Effective date: 10 August 2026
 

MindRabbit Media takes privacy seriously. Here is exactly what that means in practice.
MindRabbit Media (referred to as "MRM", "we", or "us") is a New Zealand-based business operating globally. We are committed to handling personal information fairly, transparently and lawfully, in accordance with the New Zealand Privacy Act 2020 and, where applicable to individuals located in the European Economic Area, the General Data Protection Regulation (GDPR).

This policy explains what personal information we collect, why we collect it, how we use and protect it, and what rights you have in relation to it. It applies to all visitors to this website and to individuals who contact us or engage our services.

This policy may be updated from time to time. The effective date above reflects the most recent revision. We encourage you to review it periodically.
 

1. Who We Are
MindRabbit Media is a sole trader business owned and operated by Anna-Carina Schmidt, based in New Zealand. Providing web design and development, online marketing, and marketing photography and video services to clients internationally. For all privacy enquiries, contact us at: mindrabbit.media@gmail.com
 

2. What Personal Information We Collect
We collect personal information only when you choose to provide it or when it is collected automatically through standard website technologies.

Information you provide directly:

•    Full name and business name
•    Job title or professional role
•    Email address and phone number
•    Website URL
•    Project details and any other information you choose to share via our contact form or direct correspondence
 

Information collected automatically:

•    IP address and approximate location
•    Browser type and device information
•    Pages visited, time spent on site, and referral source, collected via Google Analytics
•    Cookie data as described in Section 5 below

Information collected via email marketing:

•    Email open rates and link click activity, collected via Wix Email Marketing, where you have subscribed to receive communications from us

​

3. Why We Collect It and Our Lawful Basis
We collect and use personal information for the following purposes:

 

• To respond to enquiries and assess project fit — lawful basis: legitimate interest

• To prepare and deliver proposals and project agreements — lawful basis: performance of a contract

• To deliver agreed services and manage client relationships — lawful basis: performance of a contract

• To send marketing communications where you have opted in — lawful basis: consent

• To improve our website and understand how visitors use it — lawful basis: legitimate interest

• To comply with legal or regulatory obligations — lawful basis: legal obligation

​​

We do not use your personal information for any purpose beyond those listed above without your explicit consent.

 

4. How Long We Keep Your Information

 

• Enquiry and contact form data: retained for up to 24 months from the date of last contact, or until you request deletion

• Client project data: retained for up to 7 years for legal and accounting purposes

• Newsletter subscriber data: retained until you unsubscribe or request deletion

• Website analytics data: retained in accordance with Google Analytics default retention settings, currently set to 14 months

​

5. Cookies and Tracking Technologies
Our website uses cookies and similar technologies to support its functionality, improve user experience, and analyse traffic. A cookie is a small file placed on your device when you visit a website. Cookies do not identify you personally but may collect information about your device and browsing behaviour.

We use the following types of cookies:
 

• Essential cookies — required for the website to function correctly. These cannot be disabled.

• Analytics cookies — we use Google Analytics to understand how visitors use our website. This data is aggregated and used to improve content and performance. Google Analytics may transfer data to servers outside New Zealand; Google's privacy policy governs that processing.

• Performance cookies — built-in browser compatibility cookies that support site loading and display.

• Marketing cookies — only placed where you have given explicit consent via our cookie banner.

When you first visit this website, a cookie consent banner will appear. You may accept, decline, or customise your cookie preferences at that point. You may also manage or withdraw your consent at any time through your browser settings or by clearing your cookies. Further guidance is available at www.allaboutcookies.org.
If you receive communications from us via Wix Email Marketing, we may track open rates and link clicks to assess engagement and improve future communications. You may unsubscribe at any time via the link in any email.

​

6. Third-Party Services and External Links
We use the following third-party platforms in the operation of our website and services. Each is subject to its own privacy policy:

•    Wix — website hosting, contact form, and email marketing platform
•    Google Analytics — website traffic analysis
•    Google (Gmail) — business email communications

Our website may contain links to third-party websites. Once you leave our site via an external link, we have no control over the content, security, or data practices of that site and accept no responsibility for them. We recommend reviewing the privacy policy of any external site before providing personal information.
Our website may include social sharing features such as LinkedIn widgets. Any interaction with those features is subject to the privacy policy of the relevant platform.

​

7. International Data Transfers
MindRabbit Media is based in New Zealand and serves clients internationally, including within the European Economic Area. Personal data provided by individuals in the EEA is transferred to and processed in New Zealand.
New Zealand has been granted adequacy status by the European Commission, confirmed in January 2024, meaning that New Zealand provides a level of data protection equivalent to that required under GDPR. No additional safeguards are required for this transfer.

​

8. Your Rights
Depending on your location, you may have the following rights in relation to your personal information:

Under the New Zealand Privacy Act 2020:
•    The right to request access to personal information we hold about you
•    The right to request correction of inaccurate information
•    The right to make a complaint to the Office of the Privacy Commissioner at www.privacy.org.nz

Under GDPR (for individuals in the EEA):
•    The right to access your personal data
•    The right to rectification of inaccurate data
•    The right to erasure ("right to be forgotten")
•    The right to restrict processing
•    The right to data portability
•    The right to object to processing based on legitimate interest
•    The right to withdraw consent at any time, without affecting the lawfulness of processing prior to withdrawal
•    The right to lodge a complaint with your local data protection supervisory authority

To exercise any of these rights, contact us at: [gmail address]. We will respond within 20 working days in accordance with the NZ Privacy Act 2020.

​

9. Security
We take reasonable and appropriate steps to protect personal information against unauthorised access, loss, or disclosure. These include secure encrypted data transmission via HTTPS, access limited to authorised personnel only, and secure hosting via Wix's infrastructure. No method of transmission over the internet is entirely secure, and we cannot guarantee absolute security. In the event of a privacy breach that poses a serious risk of harm, we will notify affected individuals and the Office of the Privacy Commissioner as required by the NZ Privacy Act 2020.

 

10. Contact & Complaints
For any privacy or data protection enquiries, to exercise your rights, or to make a complaint, contact:

Anna-Carina Schmidt
MindRabbit Media
mindabbit.media@gmail.com

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner (New Zealand) at www.privacy.org.nz, or your local data protection authority if you are located in the EEA.