How your details are handled
You were invited to give your view of a business you deal with. This page explains what we hold about you, why we hold it, who sees it, and how to have it removed. It is short because there is not much to say.
Who we are
The Customer Confidence Mirror is part of the Commercial Confidence Diagnostic, run by LeaderLegacy Limited, 17 Marina Road, Torbay, Auckland 0630, New Zealand.
dreamstorm, a New Zealand business, built and maintains the tool for LeaderLegacy.
What we hold about you, and where it came from
We may hold your name, work email, the organisation you work for, and the part of it you work in.
We did not get these details from you. The business that invited you gave them to us so that we could send you this invitation.
If you take part, we also hold:
- your answers to the eight statements
- anything you write in the two comment boxes
- the date you responded
We do not record whether you opened the email or the page.
What it is used for
To send you the invitation, and to show the business that invited you how its customers experience it.
Nothing else.
You are not added to any mailing list.
Your answers are not given to any AI system and are not used to train one.
Who sees what
The business that invited you sees scores only once three or more people have replied, and then only as combined results.
It is never shown your individual scores, and it is never shown who has replied and who has not.
It sees written comments without names.
If you are one of the first people to reply, or if you mention something only you would know, someone may still recognise you from what you write.
LeaderLegacy and dreamstorm can access the information held where necessary to operate the tool or fix a technical issue.
If the business asks LeaderLegacy to review its results, LeaderLegacy sees the same combined results and anonymous comments the business sees.
Where it is kept
The main database is hosted in Sydney, Australia, using Supabase.
The invitation is sent through Resend, and the page is served through Vercel.
These service providers process information on LeaderLegacy's behalf. Some service records may therefore be held outside New Zealand.
LeaderLegacy remains responsible for how your personal information is handled.
How long it is kept
If you do not take part, we remove everything we hold about you 90 days after you were invited.
If you take part, we remove your name and email 12 months after you respond.
We then keep your answers without those identifying details.
The business that invited you can ask for your details to be removed sooner, and so can you.
Your choices
You don't have to take part, and the business won't know why you didn't.
Use the link in your invitation that says you would rather not take part, and we will remove your details.
If you have already taken part and want to withdraw your response, open your invitation link again. Your response and identifying details will be removed together.
To see what we hold about you, or to have it corrected, write to info@leaderlegacy.co.nz.
We will respond within 20 working days.
If you are not happy with how we have handled your details, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.
How the three tools handle everyone else's information is at app.leaderlegacy.co.nz/privacy, and LeaderLegacy's privacy policy covers the rest. The tools’ notice
Checked against the tool as it runs on 2 October 2026.