Privacy Policy

Zipp Software Limited, a company based in New Zealand, together with its affiliates (collectively we, our or us in this Privacy Policy) is committed to maintaining the privacy of the information of its subscribers and other users of its products and services.

In the course of our business dealings or our operation of our Zipp service or websites (Service), we may collect, use, disclose, and hold information about identified or identifiable persons (Personal Information), as well as other business or technical data.  

This Privacy Policy describes how we collect, use, store and distribute Personal Information and other data, and describes the purposes for which we may use, disclose or hold such Personal Information and other data.

Information that we collect

We may collect the following information during the course of our relationship with any organisation that subscribes for the Service (Subscriber) or with any registered user of the Service (User), or as a result of the use of our Service by any User:

1. We will collect personal details during the course of a Subscriber or User establishing and maintaining a subscription or User account with us via the Service, such as User and Subscriber names, User login and password details, User and Subscriber contact details (such as addresses, email addresses and phone numbers), and the Subscriber’s credit card and payment details.
2. We will collect information that is inputted or uploaded by Users into the Service. This information may include Personal Information or other details about Subscribers, Users or other people.
3. We will collect other data related to the use of the Service, including details relating to the establishment and maintenance of any projects on the Service, and any information inputted or uploaded by any User relating to those projects.
4. We will also collect data relating to any User’s interaction with the Service, including ordering details for any goods or services, details of the pages visited, the reports generated and the data accessed.
5. We may collect Personal Information and other data during the use of any messaging functions or features of the Service. See the below section entitled “Messaging and Contacts” for more details.
6. We may collect data that is provided to us by third party service providers whom a User engages via the Service. This data may include details of the services to be performed, and the fees and payment terms.
7. We may collect other Personal Information and data during the course or as a result of any Subscriber’s or User’s relationship with us, including where necessary to enable us to provide products and services to Subscribers or Users or to respond to requests for further information.  

How we use Personal Information and other data

We will use, disclose and hold Personal Information and data collected by us for the following purposes:

1. to enable us and our agents and affiliates to operate the Service for the benefit of Subscribers and Users, and to provide the functions and features of the Service. These functions and features may include messaging functions or features, as well as services provided by third-party service providers;
2. to establish and maintain any Subscriber or User account held with us;
3. to complete transactions, including billing, credit card processing, payment, receipt, credit check and verification services;
4. to respond to User and Subscriber queries or requests for additional information or support;
5. to provide after-sales support, technical support or administration services in relation to the Service and any products or services ordered by any Subscriber or User;
6. to maintain our records;
7. to keep Subscribers and Users informed about products, services, events, promotions or any other marketing activities, but only to the extent permissible under applicable laws, and subject to any other restrictions contained in this Privacy Policy;
8. for product development or research purposes; and
9. to evaluate customer satisfaction and the performance of marketing activities.

Lawful basis for processing Personal Information

We will always make sure that we have a lawful basis for the processing of any Personal Information.

In particular, we may need to process Personal Information to pursue our legitimate business interests. This includes to enable us to operate the Service for the benefit of Users and Subscribers. In claiming legitimate business interests to process Personal Information, we will balance those legitimate business interests against the interests of the relevant Subscribers and Users – which may in some cases override our legitimate business interests.

In addition to our legitimate business interests:

1. we obtain the consent of Users and Subscribers to the collection, use and processing of Personal Information, where possible. We do this by requiring anyone who registers or subscribes to the Service as a User or Subscriber to confirm their acceptance of the terms of this Privacy Policy; and
2. In some circumstances, we will have a legal obligation to process certain Personal Information.

Cookies

Our Service may use cookies.  “Cookies” are small text files that are placed on computers, devices or browsers used to access websites, apps or other internet content.  We may use cookies to remember information about a User’s personal preferences and settings for the Service, to analyse Service traffic and trends, and to generally understand the behaviours and interests of people who use the Service.

Our cookies will only use information about a User’s personal preferences and User settings so that the Service will remember the User’s details next time they visit.  We may use, disclose or sell other data collected by us from cookies for other purposes, but only on an aggregated basis and in a way that ensures that no individual is able to be identified from such information.  

A User may be able to change the settings on the device that they use to access the Service in order to reject or limit the use of cookies, but this may reduce the functionality of the Service.

Please note that Users based in the European Union will be asked to accept the use of cookies before these can be enabled on their devices.

Messaging and Contacts

We may collect Personal Information and other data during the use of any messaging functions or features of the Service. We will use this Personal Information and data to deliver those messages to the intended recipients, and (where messages are directed to us or our team members) to take appropriate actions in response to those messages.

We may also monitor and access any such messages to ensure that Users comply with our Terms and Conditions of Service, and in particular our rules around the appropriate use of our messaging service, and we may where necessary take appropriate actions against Users who are not complying with our Terms and Conditions of Service. These actions may include directing the content of any messages to law enforcement or other regulatory authorities where we consider it appropriate to do so.

The Service may allow Users to make other Users Contacts for particular projects. When a User makes another User a Contact, they will be authorising that other User to access some or all of the information and data relating to a particular project, depending on the Contact settings for that other User. If a User does not wish to share this information and data with a particular person, they should not make that person a Contact.  

Social sharing features

The Service may integrate with social sharing features and other related tools which let Users share actions they take on the Service with other apps, sites, or media, and vice versa. The use of such features may enable the sharing of information with a User’s friends or the public, depending on the settings the User establishes with the social sharing service. Users should refer to the privacy policies of those social sharing services for more information about how they handle the Personal Information or data that Users provide to or share through them.

Statistical data that we collect

During the use of the Service by any User we may collect statistical data about such use, such as the date, time and length of the use, the pages of the Service that the User visits, and information about the device the User is using to access the Service. This information may be collected by software operating on the Service, or by third party service providers on our behalf.  

We may use and disclose such statistical data for the following purposes:

1. to measure the effectiveness of any services or features provided via the Service;
2. to better direct Users to goods or services that might interest them;
3. to identify User behaviour and user trends on the Service;
4. to maintain and optimise the technical performance, operation and security of any products or services (including the Service) provided by us; and
5. to assist in resource planning.

We may disclose or sell such statistical data to others for any purpose, but only on an aggregated basis and in a way that ensures that no individual is able to be identified from such data.  

User and subject data

We may also use, sell or disclose any of the data about Users and other persons that we collect for any purpose other than those purposes expressly permitted under this Privacy Policy, but only on an aggregated basis and in a way that ensures that no individual is able to be identified from such data.  

Marketing

We may use Personal Information and other data collected by us or via the Service to send or email to Users or Subscribers marketing or promotional information about our services or products, or the services or products of other companies (Direct Marketing Information), but only if the User or Subscriber has expressly given us permission to do so.  

If a User or Subscriber has given us permission to send to them Direct Marketing Information, and they later decide that they do not want us to send them any further Direct Marketing Information, they can contact us at any time to request that we stop sending them such information.  They can either contact our Privacy Officer (see the details at the end of this Privacy Policy) or use the “Unsubscribe” facility at the bottom of any Direct Marketing Information email or communication that we send them.

We will not sell any Personal Information to direct marketers unless the subject of that Personal Information has expressly given us permission to do so.

Business acquisition

We may transfer the Personal Information and other data that we collect to another entity in connection with a sale of our business or assets, or a merger or consolidation or restructuring of our business or company, or any other transaction in which a third party acquires ownership of any rights in the Service.

If we transfer any Personal Information or other data in such circumstances, we will ensure that such Personal Information or other data remain protected and that the recipient of that Personal Information or other data agrees to be bound by privacy practices and obligations that are consistent with our own under this Policy.

Disclosure of information to third parties

We will not use any Personal Information and other data that we collect from Users or Subscribers, or disclose that Personal Information and other data to third parties, except:

1. to the extent reasonably necessary to achieve any of the purposes described in this Privacy Policy; or
2. where we reasonably believe that such use or disclosure is required or expressly permitted under any applicable law.

Holding Personal Information

We will not hold the Personal Information and other data that we collect from Users or Subscribers for longer than is reasonably required for the purposes for which we may lawfully use that Personal Information or data.

Security

We will use all reasonable endeavours to effect and maintain adequate security measures to safeguard the Personal Information and other data we hold from loss or unauthorised access, use, modification or disclosure.  

Transfer of Information

We are a New Zealand-based company. However, we may transfer the information described in this Privacy Policy to or from other countries where necessary to enable us to operate the Service, and to supply any products or services ordered by Users and Subscribers. In particular, we may need to transfer information to third party service providers in different countries, such as cloud service or hosting providers, AI service providers or the providers of technical services.

If we transfer any Personal Information outside the country in which it was collected, we will ensure that we take such steps as are prescribed by applicable law before we transfer that Personal Information. In particular:

• if we transfer the Personal Information of any New Zealand-based person outside New Zealand, we will ensure that appropriate safeguards are in place with the recipient of that Personal Information, as prescribed by the Privacy Act 2020 (NZ), before we transfer that Personal Information;
• if we transfer the Personal Information of any Australia-based person outside Australia, we will take such steps as are prescribed by the Australian Privacy Principles in relation to that Personal Information; and
• in the case of Personal Information collected from European Union subjects, we will ensure that appropriate safeguards are in place as prescribed by the European Union’s General Data Protection Regulation (GDPR), before we transfer any Personal Information of any European Union subjects to any data processor based in any country that the European Commission has not recognised as providing adequate protection for the personal data of European Union subjects. Please note that the European Commission has recognised New Zealand as providing adequate protection for the personal data of European Union subjects.

Use of third-party websites

If a User accesses any third-party websites via a link from the Service, they will leave the Service. By accessing these links the User will not be covered by the policies relating to the Service. We are not responsible for the content of any such third-party websites, or their use of Personal Information or other data provided to them by Users.

The right to access, correct and delete Personal Information

Where we hold Personal Information about a person, they will have a right to access and correct that Personal Information in accordance with applicable laws.  

Additionally, the GDPR provides individuals within the European Union with enhanced rights in respect of their Personal Information, including rights of erasure, rights of restriction, rights of objection, a right to data portability and a right not to be subject to automated decision-making.

To make an access or correction request, or to exercise any other data rights, please contact our Privacy Officer (see below) and that person will tell you how to make a request and if any charges will apply. If you make a request or seek to exercise any of your other data rights, we may ask you to verify your identity.

EU subjects may complain to a supervisory authority

European Union subjects have the right to lodge a complaint about our Personal Information processing activities with a supervisory authority in the EU Member State where they are based or where the data processing activity took place.

Our Privacy Officer can help to identify who the relevant supervisory authority is.

Amendments to the Privacy Policy

We may change this Privacy Policy at any time, by changing or removing existing terms or adding new ones, or by replacing this Privacy Policy with a new one.

We will take reasonable steps to notify Subscribers and Users of any changes to this Privacy Policy. Any such changes will take effect immediately, unless we state otherwise.  

Any use of the Service by a User after any changes to our Privacy Policy will constitute that User’s acceptance of those changes.

Contact

For any queries or further information about our Privacy Policy, please contact our Privacy Officer via email at the address below.

support@getzipp.com

Who we are

For the purposes of the GDPR, Zipp Software Limited (Company No. 8976508) is both a controller and processor of data. Our registered office is located at 1016 Great South Road, Penrose, Auckland 1061, New Zealand.

‍