Introduction

We value your privacy and are committed to protecting your personal information. This Privacy Policy outlines how Directories (operated by Adverb Limited, New Zealand) collects, uses, and protects your data when you use directories.co.nz and the platforms in the Directories network. By accessing and using our platforms, you agree to the terms of this Privacy Policy.

Information We Collect

1. Personal Information
   • Registration Data: When you register on our platforms, we collect personal information such as your name, email address, phone number, and business details.
   • Payment Information: For subscription services, payments are handled by our payment processor, Stripe. Card details are entered directly with Stripe and are not collected or stored on our servers. We retain only limited billing records, such as your subscription status and transaction history.
2. Non-Personal Information
   • Usage Data: We collect information about how you interact with our platforms, including your IP address, browser type, operating system, pages viewed, and the dates/times of your visits.
   • Cookies: We use cookies to enhance your experience on our sites. Cookies are small files stored on your device that help us understand your preferences and improve our services.

How We Use Your Information

1. Providing Services: We use your personal information to provide and manage our services, process payments, and communicate with you about your account.
2. Improving Our Platforms: We analyse usage data to understand how our platforms are used and to improve their functionality and user experience.
3. Marketing and Communication: With your consent, we may use your information to send you promotional materials, updates, and other relevant communications. You can opt out of these communications at any time.
4. Legal Compliance: We may use your information to comply with legal obligations, resolve disputes, and enforce our agreements.

Information Sharing and Disclosure

1. Third-Party Service Providers: We may share your information with third-party service providers who assist us in operating our platforms, processing payments, and providing services. These providers are obligated to protect your information and use it only for the purposes for which it was shared.
2. Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities.
3. Business Transfers: In the event of a merger, acquisition, or sale of our assets, your personal information may be transferred to the new entity.

Overseas Storage and Processing

Some of the third-party providers we rely on to operate our platforms, including our hosting, database, payment, and email providers, store and process information on servers located outside New Zealand. Where personal information is disclosed to an overseas provider, we take reasonable steps to ensure it is subject to safeguards comparable to those required under the Privacy Act 2020. By using our platforms, you acknowledge that your information may be stored or processed overseas for these purposes.

Data Retention

We retain personal information only for as long as it is needed for the purposes set out in this Privacy Policy, including to provide our services, maintain your account, and meet our legal, accounting, and record-keeping obligations. When information is no longer required, we delete or anonymise it. Some records, such as billing and transaction history, may be kept for longer where the law requires us to retain them.

Data Security

We implement appropriate security measures to protect your personal information from unauthorised access, disclosure, alteration, or destruction. Our payment processing is handled by Stripe, a PCI-DSS Level 1 certified payment processor.

Your Rights

Under the Privacy Act 2020 you have the following rights in relation to the personal information we hold about you.

1. Access and Correction: You have the right to access and update your personal information at any time by logging into your account, or by requesting a copy from us. If you believe any information we hold is inaccurate, you may ask us to correct it.
2. Requesting a Copy of Your Data: You can request a copy of the personal information we hold about you. Where practicable, we will provide it in a commonly used, machine-readable format. To make a request, email legal@businessdirectory.co.nz.
3. Deletion and Anonymisation: You may ask us to delete your personal information. Where we no longer have a lawful reason to retain it, we will delete or anonymise it. Some information may be retained where necessary to comply with legal obligations, resolve disputes, prevent fraud, or maintain business records, in which case we restrict its further use.
4. Opt-Out: You can opt out of receiving marketing communications by following the unsubscribe instructions included in our emails.

We will respond to access, correction, and deletion requests as soon as reasonably practicable, and no later than 20 working days after we receive your request, as required by the Privacy Act 2020. If you are not satisfied with how we handle your request, you may complain to the Office of the Privacy Commissioner (privacy.org.nz).

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our platforms and store certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our platforms.

Correction Requests and Uploaded Files

When you submit a correction request on a profile or listing page, we collect your name, email address, your message, and any file you choose to upload (photos, screenshots, or documents). This information is used solely to review and, where appropriate, update the relevant profile or listing.

By uploading a file, you confirm you have the right to share it and grant Directories a non-exclusive, royalty-free licence to use it for the purpose of verifying, updating, or improving the profile or listing it relates to. We will not use uploaded files for any other purpose without your consent. Files are stored securely and are not publicly listed.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. You are advised to review this Privacy Policy periodically for any changes. If you have any questions, contact us at legal@businessdirectory.co.nz.