Last updated: 15 September 2026
Mosaic Consulting Ltd, trading as Mosaic Cyber Defence ("Mosaic", "we", "us"), respects your privacy. This statement explains what personal information we collect through this website, why we collect it, and what we do with it. It is provided in accordance with the New Zealand Privacy Act 2020, and reflects our obligations to visitors in Australia under the Privacy Act 1988 (Cth).
You do not have to give us any of the personal information we ask for. If you choose not to, we may not be able to respond to your enquiry or provide our services.
By providing us with personal information, or by using this website, you authorise us to collect, hold, use and disclose that information in accordance with this statement.
This website is deliberately simple. It sets no cookies, runs no analytics or tracking, and stores nothing in your browser.
The enquiry form asks for your name, work email address, organisation, and an optional message. The register-your-interest form asks only for an email address.
These forms do not submit data to a server we control. When you press the button, your own email application opens with the details you entered, and you choose whether to send the message. If you send it, we receive it as an ordinary email. If you do not send it, we never receive anything.
Our hosting provider records standard web server logs, which typically include your IP address, browser type, the pages requested and the time of the request. These logs are used to operate and secure the site.
This site loads typefaces from Google Fonts. Your browser requests those files directly from Google, which means your IP address is disclosed to Google when a page loads. Google's handling of that information is governed by its own privacy policy.
We do not use your information for automated decision-making, and we do not sell, rent or trade personal information to anyone.
Personal information is either held by us or on our behalf by service providers we engage to run our website and email. Some of this information is stored in the cloud by third parties based overseas, including our website hosting provider, our email provider, and the font service described above.
We only use these services where we are satisfied they can meet our privacy and security requirements. Using them, and any transfer of information overseas, does not relieve us of our obligations under the NZ Privacy Act 2020, including information privacy principle 12.
We do not disclose personal information to anyone else, except where you authorise it or where we are permitted or required to do so by law.
We keep enquiry correspondence for six months from your last contact with us, unless it forms part of an engagement record we are required to retain for longer. After that it is deleted.
This site is served over HTTPS. We apply reasonable security safeguards to protect personal information against loss, misuse and unauthorised access or disclosure, and limit access to those who need it to respond to you. No system can be guaranteed secure, but we hold ourselves to the same standards we advise our clients to adopt.
Under the NZ Privacy Act 2020 you may ask us for a copy of the personal information we hold about you, and ask us to correct it if it is wrong. Contact us using the details below and we will respond as soon as reasonably practicable, and within 20 working days.
If you have a privacy concern, please raise it with us first so we can put it right. If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner in New Zealand, or to the Office of the Australian Information Commissioner if you are in Australia.
This website may link to third party websites for your convenience. Those sites are outside our control and are not covered by this statement. If you follow a link, the operator of that site may collect information from you and will handle it under its own privacy policy. We are not responsible for the content or privacy practices of any third party website.
Privacy enquiries: use the contact form or email the address shown on our contact section.
Mosaic Consulting Ltd, trading as Mosaic Cyber Defence. NZBN 9429041658499.
We may update this statement at any time by posting a revised version on this website. The revised version takes effect when it is posted, or on any later date stated in it. Where a change is likely to be material to you, we will take reasonable steps to bring it to your attention. The date at the top shows when it was last revised.