Privacy policy

Convertics Limited (Convertics, we, our, or us) is committed to respecting your privacy and managing your personal information in accordance with the New Zealand Privacy Act 2020 (the Act) and any other applicable privacy and data protection laws.

This privacy policy sets out how we collect, use, store, share and protect your personal information when we process data as part of our Services (or when you otherwise interact with us). Please read this privacy policy alongside our Terms of Service as the defined terms all share the same meaning.

This privacy policy only applies to personal information collected by us from (a) visitors to our websites and (b) clients that use our Services (Clients). While providing our services to our Clients, we may receive Client Data that includes personal information related to our Clients’ users and other third parties (as further defined in the Terms of Service).

We only process any personal information including Client Data on our Client’s behalf and strictly in accordance with the instructions received from our Clients for as long as needed to provide our Services. Please note that in relation to the processing of this personal information, the Client is the data controller and we are the data processor. Our use of such personal information on behalf of our Clients is governed by our contract with the Client and the Client’s own privacy policy.

This policy was last updated on 22 March 2022.

1. What is your personal information?

When we say “personal information”, we mean any information about an identifiable individual and includes personal data, personally identifiable information and equivalent information under applicable privacy and data protection laws, such as your name, email address, phone number, payment details, and metadata and cookies information that can be used to identify and individual.

2. Personal information we collect

When you visit our website or use our Services, we collect personal information. Personal information may be collected from you directly, automatically or from third parties. We also collect Client Data on your behalf in order to deliver our Services to you.

● Information you provide to us directly, including:

o your contact details, such as your representative’s name and email address;

o your payment/billing information;

o your communication with us via social media, web form, text, phone or email; and

o any personal information you voluntarily provide us during interacting with us.

To use certain aspects of our Services, we may require your credit or debit card account information. By submitting your credit or debit card details on our website, you agree that your payment details are sent directly to our third-party payment service provider (Stripe). The third-party may store your credit or debit card account information. Please read Stripe’s Terms and Conditions if you want to know how Stripe protects your credit or debit card information.

● Information we collect automatically, including:

o IP addresses and device type;

o information when you navigate through our websites and services;

o information about your browser and network; and

o your use of the website.

The above information is collected using cookies and similar web-tracking systems, such as our Services. If you want to know more about the types of cookies and web-tracking systems we use and how you can control them, please read Section 7 of this policy.

● Information we get from third parties, including:

o invoice and payment history from our payment service providers;

o analytics information from our analytics providers; and

o information pulled from third party databases and integrations that you authorize.

3. How we use your personal information

Where we collect personal information to provide you with the Services that you have registered for, requested, or otherwise accessed. The purposes for which we use your personal information may differ based on the services we provide and the type of communication between us. The main purposes for using personal information include:

● verify your identity;

● provide our Services to you;

● market our Services and products relating to these Services, including sending you newsletters and up to date information on changes via text, email or other electronic means (from which you can opt out at any time);

● verify and carry out financial transactions in relation to payments you make with us, and collect payment from you;

● assess and analyze the effectiveness and your use of our Services and other similar purposes;

● maintain and improve Services that we provide to you, including by training and improving any artificial intelligence features;

● creating aggregated and anonymized data that does not identify you nor any other individual for the purposes of research and product development;

● notify you about changes to our services or terms;

● for internal record keeping purposes;

● communicating with you, including responding to a support request or a complaint;

● ensure our compliance with applicable laws and regulations;

● ensure your compliance with our terms; and

● any other use that is authorized by you or relevant privacy laws.

By using or asking us to provide you with our Services, you consent to your personal information being collected, held and used in this way and for any other use you authorize. We will only use your personal information in the ways outlined in this privacy policy or otherwise if we have your express permission.

If you choose not to provide personal information that we request in connection with our Services, we may not be able to provide some or all of our Services to you. For example, you may not be able to access

certain features on our Platform or we may be unable to provide you with information about our Services that you may want.

4. How we hold your personal information

We are committed to keeping your personal information as safe and secure as possible. We use reasonable care including physical, electronic, and procedural safeguards to protect your personal information.

All information we collect and hold is stored through our service providers. Personal information collected on our website is stored securely on the servers of the service providers. They store your information on secure databases and protect it through a variety of industry-standard access controls such as encryption, firewalls, disk-based encryption. The service providers will only process your personal information to the extent necessary to fulfill its performance obligations and to follow our instructions with respect to such information.

We usually only keep your personal information for as long as it is required in connection with its original purpose or to allow us to comply with legal and reporting obligations.

We take reasonable measures to protect our websites and Services from computer viruses, worms, Trojan horses or other threats. However, please note that no website, internet transmission, computer system or wireless connection is completely secure, and we disclaim any responsibility for or liability related to loss due to harmful programs received from the website or by means of files downloaded from our websites or Services.

