DCX delivers managed IT, cloud, cybersecurity, and secure AI implementation for NZ businesses that want technology done properly.
We combine security, strategy, and ongoing management into one clear model — so your environment is protected, your technology is aligned to your business, and your team can operate with confidence.
This Privacy Policy explains how DCX Group LTD (“we”, “us”, “our”) collects, uses, discloses, and protects personal information when you visit dcx.co.nz, contact us, or use our services. We comply with the Privacy Act 2020 (NZ) and its Information Privacy Principles. If you are located outside New Zealand, we will also respect the laws that apply to you where feasible (for example, the EU/UK GDPR and California Consumer Privacy Act (CCPA)).
By using our website or services, you agree to the terms of this Privacy Policy.
Who we are
DCX Group LTD provides managed IT services, cybersecurity, cloud, networking, and related consulting for organisations. For privacy queries, contact us at privacy@dcx.co.nz.
Business account data: billing and service records, support tickets, device identifiers, IP addresses.
Website & analytics data: pages viewed, referring/exit pages, timestamps, general location (city/region), and cookie identifiers.
Security & operations data: audit logs, access events, and diagnostic information from systems we manage on your behalf.
Optional data you provide: survey responses, testimonials, meeting recordings (with notice), or files submitted through forms.
We do not intentionally collect sensitive personal information unless it is strictly necessary and you have provided it or consented (for example, when included in support materials).
Where we get it
Directly from you when you contact us, request a quote, sign a contract, or open a support ticket.
Automatically via cookies, analytics, and systems we operate or manage.
From your organisation if we provide services to your employer or business.
From service providers (e.g., Microsoft 365, ticketing/monitoring platforms) as needed to deliver services.
How we use it
Provide, operate, and improve our services.
Respond to enquiries, quotes, and support requests.
Provision and manage user access, devices, and software.
Monitor, secure, and back up systems we manage.
Billing, account administration, and contract performance.
Analytics, site performance, and service development.
Compliance with laws, law‑enforcement requests, and legal claims.
Legal bases
Where required (e.g., under GDPR), we rely on the following lawful bases:
Contract: processing necessary to deliver our services.
Consent: for specific activities like certain marketing cookies or testimonials.
Legal obligation: record‑keeping and compliance duties.
Sharing & disclosures
We may share personal information with:
Service providers / subprocessors that help us deliver services (e.g., Microsoft 365, cloud hosting, ticketing/monitoring, security tools). These providers are bound by contracts and only process data under our instructions.
Your organisation if the services are provided to your employer or business.
Professional advisors (lawyers, auditors) under confidentiality obligations.
Authorities when required by law or to protect rights, safety, or security.
Some recipients may be located outside New Zealand. Where required, we implement appropriate safeguards such as Standard Contractual Clauses or rely on comparable privacy protections.
Cookies
We use cookies and similar technologies to operate the website, remember preferences, and measure performance.
Strictly necessary: required for core site functionality.
Performance/analytics: help us understand usage and improve the site.
Functional: remember choices such as language or region.
Advertising (if used): measure campaigns or show relevant content.
You can control cookies via your browser settings and (where implemented) our cookie banner. Disabling certain cookies may impact functionality.
Retention
We keep personal information only as long as necessary for the purposes described in this policy, to comply with legal and accounting obligations, or to resolve disputes. Retention periods depend on the data type and our contractual requirements. When no longer needed, we take reasonable steps to delete or de‑identify information.
Security
We use technical and organisational safeguards appropriate to the risk, including access controls, encryption in transit (and at rest where supported), logging and alerting, vulnerability management, and staff training. No system is 100% secure; we encourage you to notify us immediately of any suspected incident.
Your rights
Under the Privacy Act 2020, you have the right to request access to and correction of your personal information that we hold. If you are in a jurisdiction with additional rights (e.g., EU/UK GDPR or CCPA), you may also have rights to deletion, restriction, portability, or objection, subject to applicable limits.
To exercise your rights, contact us at privacy@dcx.co.nz. We may need to verify your identity and, where we process data for your employer, we may redirect your request to them.
Children
Our services are intended for business customers and are not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take appropriate steps.
Third‑party links
Our website may link to third‑party sites or services. We are not responsible for their privacy practices. We recommend reviewing the privacy policies of those third parties.
Changes to this policy
We may update this Privacy Policy from time to time to reflect changes to laws, technologies, or our services. The “Last updated” date at the top will show when changes were made. Significant changes will be notified on this page and, where appropriate, by email.
Contact us
If you have questions, requests, or complaints, please contact: