Let’s talk about your privacy
Effective date: 12 July 2026
SJ Hay (www.sjhay.com) is operated by People & Process Limited, a company registered in New Zealand ("we", "us", "our"). This Privacy Policy explains what personal information we collect, why we collect it, how we use it, and the choices and rights you have.
This site offers blog content, serialised AI-generated chat content, email newsletters, and consulting products and services, some of which are sold and delivered through Podia, a third-party platform.
Data controller: People & Process Limited, New Zealand.
For any privacy questions, requests, or complaints, contact:
Email: contact@sjhay.com
Contact details (name, email address) when you subscribe to our newsletter, contact us, or create an account.
Account details when you register or make a purchase through Podia (name, email, password, purchase history).
Payment information when you make a purchase. Payment card details are collected and processed by our payment processors (Podia, Stripe, and/or PayPal) — we do not store full card numbers ourselves.
Any information you send us directly, such as messages, consulting intake forms, or correspondence.
Usage and analytics data via Google Analytics, including pages visited, time on site, referral source, device/browser type, and approximate location (derived from IP address).
Purchase and engagement analytics via Podia's built-in analytics (e.g. course/product progress, email open and click data).
Cookies and similar technologies used by this site and by Podia to operate the site, remember preferences, and gather analytics (see Section 7, Cookies).
We may receive limited information from Podia, Stripe, and PayPal about your transactions (e.g. confirmation that a payment succeeded, billing region) as part of processing your purchase.
We use personal information to:
Provide, operate, and maintain the site and the products, content, and consulting services you request or purchase.
Process payments and manage your account and purchase history via Podia.
Send newsletters, blog updates, and serialised content you've subscribed to, and administrative or transactional communications.
Respond to enquiries and provide consulting services you've engaged us for.
Understand how the site is used and improve content, products, and site performance (via Google Analytics and Podia analytics).
Comply with legal obligations, including tax and accounting requirements, and to detect and prevent fraud.
Where the GDPR or UK GDPR applies, we rely on the following legal bases:
Contract — to provide products, content, or consulting services you've purchased or signed up for.
Consent — for newsletter subscriptions and non-essential cookies/analytics, which you can withdraw at any time.
Legitimate interests — to maintain and improve the site, understand usage, and communicate with existing customers about related offerings.
Legal obligation — where we must retain or disclose information to comply with the law (e.g. financial record-keeping).
We do not sell your personal information. We share information with the following categories of third parties, only as needed to operate the site and deliver our services:
Podia — our platform provider for hosting content, memberships/accounts, purchases, and email delivery.
Stripe and/or PayPal — for processing payments.
Google Analytics — for website usage analytics.
Professional advisers (e.g. accountants, lawyers) where necessary for our business operations.
Authorities or third parties where required by law, to protect our rights, or in connection with a business transfer (e.g. sale or restructuring of the business).
Each of these providers processes personal information under its own privacy policy and, where relevant, as our data processor under contractual data protection terms.
We are based in New Zealand, and our service providers (including Podia, Stripe, PayPal, and Google) are based in or process data in other countries, including the United States. Where personal information is transferred internationally, we and our providers rely on recognised safeguards such as standard contractual clauses, or the fact that New Zealand has been recognised by the European Commission as providing an adequate level of data protection.
This site and the Podia platform use cookies and similar technologies to:
Keep the site and your account functioning correctly (essential cookies).
Understand site usage through Google Analytics and Podia analytics (analytics cookies).
You can control cookies through your browser settings, including blocking or deleting them. Blocking essential cookies may affect site functionality. Where required by law, we will request your consent before setting non-essential cookies.
We retain personal information for as long as needed to provide our services, maintain your account, comply with legal and tax obligations, resolve disputes, and enforce our agreements. Newsletter subscriber data is retained until you unsubscribe. Purchase and account records held via Podia are retained in line with Podia's own retention practices and applicable legal requirements.
Depending on where you live, you may have rights to access, correct, delete, or export your personal information, restrict or object to certain processing, and withdraw consent at any time.
Account and purchase data: you can typically access, update, or request deletion of your account directly through Podia's self-serve account settings.
Newsletter: every email includes an unsubscribe link, or you can contact us directly.
Other requests: contact us at the email above and we will respond within a reasonable time and in accordance with applicable law.
If you are in the EEA, UK, or Switzerland, you also have the right to lodge a complaint with your local data protection authority. If you are a California resident, you have rights under the CCPA/CPRA to know, delete, and correct your personal information, and to opt out of the sale or sharing of personal information — we do not sell personal information.
This site and its content are intended for a general adult audience and are not directed at children. In line with the age threshold set by our platform provider, Podia, we do not knowingly collect personal information from anyone under 16. If you believe someone under 16 has provided us with personal information, please contact us so we can delete it.
Purchases, accounts, and email delivery for this site are provided using Podia, a third-party platform. Podia acts as our data processor for the personal information involved in your purchase or account (for example, storing your account details and processing transactions on our behalf), and also separately acts as a data controller for its own purposes when you interact directly with podia.com (for example, its own analytics, security, and marketing practices as a company).
For details of how Podia itself collects and uses information as a controller, see Podia's own Privacy Policy and Terms of Service.
We take reasonable technical and organisational measures to protect personal information, and rely on the security measures of our providers (Podia, Stripe, PayPal, Google). However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "Effective date" at the top of this page. Continued use of the site after changes take effect constitutes acceptance of the revised policy.
Questions, requests, or complaints about this Privacy Policy or our data practices can be sent to:
People & Process Limited (trading as SJ Hay)
PO Box 24543
Manners Street
Wellington 6142
New Zealand
or by email below: