Privacy Policy
Last updated: 8 June 2026
This Privacy Policy explains how CentriWeb and its related brands, sub-brands, services, websites, funnels, platforms and digital products collect, use, store, disclose and protect personal information.
CentriWeb is a business based in New Zealand. We may also operate through virtual offices, service locations, contractors, partners, technology providers or client-facing addresses in other countries, including Australia. Some of our sub-brands, campaigns or services may use local-facing branding, domains, landing pages or contact details. However, unless stated otherwise, these brands are operated, managed or controlled by CentriWeb.
For the purposes of this Privacy Policy, “CentriWeb”, “we”, “us” and “our” includes CentriWeb and any current or future sub-brands, products, services or trading names, including but not limited to PreBuild, Owner CFO, and other CentriWeb-operated brands, funnels, software products, automation systems, marketing campaigns or client service divisions.
This Privacy Policy applies when you visit our websites, submit a form, book a call, become a lead, become a customer, communicate with us, use our services, interact with our ads, receive our emails or SMS messages, or otherwise provide information to us.
This Privacy Policy is not intended to override any separate client agreement, proposal, service agreement, data processing agreement or contract we may have with a client.
1. Who we are
CentriWeb provides digital marketing, CRM, automation, software, website, funnel, advertising, email/SMS, lead management, AI-assisted workflow, analytics, reporting and business operations services.
Our services may include:
- CRM and pipeline setup
- Website and landing page development
- Funnel creation
- Lead capture systems
- Email and SMS automation
- Calendar and booking systems
- Paid advertising and retargeting
- Analytics and tracking setup
- Review management
- Workflow automation
- AI-assisted business systems
- Client onboarding systems
- Reporting dashboards
- Custom software, portals, applications and integrations
- Marketing support for clients and their customers
Some of our websites and services may be branded under specific sub-brands, such as PreBuild, which may focus on builder, construction, pre-construction or home-building related services. Other sub-brands may focus on finance, business operations, automation, software or other industry-specific offers.
2. Personal information we collect
We may collect personal information directly from you, from our clients, from public sources, from third-party tools, from forms, from booking pages, from advertising platforms, from social media platforms, from CRM systems, from analytics tools, and from communications with you.
The information we collect may include:
Identity and contact information
- First name
- Last name
- Business name
- Job title
- Email address
- Phone number
- Address
- City
- State
- Province
- Region
- ZIP code or postal code
- Country
Business and project information
If you are a client, prospective client, lead, supplier, contractor or user of one of our client-facing systems, we may collect information such as:
- Business goals
- Project details
- Website links
- Domain names
- Brand assets
- Logos
- Brand colours
- Fonts
- Marketing materials
- Ad creative
- Photos or videos supplied for campaigns
- CRM data
- Lead source information
- Customer journey details
- Sales pipeline information
- Appointment and booking details
- Notes from calls, meetings or consultations
- Information submitted through surveys, forms, questionnaires or onboarding documents
Social media and platform information
Where relevant, we may collect or process:
- Social media profile links
- Social media usernames or handles
- Public social media profile information
- Information provided through “Connect with Facebook”, “Sign in with Google”, “Sign in with Twitter/X”, or similar login/connect features
- Information from Meta, Google, LinkedIn, TikTok or other advertising platforms
- Ad engagement information
- Audience, campaign or remarketing data
Payment and billing information
If you purchase products or services from us, we may collect or process:
- Billing name
- Billing email
- Billing address
- Invoice details
- Payment status
- Subscription status
- Transaction records
- Tax or accounting information required for business records
We may use third-party payment processors, accounting software or invoicing systems. We do not intentionally store full credit card numbers on our own systems unless clearly stated and handled through a secure provider.
Communications information
We may collect information when you contact us by email, SMS, phone, website chat, form submission, social media, meeting, booking form or other communication channel.
This may include:
- Message content
- Call notes
- Support requests
- Meeting recordings or summaries, where used
- Email replies
- SMS replies
- Chat transcripts
- Consent preferences
- Unsubscribe or opt-out requests
Technical and usage information
When you use our websites, funnels, applications or services, we may automatically collect:
- IP address
- Browser type
- Device type
- Operating system
- Pages visited
- Time spent on pages
- Referral source
- Campaign source
- Form interactions
- Click behaviour
- Approximate location based on IP address
- Cookies and tracking identifiers
- Analytics events
- Conversion events
- Advertising interactions
3. Information we process on behalf of clients
CentriWeb may process personal information on behalf of our clients when we build, manage, support or optimise their systems.
