The legal bit

Privacy and cookies.

What mentokc collects, why, how long it's kept, and what you can do about it. Written to be read, not skimmed past.

Last updated 10 August 2026 · Applies to mentokc.com and mentokc.online

Who we are

mentokc is operated by Mentokc Ltd (NZBN 9429048104531), based in Hawke's Bay, New Zealand. For anything in this policy, contact rich@mentokc.com.

This policy covers mentokc.com and mentokc.online. It's written under the New Zealand Privacy Act 2020, which is the law that governs how we handle your personal information.

What we collect

Only what the work needs. Specifically:

Contact details when you get in touch, book a session, or fill in a form. Name, email, and whatever you choose to tell us.
Brand Mirror answers. The Brand Mirror asks eight questions about you and your work. Your answers are used to generate your reflection and to deliver it to you by email. They're personal by design, and they're treated that way.
Email subscription details if you join a list. You can leave any time and the unsubscribe link actually works.
Client project information during engagements. Business details, content, and access credentials needed to build and maintain your site or systems.
Technical data when you visit the sites. Pages viewed, rough location, device and browser type, collected through the analytics tools described in the cookies section below.

We don't collect payment card numbers (payments run through your bank or invoicing), identity documents, health information, or anything biometric.

How we use it

To respond when you contact us and to deliver what you've asked for, including your Brand Mirror reflection.
To send email you've signed up for.
To do client work: building, hosting, and maintaining sites and systems.
To understand how the sites are used so they can be improved.
To meet legal obligations, mostly tax and accounting.

We don't sell personal information. We don't rent lists. We don't share your information with anyone except the service providers below, and only so they can do their jobs.

Who processes it

Like most modern businesses, mentokc runs on established platforms. Your information passes through secure form, database, email, and hosting services, each bound by its own privacy and security obligations. Where analytics or advertising tools are involved, they're named in the cookies section because that's where they operate. Some providers store data outside New Zealand; we only use providers with recognised security practices.

How long we keep it

Enquiries and Brand Mirror responses: kept while there's a live conversation or subscription, deleted on request.
Email lists: kept while you're subscribed. Unsubscribing removes you.
Client files: kept for the engagement plus 12 months, then reviewed.
Hosted sites: for the duration of the hosting arrangement. When it ends, your site and data are handed over to you and removed from our infrastructure within 30 days.
Financial records: 7 years, because tax law says so.

Cookies

Cookies are small files a site stores in your browser. Here's what these sites use and why.

Type	What it does	Examples
Essential	Makes the site work. Login, security, and session handling from WordPress. These can't be turned off without breaking things.	wordpress_, wp-settings-
Analytics	Google Analytics tells us which pages get read and how people find the site. The data is aggregated; we're looking at patterns, not people.	_ga, _ga_*
Marketing	The Meta pixel helps us understand whether anything we put on Facebook or Instagram actually reaches anyone, and lets us show relevant content to people who've visited.	_fbp
Embedded content	Videos or embeds from other platforms (like YouTube) may set their own cookies, governed by those platforms' policies.	Varies

Controlling cookies

Your browser lets you block or delete cookies; the settings live under privacy or security. You can opt out of Google Analytics everywhere with Google's browser add-on, and manage Meta's use of your data through your Facebook ad preferences. Blocking analytics and marketing cookies won't affect how the sites work for you.

Your rights

Under the Privacy Act 2020 you can ask for a copy of the personal information we hold about you, and ask us to correct it if it's wrong. You can also ask us to delete it, and unless the law requires us to keep it (financial records, mostly), we will. Requests go to rich@mentokc.com and are actioned within 20 working days.

If you think we've handled your information badly, tell us first and we'll fix it. If you're not satisfied with the response, you can complain to the Office of the Privacy Commissioner.

Changes

When this policy changes, the date at the top changes with it. Material changes to how we handle your information will be flagged to email subscribers directly.