Privacy Policy

1. Introduction

Entry Life Limited ("Entry Life", "we", "us" or "our") is a startup studio, registered in New Zealand, that partners with founders, funds and organisations to build technology ventures. We respect your privacy and are committed to handling your personal information openly and carefully.

This Privacy Policy explains what personal information we collect when you interact with our website and our team, how we use and protect it, who we share it with, and the choices and rights available to you. It reflects how Entry Life actually operates — we have written it to describe our real practices, not a generic template.

We handle personal information in accordance with the New Zealand Privacy Act 2020 and its Information Privacy Principles (IPPs). It sits alongside our Terms of Use.

2. Scope

This policy applies to:

• our public website (the "Site");
• enquiries you submit to us through our contact form;
• founder applications you submit to us;
• meetings and calls you book or attend with us; and
• related communications between you and Entry Life.

This policy does not cover third-party websites we link to, which have their own privacy policies. It also does not cover confidential information exchanged under a separate engagement agreement or non-disclosure agreement with a client — that information is governed by the terms of that agreement.

Entry Life does not operate an online store and does not sell products or services directly through the Site.

3. Information We Collect

We collect only the information we need. The categories below reflect what our Site and business actually collect.

3.1 Information you provide directly

Contact enquiries. When you complete our contact form, we collect the information you choose to give us, which may include your name, email address, the stage of your venture, your sector, what you are looking for, and your timeline, together with any message you write. The form is short by design.

Founder applications. When you submit a founder application, we collect the same core information, along with any additional detail you provide about your venture. A founder application is read by our founders directly.

Bookings and meetings. If you book a call or meeting with us, we (and our scheduling provider) collect the details needed to arrange it, such as your name, email address and chosen time.

Direct correspondence. If you email us or otherwise contact us directly, we keep that correspondence and the information it contains.

Files you send us. If you share documents with us (for example, a pitch deck), we store them securely and treat them as confidential.

3.2 Information collected automatically

Attribution information. When you first arrive at the Site, we store a small first-party cookie that records how you reached us — for example, the page you landed on, the site that referred you, and any campaign tags in the link you followed. Its sole purpose is to attribute an enquiry you later choose to submit, so we understand which of our efforts are useful. It makes no third-party requests. See Section 6 (Cookies).

Analytics information. With your consent, we use analytics to understand how visitors use the Site in aggregate. See Section 7 (Analytics).

Technical information. Our systems and service providers may log limited technical information (such as coarse, city-level location derived from an IP address for security events like sign-in alerts). We do not use this to identify website visitors, and we keep personal information out of our analytics and application logs.

We do not knowingly collect sensitive information through the Site, and we ask that you not send us sensitive personal information in enquiry forms.

4. How Information Is Used

We use personal information to:

• respond to your enquiry or founder application, and assess whether we may be a fit to work together;
• arrange, hold and follow up on calls and meetings;
• manage our relationship with you through our internal lead-management system;
• understand which sources bring genuine enquiries, so we can focus our effort (attribution);
• improve the Site and our services in aggregate (analytics, with consent);
• protect the Site and our systems against spam, abuse and security threats; and
• meet our legal, tax and record-keeping obligations.

We do not sell your personal information. We do not use your enquiry information for advertising to you, and we do not share it with third parties for their own marketing.

5. Legal Basis

Entry Life is a New Zealand company and handles personal information under the New Zealand Privacy Act 2020. Under that Act we collect personal information for the lawful purposes described in this policy, collect it directly from you wherever practical, tell you why we are collecting it at the point of collection, and use and disclose it only for those purposes or a directly related one.

Where the UK/EU GDPR or other overseas privacy laws apply to you, the legal bases we would rely on are: your consent (for analytics cookies); the steps necessary to take action at your request before entering into a possible engagement (responding to enquiries and applications); and our legitimate interests in running, securing and improving a small studio's enquiry process, balanced against your rights.

6. Cookies

We use a small number of first-party cookies and keep third-party cookies to a minimum.

Essential cookies (always active). These are necessary for the Site to work and cannot be switched off in our systems. They include your session, security tokens, your cookie-consent choice, and the first-party attribution cookie described in Section 3.2 (which expires after 90 days and makes no third-party requests).

Analytics cookies (off by default). These are set only if you accept analytics in our cookie banner. They are governed by your consent choice.

When you first visit the Site, our consent banner lets you accept or decline analytics cookies; essential cookies remain active because the Site cannot function without them. You can change your choice at any time using the "change preferences" link in the Site footer. Analytics does not run unless and until you consent.

We do not load third-party fonts or similar embedded resources that would set additional third-party cookies; our fonts are served from our own domain.

7. Analytics

With your consent, we use Google Analytics 4 (GA4) to understand, in aggregate, how visitors find and use the Site.

Analytics loads only after you accept analytics cookies; until then, consent defaults to "denied" and GA4 does not run. We configure analytics to avoid collecting information that would directly identify you, and we do not send names, email addresses or the contents of your enquiries to our analytics provider.

Separately, when you successfully submit a form or complete a booking, we send GA4 a server-side conversion event recording that the action happened — a measurement tied to a step you chose to take. This event does not include your name, email address or the contents of your enquiry. Google processes analytics data as described in its own privacy documentation.

8. Third-Party Services

We use a small set of trusted service providers ("processors") to run the Site and our enquiry process. They may handle personal information only to provide their service to us, under their own privacy terms. Our current providers are:

• Website hosting — Vercel serves the Site.
• Database and application infrastructure — our lead-management system and its data are stored with Neon, a managed Postgres provider, in an Australia (Sydney) region.
• File storage — documents you send us are held in private, access-controlled storage.
• Transactional email — we use Postmark to send notifications such as booking confirmations and internal lead alerts.
• Scheduling — we use a booking tool to arrange calls and meetings.
• Analytics — Google Analytics 4, with your consent (Section 7).
• Spam protection — where a form submission looks automated, we may show a challenge from an anti-abuse provider to confirm you are human.

We choose providers that let us keep control of your information and we do not permit them to use it for their own purposes. We may add, change or remove providers over time; when we do, we will update this list.

We may also disclose personal information where we are required or permitted by law, or to protect our rights, safety, or property, or those of others.

9. International Data Transfers

Entry Life is led from Auckland, New Zealand, with team members in Islamabad, Pakistan. This means your personal information may be accessed by our team in both New Zealand and Pakistan, and stored by service providers whose infrastructure is located outside New Zealand — our application and database infrastructure is hosted in Australia (Sydney).

Wherever your information is accessed or stored, the protections described in this policy apply. Because our team operates from both New Zealand and Pakistan, cross-border access is a normal part of how we work; we take reasonable steps to ensure your information remains protected to the standards this policy describes wherever it is accessed or held, consistent with our obligations under the New Zealand Privacy Act 2020.

10. Data Retention

We keep personal information only for as long as we need it for the purposes in this policy, or as required by law. Our current retention schedule is:

We enforce this schedule on a regular, automated basis.

11. Data Security

We take reasonable steps to protect personal information against loss, misuse, unauthorised access, disclosure, alteration and destruction. These steps include access controls and least-privilege permissions for our systems, encrypted connections, private (non-public) file storage with access checks, multi-factor authentication for our internal team, audit logging of significant actions, and keeping personal information out of our analytics and application logs.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a privacy breach that is likely to cause serious harm occurs, we will assess and respond to it in line with our obligations under the Privacy Act 2020, including notifying the Office of the Privacy Commissioner and affected individuals where required.

12. Your Rights

Under the New Zealand Privacy Act 2020, you have the right to:

• access the personal information we hold about you; and
• request that we correct it if it is wrong.

You may also ask us to delete your personal information, and we will do so where we are able and not required by law to keep it.

To make a request, contact us using the details in Section 14. We will verify your identity before acting on a request, and we aim to respond within 20 working days, as the Privacy Act requires. There is generally no charge for these requests.

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner (New Zealand) at privacy.org.nz.

If overseas privacy laws apply to you, you may have additional rights, such as data portability, objection, or the right to lodge a complaint with a local regulator.

13. Children's Privacy

The Site and our services are intended for founders, businesses and professional audiences. They are not directed at children, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

14. Contact Information

If you have questions about this policy, or wish to make a privacy request, contact us at:

Entry Life Limited
Email: connect@entrylife.com
Auckland, New Zealand

15. Policy Updates

We may update this policy from time to time to reflect changes in our practices, our service providers, or the law. When we do, we will change the "Last updated" date at the top of this policy and publish the revised version on the Site. Where changes are significant, we will take reasonable steps to make them more prominent. We encourage you to review this policy periodically.