This may include lead data, customer data, CRM records, form submissions, booking information, email/SMS history, call data, marketing data, pipeline data and other business information.
In these situations, our client may be the primary owner or controller of the information, and CentriWeb may act as a service provider, processor, contractor or system administrator depending on the arrangement.
We only use this information to provide services to the client, support the system, improve the service, troubleshoot issues, comply with legal obligations, or as otherwise authorised by the client or permitted by law.
4. How we collect information
We may collect information when you:
- Visit one of our websites or landing pages
- Submit a form
- Book a call
- Complete a survey or questionnaire
- Sign up for a newsletter, offer, waitlist or consultation
- Download a resource
- Purchase a product or service
- Become a client
- Communicate with us
- Interact with our ads
- Use one of our software products, portals or systems
- Connect a third-party account
- Provide brand assets, website links, login details or project information
- Engage with our clients’ forms, funnels or campaigns that we help manage
We may also receive information from:
- Our clients
- Advertising platforms
- Analytics tools
- CRM platforms
- Payment processors
- Automation tools
- Public websites
- Social media platforms
- Business directories
- Referral partners
- Contractors or service providers
5. Why we use personal information
We may use personal information for the following purposes:
- To provide our services
- To respond to enquiries
- To book calls and appointments
- To onboard clients
- To build websites, funnels, automations, CRMs, campaigns and software systems
- To manage leads and customer relationships
- To send emails, SMS messages and service communications
- To send marketing communications where permitted
- To run paid ads and remarketing campaigns
- To measure website, funnel and campaign performance
- To improve our websites, systems, services and customer experience
- To provide reporting and analytics
- To process payments and invoices
- To manage subscriptions or retainers
- To provide customer support
- To personalise content, offers and communications
- To troubleshoot technical issues
- To protect our systems from fraud, misuse or security threats
- To comply with legal, tax, accounting and regulatory obligations
- To enforce agreements or protect our legal rights
- To manage business transfers, acquisitions, restructuring or sale of assets
6. Emails, SMS and marketing communications
We may send emails, SMS messages or other communications to:
- Respond to your enquiry
- Confirm bookings
- Send reminders
- Provide service updates
- Deliver onboarding instructions
- Send invoices or payment reminders
- Share marketing offers
- Send newsletters
- Follow up after calls or form submissions
- Provide information about our services or related offers
Where required by law, we will only send marketing communications with consent or another lawful basis. You can unsubscribe from marketing emails using the unsubscribe link in the email, or you can contact us directly.
For SMS messages, you may opt out by replying with the relevant opt-out keyword, such as “STOP”, where supported, or by contacting us.
Please note that even if you opt out of marketing communications, we may still send transactional or service-related messages where necessary.
7. Cookies, tracking, analytics and advertising
We use cookies, pixels, tags, scripts and similar technologies to operate our websites, improve user experience, measure performance, track conversions and advertise our services.
These technologies may be used for:
- Website functionality
- Analytics
- Conversion tracking
- Form tracking
- Advertising attribution
- Remarketing and retargeting
- Audience building
- Security and spam prevention
- Personalisation
- Measuring campaign effectiveness
We may use tools such as:
- Google Analytics
- Google Tag Manager
- Google Ads
- Meta/Facebook Pixel
- Meta Ads
- LinkedIn Ads
- TikTok Ads
- Google Places
- Invisible reCAPTCHA
- CRM tracking tools
- Heatmap, session recording or behaviour analytics tools, where implemented
- Other analytics, advertising, automation or tracking platforms
These tools may collect information such as your IP address, device information, browsing behaviour, referral source, pages visited, events completed, forms submitted or ads clicked.
Where required, we will ask for consent before using non-essential cookies or tracking technologies.
You can control cookies through your browser settings. Some features may not work properly if cookies are disabled.
