Privacy Policy

Dilani & Co Ltd
Last updated: 6 October 2026

This policy explains how Dilani & Co Ltd ("Dilani & Co", "we", "us", "our") collects, uses, stores and protects your personal information when you visit racheldilani.com, register for a webinar, join our email list, or work with us as a client. It also sets out how we use artificial intelligence (AI) tools responsibly, including our commitment that client data and confidential information are never shared with AI tools.

Dilani & Co Ltd is a New Zealand company. We handle personal information in line with the New Zealand Privacy Act 2020 and its Information Privacy Principles. We also work with clients in Australia, the United Kingdom and the United States, and we respect the privacy rights those clients have under their own laws.

If you have any questions about this policy, email us at rachel@racheldilani.com.

1. Information we collect

We only collect the information we need to deliver what you have asked for.

Information you give us

• Webinar and email sign-ups: your first name, email address, and any optional details you choose to share, such as the type of business you run.
• Enquiries and bookings: your name, email address, phone number (if you provide it), business name, and anything you include in your message.
• Client work: contact details for you and your team, billing details, and the information you share so we can deliver the agreed services.

Information collected automatically

• Website and email activity: basic technical information such as your browser type, device, pages visited, and whether you opened or clicked an email. This helps us understand what is useful and keep our website secure.
• Cookies: small files that help pages load correctly, remember your preferences, and measure visits. You can block or delete cookies in your browser settings, though some features may not work as intended.

We do not knowingly collect information from anyone under 16.

2. How we use your information

We use your information only for the purposes you would reasonably expect:

• To register you for webinars, and send your joining link, reminders and the replay.
• To send you our emails, including practical tips, invitations and occasional information about our services. Every email includes an unsubscribe link.
• To respond to enquiries and arrange calls or meetings.
• To deliver client services, manage projects, and issue invoices.
• To improve our website, webinars and content.
• To meet our legal, tax and accounting obligations.

We do not sell, rent or trade your personal information. We do not share it with third parties for their own marketing.

3. Responsible use of AI

Dilani & Co helps businesses adopt AI safely, and we hold our own business to the same standard. These commitments apply to everyone who works for or on behalf of Dilani & Co.

3.1 Client data and confidential information are never shared with AI tools

We do not enter, upload, paste or otherwise share any of the following into any AI tool, chatbot, large language model or AI-powered service:

• personal information about you, your staff or your customers;
• client data of any kind, including documents, files, records, spreadsheets, emails or system exports;
• confidential, commercially sensitive or proprietary information, including financial information, pricing, strategy, intellectual property, contracts, or anything shared with us under a confidentiality agreement;
• login details, passwords, access keys or security information.

3.2 When we set up AI tools in your business

When we help you set up AI tools and train your team, that work happens inside accounts that your organisation owns and controls, under your settings and policies. Your information stays in your environment. We do not copy your data into our own AI accounts, and we do not keep copies of your data after an engagement ends, other than what we need for legal or accounting records.

Where we need examples during training, we use made-up or fully anonymised sample data, not your real information.

3.3 How we use AI in our own business

We may use AI tools to help draft and edit our own content, such as webinar materials, website copy, emails and general templates. This content does not contain personal information or client information. A person reviews everything before it is published or sent.

3.4 No automated decisions about you

We do not use AI to make decisions that affect you, such as profiling, scoring or deciding whether to work with you.

3.5 Choosing AI tools carefully

When we recommend AI tools to clients, we favour business plans whose terms state that customer data is not used to train the provider's models, and we explain the relevant settings so your team can keep your information protected.

3.6 If something goes wrong

If client or confidential information is ever shared with an AI tool by mistake, we will tell the affected client promptly, take every reasonable step to have it deleted, and review our processes so it does not happen again.

4. Who we share information with

We use a small number of trusted service providers to run our business. They only receive the information they need to provide their service to us, and they are required to keep it secure.

We may also disclose information where the law requires it, or to protect our legal rights.

5. Where your information is stored

Some of our service providers store information outside New Zealand, including in the European Union and the United States. Before using a provider, we check that it protects personal information in a way that is comparable to the New Zealand Privacy Act 2020.

6. Webinars and recordings

Live webinars are run on Google Meet and may be recorded so registrants can watch the replay. Recordings focus on the presentation. If you speak or appear on camera during a session, you may appear in the recording. You are welcome to keep your camera and microphone off and ask questions in the chat instead. Replays are shared as unlisted videos for a limited time.

7. How long we keep your information

• Email list: until you unsubscribe, or after a long period of inactivity.
• Enquiries: for up to two years, unless we start working together.
• Client records: for as long as needed to deliver the work, then for seven years to meet New Zealand tax and accounting requirements.

When information is no longer needed, we delete it or make it anonymous.

8. How we keep your information safe

We take reasonable steps to protect your information from loss, misuse and unauthorised access. These include:

• two-factor authentication on our business accounts;
• strong, unique passwords and a password manager;
• limiting access to the minimum needed;
• the AI commitments set out in section 3.

If a privacy breach is likely to cause serious harm, we will notify you and the Office of the Privacy Commissioner as required by law.

9. Your rights

You can ask us at any time to:

• tell you what personal information we hold about you;
• give you a copy of it;
• correct anything that is wrong;
• delete your information, where we are not required to keep it;
• stop sending you marketing emails (you can also use the unsubscribe link in any email).

To make a request, email rachel@racheldilani.com. We will respond within 20 working days.

If you are not happy with how we have handled your information, please contact us first so we can put it right. You can also contact the Office of the Privacy Commissioner in New Zealand at privacy.org.nz. If you live in Australia, the United Kingdom or the European Union, you may also contact your local privacy regulator.

10. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated at the top.

11. Contact us

Dilani & Co Ltd
Privacy Officer: Rachel Dilani
Email: rachel@racheldilani.com
Website: www.racheldilani.com