If we believe there has been a privacy breach, we will promptly identify the issues and take steps to minimize any harm. We will notify you and any applicable regulator of an actual or suspected data security breach where we are legally required to do so.

5. Transferring or sharing your personal information

We may disclose your personal information to our related companies or other third parties under the following circumstances or as otherwise described in this privacy policy.

● With third party service providers, contractors and agents

We may share your personal information with those who assist and enable us to use the personal information. This is mainly to deliver, market, improve and promote our Services for the purposes specified in this privacy policy. These service providers may access your personal information and are obligated to use information that we share only for purposes related to our Services.

● For security and legal compliance

Your personal information may be shared with the regulators, law enforcement bodies, government agencies courts or other third parties where we think it is necessary to comply with applicable laws or regulations, or to protect and defend our legal rights. Where possible and appropriate, we will notify you of this type of disclosure.

● During a change in ownership

In the event of a change of ownership of Convertics Limited or the website, your personal information may be transferred to the new owner(s) so that our Services can continue operations.

● With your permission

We may share data with third parties outside the scope of this privacy policy with your consent.

Some of these recipients may be located in overseas countries, which may have privacy or data protection rules different to New Zealand. For example, Bubble.io's servers are located in Oregon, the United States of America. Where we transfer personal information abroad, we will ensure we take appropriate measures to comply with applicable privacy laws related to such transfer in line of our obligations. If personal information is being transferred outside of New Zealand, we will take such steps as are reasonable in the circumstances to ensure that the recipients are subject to privacy laws that provide comparable protection to those under the privacy laws of New Zealand.

6. Your rights

You must ensure that the personal information that you provide to us is accurate, complete and up-to-date. Unless there are certain legal grounds for refusing, you may request access to your personal information we have that is readily available or ask us to update or correct your personal information.

We will process your request as soon as reasonably practicable, or we will explain why if we are unable to do so under legal grounds. If appropriate, we may charge you our reasonable costs of providing and/or correcting your personal information. However, we will not charge you for simply making a request.

If you want to exercise your rights above, please contact us using the details provided below in section 10 of this policy. We may require some proof of identity before we provide you with access to or correct your personal information. If you wish to complain about any outcome or to attach a statement of correction to your record, please see our complaints procedure below in section 8.

7. Cookies or other Tracking and Analytics Tools

Our website uses cookies and similar technologies, which are small amounts of data, which often includes an anonymous unique identifier that is sent to your browser and stored on your device. We may use commonly used tools such as cookies, web beacons, tracking scripts, pixels, and similar technologies, identifiers for mobile devices, to collect information about you to provide the experiences you request, administer our Services, track your interactions, and analyse trends. If you reject all cookies, you can still access our website, but you may not be able to take full advantage of all other offerings. You can configure your browser to accept all cookies, reject all cookies or notify you when a cookie is set.

We also use Google Analytics, Google Ads and Facebook Ads, which are analytics service providers. By enabling this tool, we enable the collection of data about your use of our Services, via unique device identifiers for mobile devices, and other technologies similar to cookies. On our behalf, the analytics service providers evaluate the information the way you use our Services, as this data is important for us to maintain and further improve the stability and security of our Services. The type of information collected through these tools may include: device information; IP address; page visit history; unique device identifiers and data related to your usage.

You may opt out of certain features of these tools through your device settings, such as your device advertising settings or by following the instructions provided by the service providers:

● Google: Google’s Privacy Policy. We also encourage you to review the Google policy for safeguarding your data, how Google uses data when you use our Services and how to control your data used to show ads.

● Facebook Ads: Facebook’s Privacy Policy for products and features offered by Meta Platforms, Inc. You can find additional tools and information in the Facebook settings on how to manage your data.

8. Complaints

You may request further information about the way we manage your personal information or lodge a complaint by contacting us using the contact details below in section 10.

If you would like any further information about our handling of personal information or to make a complaint about something you believe breaches the privacy laws, please lodge a written complaint using the email address below. Once we receive your complaint, we will respond to your complaint within a reasonable period of time, usually within 20 working days.

While we always try to work with you to solve your issue, if you consider your privacy concerns have not been resolved satisfactorily by us, or you wish to obtain more information on privacy requirements, you can contact New Zealand Privacy Commissioner on 0800 803 909 or visit their website.

9. Amendments

We may update this policy to reflect changes to how we manage your information at any time. When we update this policy, we will revise the “Last updated” date at the top of the policy. If the changes are significant, we may also notify you on our website, application or via email before the changes become effective.

10. Contacting us

If you have any questions about this privacy policy, any concerns or a complaint regarding how your personal information has been collected or handled by us, or a possible breach of your privacy, please contact us at info@convertics.io