← Back

Privacy Policy

Last updated · 28 May 2026

This policy explains how ORA Benchmarking Ltd ("we", "us", "our"), a company registered in New Zealand and the operator of AI ORA™, handles personal data submitted through assessment sign-ups, general enquiries, and other forms on this website. This policy does not cover the AI ORA™ survey itself, which is delivered through SmartSurvey and governed by section 5 below.

1. What we collect

Depending on your engagement with ORA Benchmarking, we may collect:

  • Your first name and last name
  • Your job title and organisation name
  • Your work email address and phone number
  • Your organisation's size and industry
  • Technical data used solely for spam prevention: a one-way hash of your IP address and your browser's user agent string. We do not store your raw IP address.

2. Why we collect it

We process this data to respond to your request or enquiry, to set up and administer your organisation's AI ORA™ assessment, and to contact you about your assessment, findings, and related updates you have opted into. Technical data is processed on the basis of our legitimate interest in protecting our forms from automated abuse.

3. How long we keep it

We retain your personal details and associated survey response data for as long as necessary to deliver your assessment, maintain benchmarking integrity, and provide longitudinal comparisons if your organisation retests over time. You may request deletion of your data at any time by contacting us, subject to any overriding legal or contractual obligations. Spam-prevention hashes are retained for a maximum of 30 days.

4. Who we share it with

We do not sell your data and we do not share it with any third party for marketing purposes. We rely on the following processors to operate the service:

  • Lovable Cloud — hosting, database storage, and site analytics
  • Cloudflare — content delivery and bot/spam protection (Turnstile)
  • HubSpot — customer relationship management, contact records, and website visitor tracking
  • Airtable — operational data management
  • N8N — workflow automation and data routing
  • SmartSurvey — survey delivery and response data storage

These processors handle your data on our instructions only and are bound by their own data protection commitments.

5. Survey respondents

The AI ORA™ assessment is completed by employees and leaders within your organisation. We do not collect any personally identifiable information from survey respondents. No names, email addresses, or individual identifiers are captured at any point during the survey. All responses are recorded and reported at the group level only.

6. Cookies and tracking

This website uses cookies and similar tracking technologies for site analytics and visitor management. These tools help us understand how people interact with our site and manage our contact records. You can manage or disable cookies through your browser settings at any time.

7. Benchmarking programme

Your organisation's survey results are contributed anonymously to the AI ORA™ benchmarking programme. This allows us to produce aggregated comparisons across industry, geography, and organisation size that improve the value of every assessment over time. Your organisation's individual results are never published or disclosed. All benchmarking comparisons use aggregated data only. No organisation is identified.

8. Your rights under the New Zealand Privacy Act 2020

You have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Withdraw consent or unsubscribe at any time

To exercise any of these rights, contact us at the address below.

9. Data breaches

In the event of a privacy breach that poses a risk of harm, we will notify affected parties and the Office of the Privacy Commissioner in accordance with our obligations under the New Zealand Privacy Act 2020.

10. Contact

For any privacy-related question or request, email us at privacy@orabenchmarking.com.

ORA Benchmarking Ltd · New Zealand

11. Changes to this policy

We may update this policy as the product and our processing activities evolve. The "Last updated" date at the top will always reflect the most recent revision.