8. Remarketing and retargeting
We may use remarketing services to advertise to people who have visited our websites, landing pages or interacted with our content.
This means you may see CentriWeb, PreBuild, Owner CFO or related sub-brand ads on platforms such as Google, Facebook, Instagram, LinkedIn, TikTok, YouTube or other websites and apps.
Remarketing may be based on:
- Website visits
- Page views
- Form interactions
- Ad engagement
- Video views
- Email engagement
- CRM audience lists
- Similar or lookalike audiences, where permitted
You can manage advertising preferences through the relevant platform settings, such as Google, Meta, LinkedIn or TikTok ad settings.
9. Payments and paid services
If you pay for our products or services, we may collect and process information needed to manage your purchase, invoice, subscription, retainer or payment plan.
We may use third-party providers to process payments, manage subscriptions, send invoices, collect payments or maintain accounting records.
We may retain payment, invoice and transaction records for legal, accounting, tax, dispute resolution and business record purposes.
10. Third-party service providers
We use third-party service providers to operate our business and deliver services.
These may include providers for:
- Website hosting
- CRM systems
- Email delivery
- SMS delivery
- Calendar booking
- Advertising
- Analytics
- Payment processing
- Accounting and invoicing
- Cloud storage
- Automation
- AI-assisted tools
- Customer support
- Form builders
- Survey tools
- Call tracking
- Meeting recordings and summaries
- Project management
- Development and technical support
These providers may process personal information on our behalf. We take reasonable steps to use providers that apply appropriate security and privacy safeguards.
11. Disclosure of personal information
We may share personal information with:
- Our employees, contractors and team members
- Our related brands, sub-brands or business divisions
- Service providers and software platforms
- Payment processors
- Advertising and analytics providers
- Professional advisors, such as accountants, lawyers or consultants
- Our clients, where information relates to their leads, customers or campaigns
- Referral partners, where relevant and permitted
- Government, law enforcement or regulatory authorities where required by law
- A buyer, investor or successor if our business or assets are sold, merged, restructured or transferred
We do not sell personal information in the ordinary sense of exchanging personal information directly for money. However, some privacy laws may define “sale” or “sharing” broadly to include certain advertising, analytics or remarketing activities. Where required, we will provide relevant rights and opt-out mechanisms.
12. International operations and data transfers
CentriWeb is based in New Zealand, but we may work with clients, contractors, service providers, platforms and users in other countries, including Australia, the United States, the United Kingdom, Canada, Europe and other regions.
Your information may be processed, stored or accessed in countries outside your own country. These countries may have different privacy and data protection laws.
Where required by applicable law, we take reasonable steps to ensure personal information transferred internationally is protected by appropriate safeguards, contracts, platform controls or service provider commitments.
13. Data security
We take reasonable steps to protect personal information from loss, misuse, unauthorised access, disclosure, alteration and destruction.
Security measures may include:
- Password-protected systems
- Access controls
- Two-factor authentication where available
- Secure cloud providers
- Limited team access based on role
- Internal procedures for handling client data
- Secure payment processing through third-party providers
- Monitoring and troubleshooting of system issues
- Staff or contractor confidentiality obligations
However, no method of transmission or electronic storage is completely secure. We cannot guarantee absolute security.
14. Data retention
We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.
Retention periods may depend on:
- The type of information
- Whether you are a client, lead, supplier, contractor or end user
- The nature of the service provided
- Legal, tax or accounting requirements
- Contractual obligations
- Dispute resolution needs
- Security and fraud prevention requirements
- Backup and system retention limits
We may retain anonymised, aggregated or de-identified information for analytics, reporting, service improvement or business intelligence.
15. Your privacy rights
Depending on where you live, you may have rights to:
- Access personal information we hold about you
- Request correction of inaccurate information
- Request deletion of information
- Object to certain processing
- Restrict certain processing
- Withdraw consent
- Opt out of marketing communications
- Opt out of certain targeted advertising or remarketing
- Request a copy of your information
- Complain to a privacy regulator
In New Zealand, individuals have rights to access and request correction of personal information under the Privacy Act 2020.
To exercise your rights, please contact us using the details in the “Contact us” section below.
We may need to verify your identity before responding to a request.
16. GDPR notice for users in the EU/EEA/UK
Where the GDPR or UK GDPR applies, we process personal information under one or more lawful bases, including:
- Your consent
- Performance of a contract
- Legitimate interests
- Compliance with legal obligations
- Taking steps at your request before entering a contract
Our legitimate interests may include operating our business, improving our services, communicating with leads and clients, marketing our services, securing our systems, analysing performance and delivering client work.
Where GDPR applies, you may have rights to access, correct, delete, restrict, object to processing, request portability, and withdraw consent.
You may also have the right to lodge a complaint with your local data protection authority.
17. California privacy notice
Where California privacy laws apply, California residents may have rights to:
- Know what personal information we collect
- Know how we use and disclose personal information
- Request access to personal information
- Request deletion of personal information
- Request correction of inaccurate personal information
- Opt out of certain sale or sharing of personal information
- Limit the use of sensitive personal information, where applicable
- Not be discriminated against for exercising privacy rights
We may collect the following categories of personal information:
- Identifiers, such as name, email, phone number, address and IP address
- Commercial information, such as purchase, invoice or subscription details
- Internet or network activity, such as website visits, analytics and ad interactions
- Geolocation information, such as approximate location from IP address
- Professional or business information, such as business name, job title or project details
- Audio, visual or electronic information, where calls, meetings, videos or communications are provided or recorded
- Inferences from activity, such as marketing preferences, lead source or campaign engagement
We use this information for the purposes described in this Privacy Policy.
We do not knowingly sell personal information for money. However, certain advertising and analytics activities may be considered “sharing” or “selling” under California law. Where required, we will provide a way to opt out.
18. CalOPPA notice
In accordance with California Online Privacy Protection Act-style requirements, we make this Privacy Policy available through our websites or linked pages.
This Privacy Policy explains:
- What personal information we collect
- How we use personal information
- Who we may share it with
- How users can contact us
- How users can request access, correction or deletion
- How we notify users of material changes
We do not currently respond to “Do Not Track” browser signals in a standardised way, because there is no consistent industry standard for these signals. You can manage cookies and tracking through your browser, device and advertising platform settings.
19. Children’s privacy
Our services are not directed to children under 13.
We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13 without appropriate consent, we will take reasonable steps to delete that information.
If you believe a child has provided us with personal information, please contact us.
20. Client-provided information and responsibility
If you are a CentriWeb client and you provide us with personal information about your customers, leads, staff, contractors or users, you are responsible for ensuring that you have the necessary rights, notices, consents or lawful basis to provide that information to us.
This may include information uploaded into CRMs, advertising platforms, email lists, SMS lists, automation systems, forms, spreadsheets, databases or client portals.
We rely on our clients to ensure their data collection practices comply with applicable laws.
21. AI-assisted tools and automation
We may use AI-assisted tools, automation platforms or workflow systems to help deliver services, improve internal processes, summarise information, generate drafts, analyse data, route leads, support users or automate business operations.
Where we use these tools, we aim to use them responsibly and for business-related purposes. We do not intentionally use sensitive personal information in AI tools unless required for the service, authorised by the client, or otherwise permitted by law.
Clients should avoid providing unnecessary sensitive personal information unless it is required for the specific service.
22. Links to other websites
Our websites, emails, ads or services may contain links to third-party websites, platforms or services.
We are not responsible for the privacy practices, content or policies of third-party websites. You should review the privacy policies of any third-party websites or platforms you use.
23. Changes to this Privacy Policy
We may update this Privacy Policy from time to time.
When we update it, we will change the “Last updated” date at the top of the policy. If changes are significant, we may provide additional notice, such as by email, website notice or platform notification.
Your continued use of our websites or services after changes are posted means you accept the updated Privacy Policy, where permitted by law.
24. Contact us
If you have questions about this Privacy Policy or want to exercise your privacy rights, you can contact us:
By email: privacy@centriweb.com
Website: https://centriweb.com
Privacy page: https://centriweb.com/privacy-policy
Postal address: CentriWeb, 205J Ingram Road, Bombay, Auckland 2579, New Zealand
For PreBuild-related enquiries, you may also contact us through the relevant PreBuild website, landing page, form, booking page or contact details shown on that specific service page.