacy@clientreportworks.co.nz with enough information to identify the relevant enquiry or interaction. Identity may need to be verified before information is released or changed. We will respond as soon as reasonably practicable and, where the Privacy Act 2020 applies, normally within 20 working days.

12. Whether you must provide information

You do not have to use the fit-check form, Calendly or optional analytics. You may send a high-level enquiry by email instead. Some contact and workflow information is necessary to assess fit and respond; without it, Client Report Works may be unable to evaluate or progress the request. Analytics consent has no effect on your ability to use the service.

13. Direct marketing

Client Report Works will not add you to a general marketing list merely because you submitted an enquiry or booked a meeting. Promotional electronic messages will be sent only where there is an appropriate consent basis and will identify the sender and provide a practical way to stop future messages. Service, scheduling, proposal and client communications may still be sent where needed to respond to your request or administer an engagement.

14. Children and sensitive information

The website and service are intended for business decision-makers, not children. Do not submit information about a child or student. Health, student and other highly sensitive personal information is outside the launch service scope.

15. Changes to this statement

This statement may be updated when providers, collection practices, services or legal obligations change. The current version will be published on this page with a revised date. Material changes will be reviewed before new collection begins.

16. Questions and complaints

Contact privacy@clientreportworks.co.nz first so the concern can be investigated and addressed. If you are not satisfied, you may be able to complain to the New Zealand Office of the Privacy Commissioner.