To keep you and your data safe, we've taken time and care to make sure that everyone is legally protected from the misuse of data. Please read below for more info on how we protect you.
2.1 Protecting the privacy of your personal information is fundamental to the way we do business.
2.2 We are bound by the Privacy Act 2020 (“Act”) and the principles set out therein. The Act applies to the collection, use, storage and disclosure of personal information that you provide to us when accessing our Website and/or App.
3. Information we collect
3.1 We gather certain personal information about users of the Website and App. Some of the information we collect is identifiable information about you (for example, your name, contact details and payment information). This is called “personal information”. We have set out below the types of information we collect from our Website and App users.
3.2 We may collect personal information about users indirectly from a third party payment merchant when that user makes payment for Services via that payment merchant’s platform, for example, Windcave.
3.3 We collect and use your personal information for a range of purposes. The information we collect may be used for the following purposes:
Information we collect from users of our Website and/or App
3.4 We collect a range of information from people using our Website and App in order for us to provide the Services. Some of this includes personal information. We collect and retain each customer’s:
Information we collect from our business partners
3.5 We need to collect a range of information from our business partners. Some of this information is personal information and some is not.
3.6 When you sign up as a business partner with us you will need to provide us with the following information:
3.7 We will only use this information to contact you in relation to the Services we provide to you or for sales and marketing purposes. We will not sell or distribute this information to third parties.
Information we collect automatically via our Website and/or App
3.8 We collect some information about you automatically when you visit our Website or App, like your IP address and device type. We also collect information when you navigate through our Website, App, or other Services, including what pages you looked at and what links you clicked on. This information is useful for us as it helps us get a better understanding of how you’re using our Website, applications and other Services so that we can continue to provide the best experience possible (e.g., by personalizing the content you see).
Information we get from third parties:
3.10 The majority of information we collect, we collect directly from you. Sometimes we might collect personal information about you from other sources, such as individuals or organizations who use our Services, publicly available materials or trusted third parties like our marketing and research partners. We use this information to supplement the personal information we already hold about you, in order to better inform, personalize and improve our services, and to validate the personal information you provide.
4. How we store and protect your information
4.2 We store personal information in a combination of secure computer storage facilities and other records. In so doing, we have taken numerous steps to protect your personal information from misuse, loss, and unauthorised access, modification or disclosure.
4.3 Additionally we take reasonable steps to destroy or permanently de-identify personal information when we no longer need it.
4.4 We will not retain personal information if the law does not permit us to do so. Equally we will retain personal information where the law requires us to do that. This may mean that we will continue to hold the information after the relevant person ceases to use our Services.
4.5 We will review our suppliers security and reliability as and when necessary to ensure your data is protected to a market leading standard.
5. When we share or disclose your information
5.2 Besides our employees and contractors, we share a customer’s information on an “as needed” basis with:
5.3 In the event that we engage or partner with other third party vendors, consultants or other service providers in connection with the operation of the Website and App and our Services ("Service Providers"), we may share your personal information with, or obtain your personal information from, such Service Providers who need access to such information to carry out their work for us (for example, any third party payment provider that we use in connection with the Services, and to whom you provide your personal information). In addition, we may offer various features through a third party Service Provider. When you use the Services, you may be providing personal information directly to a Service Provider.
5.4 We utilise the services of a CRM Service Provider in the United States. However, the Service Provider is only authorised to hold and process your personal information on our behalf and are not authorised to use your personal information for its own purposes.
6. Access to and updating your information
6.1 Upon your written request, we will release to you any information we hold about you, subject to Part 4 of the Privacy Act 2020 - “Good reasons for refusing access to personal information”.
6.2 We will take reasonable steps to correct that information and to ensure that all information held by us about you is accurate, up to date, complete, and not misleading. You are entitled to request correction of any information held by us about you. Please contact us if you wish any information to be corrected.
6.3 If you make a request for the release of or correction of information held by us about you, we may require payment by you for our reasonable costs in complying with your request this is to the extent permitted by section 35 of the Privacy Act 2020.
7. Control of your user name and password
7.1 You may be given the option to create a user name and password for the Website and App, which will provide you with access to our online portal.
7.2 You are responsible for all actions taken with your user name, email address and password. We do not recommend that you disclose your password to any third parties. If you choose to share your user name, email address and password or your information with third parties, you are responsible for all actions taken by them.
8. Protection of your personal information
8.1 We endeavour to secure your personal information from unauthorised access, use or disclosure by putting into place measures to safeguard the information we collect. Despite our efforts, no security measures are perfect or impenetrable, and we cannot guarantee that the Website and App or our services will be free of any defects or flaws that affect your use of it or the security of your information.
9. How to contact us and how to resolve your concerns
Privacy Officer: Benjamin Rolfe
Address: PO BOX 14365, Tauranga 3143
9.2 If you make a complaint, we will respond within 5 days to let you know who is responsible for managing your complaint. We will record your complaint and will try to resolve it within 20 working days of the date we receive your complaint. When this is not possible, we will contact you within that time to let you know how long we will take to resolve your complaint.
9.3 We will investigate your complaint and where necessary, consult with you about your complaint. We will make a decision about your complaint and write to you to explain our decision.
10. Office of the New Zealand Privacy Commissioner
10.1 If you believe your complaint is not satisfactorily resolved, you may apply to the Office of the Privacy Commissioner (“OPC”) to have the complaint heard and determined. You may contact OPC by:
11. Updates to our information practices
11.3 Last updated: September 2021