Privacy Policy

We believe that how we handle your data is an expression of our values, not just a legal obligation.

This policy explains in plain language what information we collect when you visit our website or interact with JERICA, why we collect it, how we use it, and what rights you have over it.

JERICA Global Ltd is registered in New Zealand. We also operate through JERICA France (SAS), our EU entity, which acts as our designated EU representative for data protection purposes. This policy applies to both entities and to all data collected through www.jericaglobal.com and www.jericaglobal.eu. 

Questions about this policy? Contact us at support@jericaglobal.com.

1.  Who we are

JERICA Global Ltd is the data controller for personal data collected through this website.

Our details:
Email: support@jericaglobal.com

Website: www.jericaglobal.com

Registered entity: JERICA Global Ltd, New Zealand

For visitors located in the European Union or European Economic Area, JERICA France (SAS) acts as our EU representative under Article 27 of the GDPR. You may contact JERICA France at the email address above, marking your message “GDPR – EU Representative”.

2.  What information we collect and why

Information you give us directly

When you use the contact form on our website, we collect the information you choose to share – typically your name, email address, and the content of your message. We use this solely to respond to your enquiry.
When you sign up for our newsletter through Ecosend, we collect your name and email address for the purpose of sending you JERICA updates. You can unsubscribe at any time using the link in any email we send.

Information collected automatically

Like all websites, ours collects certain technical data automatically when you visit. This includes your IP address, browser type, the pages you view, and how you navigate through the site. This is used to understand how the site is performing and how people use it, not to identify you personally.

Information collected through third-party tools

Our website uses a small number of third-party services, each of which may collect data or set cookies independently. We explain these in Section 5. We choose tools carefully and, where possible, select providers with strong privacy commitments.

3.  Our lawful basis for processing

Under GDPR and the New Zealand Privacy Act 2020, we must have a lawful reason before processing personal data. We rely on the following bases:

  • Consent: for non-essential cookies (analytics, marketing), newsletter sign-up, and any other processing where we ask for your agreement. You can withdraw consent at any time.

  • Legitimate interests: for basic site security, fraud prevention, and understanding how the site is used, where this does not override your rights.

  • Contract performance: where you have engaged JERICA for services, we process relevant data to deliver on that agreement.

  • Legal obligation: where law requires us to retain or disclose information.
    We do not use automated decision-making or profiling that produces legal or similarly significant effects on individuals.

4.  How we use your information

  • We use personal data only for the purposes for which it was collected. Specifically:
    To respond to enquiries submitted through our contact form.

  • To send our newsletter to people who have opted in via Ecosend, and to manage subscription preferences.

  • To understand how our website is being used, via Google Analytics, so we can improve it.

  • To maintain the security and performance of the site.

  • To meet our legal and regulatory obligations.


We do not sell your personal data. We do not use it for advertising. We do not share it with third parties for their own marketing purposes.

5.  Cookies and third-party tools

Cookies are small text files placed on your device when you visit a website. Some are essential for the site to work; others help us understand how it is being used. Non-essential cookies are only placed on your device with your consent.

Below is a plain-language summary of the tools our website uses and the data each may collect. You can manage your cookie preferences at any time using the cookie settings link in the footer of our site.

Our website uses several third-party services, each of which may collect specific types of data for defined purposes:

  • Squarespace uses session and analytics cookies to support platform operation and monitor site performance. Essential cookies are always active, while performance-related cookies require your consent.

  • Weglot sets a language preference cookie to remember your selected language. This is considered an essential functional cookie and does not require consent.

  • Google Analytics 4 uses analytics cookies (such as ga and gid) to measure site traffic and understand usage patterns. This data is processed by Google and requires your consent.

  • Ecosend collects your name and email address when you sign up for the newsletter. This is used to manage your subscription and send communications. It falls under functional/marketing use and requires your explicit consent.

  • Spotify may set third-party usage cookies when the podcast player is active on the site. These are performance-related cookies and require your consent.

A note on Google Analytics: data collected by Google Analytics is processed by Google on servers that may be located outside the EU/EEA. We use Google Analytics with IP anonymisation enabled, which means your full IP address is not stored. Google’s privacy policy is available at policies.google.com/privacy.

A note on Ecosend: Ecosend is an email marketing platform built with environmental and ethical commitments. When you subscribe to our newsletter, your name and email address are stored by Ecosend and used solely to manage your subscription and deliver JERICA communications. Ecosend’s privacy policy is available at ecosend.com. You can unsubscribe at any time.

6.  How long we keep your data

We keep personal data only for as long as is necessary for the purpose for which it was collected, or as required by law. Our standard retention periods are:

  • Contact form enquiries: two years from the date of last contact, after which records are securely deleted.

  • Newsletter subscriber data: for as long as your subscription is active, plus a short period afterwards in case of resubscription. If you unsubscribe, your data will be removed from our active mailing list promptly.

