Privacy Policy

Last updated: April 2026

Who We Are

Monocula is a cyber security consultancy based in New Zealand, operating across the AU/NZ market. We help organisations improve their security posture through advisory, procurement, and technology services.

For the purposes of this policy, "we", "us", and "our" refer to Monocula. "You" refers to anyone who visits our website, contacts us, or engages our services.

What Information We Collect

We collect information in two ways: what you give us directly, and what we collect automatically when you visit our website.

Information you provide directly:

• Your name, email address, phone number, and organisation, when you contact us via our website form or email
• Details about your role or security environment, if you share these when enquiring about our services
• Any other information you choose to send us

Information collected automatically:

• Standard website analytics data such as pages visited, time on site, browser type, and approximate location (country/city level)
• IP address and device information
• Referral source (e.g. how you found our site)

We do not collect sensitive personal information (such as health data, financial account details, or government identifiers) unless you explicitly provide it in correspondence.

How We Use Your Information

We use the information we collect to:

• Respond to your enquiries and provide the services you've requested
• Send relevant updates, insights, or event invitations where you've opted in or where we have a legitimate reason to believe they're relevant to you
• Understand how our website is being used so we can improve it
• Meet any legal or regulatory obligations that apply to us

We will not use your information for purposes that aren't reasonably connected to why you gave it to us, and we won't sell it. Ever.

Sharing Your Information

We do not sell, rent, or trade your personal information to third parties. We may share your information only in the following limited circumstances:

• Service providers: Tools we use to run our business (e.g. email platforms, CRM software, website analytics) may process your data on our behalf. We only use providers who handle data appropriately and, where required, we have data processing agreements in place.
• Legal obligations: If we are required by law to disclose your information, we will do so, and where possible we will notify you first.
• Business transfers: In the unlikely event of a merger, acquisition, or sale of the business, personal data may be transferred as part of that transaction. We would notify you before your data became subject to a different privacy policy.

Data Storage and Security

Your data may be stored and processed in New Zealand, Australia, or other countries where our service providers operate. Where data is transferred internationally, we take reasonable steps to ensure it is protected to a standard consistent with the NZ Privacy Act 2020 and, where applicable, the Australian Privacy Act 1988.

We take reasonable security measures to protect your information from unauthorised access, loss, or disclosure. Given that we are a cyber security business, we take this seriously. That said, no system is completely immune, and we cannot guarantee absolute security.

We keep your information only for as long as necessary for the purposes described in this policy, or as required by law. When information is no longer needed, we delete or anonymise it.

Cookies and Analytics

Our website uses cookies and similar technologies to understand how visitors use the site. This includes tools like Hubspot. The data collected is aggregated and used only to improve our website and content.

You can control or disable cookies through your browser settings. Note that disabling cookies may affect how some parts of the website function. Where required by law, we will request your consent before setting non-essential cookies.

Your Rights

Depending on where you are based, you have the following rights regarding your personal information:

• Access: You can request a copy of the personal information we hold about you.
• Correction: If any information we hold is inaccurate or out of date, you can ask us to correct it.
• Deletion: In certain circumstances, you can ask us to delete your personal information.
• Objection: You can object to us processing your information for direct marketing purposes at any time.
• Withdrawal of consent: Where we are relying on consent to process your information, you can withdraw that consent at any time.

To exercise any of these rights, contact us at the details below. We will respond within a reasonable time frame, and no later than 20 working days as required under the NZ Privacy Act 2020.

New Zealand and Australian Law

Monocula is subject to the New Zealand Privacy Act 2020 and its Information Privacy Principles. Where we collect information from Australian residents, we also comply with the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs).

If you believe we have breached our privacy obligations, you have the right to make a complaint to:

• New Zealand: Office of the Privacy Commissioner, privacy.org.nz
• Australia: Office of the Australian Information Commissioner, oaic.gov.au

We'd appreciate the chance to resolve any concerns directly before you take that step. Please reach out to us first.

Third-Party Links

Our website may contain links to other websites. This policy does not cover those sites. We recommend reading the privacy policy of any third-party website you visit.

Changes to This Policy

We may update this policy from time to time. When we do, we'll update the "last updated" date at the top. If changes are material, we'll make that clear. Continuing to use our website after changes are published means you accept the updated policy.

Contact Us

If you have any questions about this policy, or want to exercise your privacy rights, get in touch:

• Email: contactus@monocula.com
• Website: monocula.com