Privacy Policy

1. About this policy

by.CKH is a brand of Duality Limited. This policy explains how we ("by.CKH", "we", "us") handle personal information collected through byckh.com and in running our business. We follow the New Zealand Privacy Act 2020 and its Information Privacy Principles.

2. Who we are

Duality Limited, Apt 6802, Level 1, 6 Johnsonville Road, Johnsonville, Wellington 6037, New Zealand. Privacy questions and requests go to our Privacy Officer: privacy@teamduality.co.nz.

3. What we collect and why

3.1 When you contact us.

You can email us or use one of our forms: the enquiry form, the speaking enquiry form or the speaker pack request. We receive what you send, usually your name, email, organisation and message, and use it to reply. The speaking enquiry form also asks about your event and for a phone number, which we use only to call you to confirm what you need. The forms are run by Jotform, which deletes each submission seven days after sending it to us. Each form also asks, separately and unticked, whether you'd like our emails and to see our ads. You can leave it unticked and still send your enquiry.

3.2 Client and contact records.

If we keep talking, we keep a record of you and our conversations in our CRM, Attio. It usually holds your name, email, phone, organisation and role. Attio may also add publicly available business details, such as your job title and organisation, from data providers it uses. You can ask us what was added and have it corrected or removed.

3.3 Meetings.

You can book a meeting through Calendly. Some meetings use an AI notetaker (Granola). We tell you when you book and at the start of the call, and we take notes by hand if you'd prefer. No audio is kept. Transcripts are deleted automatically, and we keep the notes only as long as we need them. Our AI assistant (Claude, by Anthropic) helps us work with your CRM record. It is not allowed to read meeting transcripts, and it does not train on your information.

3.4 Marketing emails.

If you opt in, we send marketing emails through Mailchimp (Intuit). Mailchimp records your sign-up and consent, including the time, IP address and approximate location, and whether you open our emails and click their links. You can unsubscribe at any time from any email; we then stop within five working days.

3.5 If we reach out to you.

We sometimes use LinkedIn Sales Navigator to find and contact people who may be interested in our work, using public profile details such as name, role and company. Tell us if you'd rather we didn't, and we'll stop.

3.6 If you become a client.

We invoice through Xero and take card payments through Stripe. Stripe handles your card details; we never see them.

4. Cookies and analytics

When you first visit, a banner lets you accept or reject non-essential cookies. Until you choose, and if you reject, no analytics tags run and nothing is sent to Google. If you accept, we use Google Analytics 4, managed through Google Tag Manager, to understand how the site is used. Google may also use Google signals to link visits with its signed-in users for cross-device reporting.

You can change your choice at any time with "Cookie preferences" in the footer. If you withdraw, the tags stop straight away and we delete the analytics cookies set on our site.

If you have opted in to marketing, we may also share a securely encoded (hashed) copy of your email address with Google, Meta and LinkedIn to show you our ads or measure them. They can match it to their own users but cannot read it.

If we are running a test of a page and you have accepted cookies, we set one first-party cookie, kiln_vid, a random code that keeps you on the same version of that page while the test runs. It lasts for up to 6 weeks, and we remove it if you reject or withdraw cookies.

5. Who we share information with

We use these providers. Most are outside New Zealand.

Most of these providers act only on our instructions. Some also use information for their own purposes:

• Google, if you accept cookies or opt in to marketing
• Meta and LinkedIn, if you opt in to marketing
• Intuit (Mailchimp), if you opt in to marketing
• Stripe, for fraud prevention and its legal obligations, if you pay by card
• Xero, to improve its services (Xero is a New Zealand company)

Those overseas recipients may not be required to protect your information in a way that, overall, gives safeguards comparable to New Zealand's Privacy Act. When you accept cookies, opt in, or pay by card, you authorise that sharing. You can withdraw consent at any time, or pay by bank transfer instead.

We don't sell personal information, and we don't share it with anyone else unless the law requires or allows it.

6. Keeping your information safe

Only the people who need your information can access it. We use encrypted connections and multi-factor authentication, and we keep information only as long as we need it.

7. Your rights

You can ask to see the information we hold about you, and ask us to correct or delete it. Email privacy@teamduality.co.nz with "Privacy Enquiry" in the subject line. We'll respond within 20 working days. If you're not satisfied, you can contact the Office of the Privacy Commissioner (privacy.org.nz, 0800 803 909).

8. Changes

We update this policy when how we handle information changes. The date at the top shows the latest version.

9. Contact

General: hello@byckh.com · Privacy: privacy@teamduality.co.nz