  • Analytics data: Google Analytics data is retained for 14 months by default; we do not extend this.

  • Legal and contractual records: as required by applicable New Zealand and EU law.

7.  Who we share your data with

We do not sell, rent, or trade your personal data. We share it only where necessary to operate our services, as follows:

  • Squarespace: our website platform, which processes data on our behalf as a data processor.

  • Google (Google Analytics): for website analytics, subject to your cookie consent.

  • Ecosend: for newsletter management, where you have opted in.

  • Weglot: for language preferences; processes only the data needed for this function.

We may also disclose data where required by law, court order, or regulatory authority. In all cases, we share only the minimum information necessary.

8.  International data transfers

JERICA Global Ltd is based in New Zealand, which has been recognised by the European Commission as providing adequate data protection. This means transfers of EU personal data to New Zealand do not require additional safeguards.

Some of the third-party tools we use (including Google Analytics and Squarespace) may process data on servers located in the United States or other countries outside the EU/EEA. Where this occurs, we ensure that appropriate safeguards are in place – typically Standard Contractual Clauses approved by the European Commission, or adequacy decisions. Details of the safeguards applied by each provider are available in their respective privacy policies.

We do not ask you to waive your GDPR transfer rights. Any transfer of your EU personal data will be conducted on a lawful basis under Article 45, 46, or 49 of the GDPR.

9.  Your rights

You have a range of rights over your personal data. These apply whether you are based in New Zealand (under the Privacy Act 2020) or in the EU/EEA (under the GDPR). The bullet points below sets out what each right means in practice.

  • Access: You can request a copy of the personal data we hold about you.

  • Rectification: You can ask us to correct any inaccurate or incomplete information.

  • Erasure: You can request that we delete your data, provided there is no legal obligation for us to retain it.

  • Restriction: You can ask us to limit how we use your data while a concern or dispute is being resolved.

  • Portability: Where applicable, you can request your data in a structured, machine-readable format.

  • Object: You can object to processing based on legitimate interests or for direct marketing purposes.

  • Withdraw consent: Where processing is based on your consent, you can withdraw it at any time. This does not affect any processing carried out before withdrawal.

To exercise any of these rights, contact us at support@jericaglobal.com. We will respond within one calendar month. We will not charge a fee unless a request is manifestly unfounded or excessive, in which case we will explain why before proceeding.

10.  How to make a complaint

If you have a concern about how we have handled your personal data and are not satisfied with our response, you have the right to raise a complaint with the relevant supervisory authority.

New Zealand

Office of the Privacy Commissioner — www.privacy.org.nz  |  +64 4 474 7590

European Union

EU residents may contact the supervisory authority in their country of residence. For matters relating to JERICA France specifically, the relevant authority is:

CNIL (Commission Nationale de l’Informatique et des Libertés) — France  www.cnil.fr


We would always prefer the opportunity to resolve a concern directly before you escalate it. Please do contact us first.

11.  Security

We take reasonable technical and organisational measures to protect your personal data from unauthorised access, loss, or misuse. Our website is served over HTTPS. Data submitted through our contact form is transmitted using SSL encryption.

No data transmission over the internet can be guaranteed as completely secure. If you have reason to believe that your interaction with us has been compromised, please contact us immediately.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authority in accordance with our obligations under the GDPR and the New Zealand Privacy Act 2020.

12.  Children

Our website is not directed at children. Under GDPR, the default age for consent to data processing is 16 (though member states may lower this to 13). We do not knowingly collect personal data from anyone under the age of 16. If you believe a child has submitted data to us, please contact us and we will delete it promptly.

13.  Links to other websites

Our website contains links to external sites – including our podcast platforms (Spotify, Apple Podcasts, iHeart), LinkedIn profiles, and other third-party resources. Once you leave our site, this policy no longer applies. We encourage you to review the privacy policies of any external sites you visit.

14.  Changes to this policy

We will update this policy when our practices change or when legal requirements make it necessary. When we make material changes, we will update the version number and publication date at the top of this page. We encourage you to review this policy periodically.

This policy is aligned with our Gender Equity Plan and with JERICA’s broader commitment to operating with transparency, integrity, and respect for the people we work with and for.

15.  Contact us

For any questions, requests, or concerns relating to this policy or to the way we handle your personal data:

Email: support@jericaglobal.com

Website: www.jericaglobal.com/contact

We aim to respond to all data-related requests within five business days, and in all cases within one calendar month as required by GDPR.

This document is titled the JERICA Global Privacy Policy, version 1.0. It was published in April 2026 and is scheduled for review in April 2028.

It has been approved by Jules Harrison-Annear and Esteban Fernandez Drovetta, Co-CEOs of JERICA.

The policy applies to both JERICA Global Ltd and JERICA France (SAS).

It is published online at www.jericaglobal.com/privacy-policy, and any questions can be directed to support@jericaglobal.com.