Privacy policy

Last updated 19.07.2022

INTRODUCTION

Tatou Technologies Limited (we, us, our) complies with the New Zealand Privacy Act 2020 (the Act) when dealing with personal information. Personal information is information about an identifiable individual (a natural person).

This policy sets out how we will collect, store, use, disclose and protect your personal information.

If you choose to use our app and related services (Tatou), then you agree to the collection and use of information in relation to this policy. The personal information that we collect is used for providing and improving Tatou. We will not use or share your information with anyone except as described in this policy. 

This policy does not limit or exclude any of your rights under the Act.  If you wish to seek further information on the Act, see www.privacy.org.nz.

CHANGES TO THIS POLICY

We may change this policy by uploading a revised policy onto the website.  The change will apply from the date that we upload the revised policy.

This policy was last updated on 19th of July, 2022.

APPLICATION OF THIS POLICY

We collect, hold and process two categories of personal information:

Account and Marketing Data is personal information we collect about individuals:

  • who contact us directly (e.g. telephone call, website enquiry form or email) or visit our marketing website

·       who ask to receive information about us or Tatou or sign up to our newsletter

  • in connection with the creation or administration of a customer or user account

The Account and Marketing Data we collect may include company/personal names, usernames, phone numbers, email addresses, your location, billing information, information about how you use our website or our services (for example, traffic volumes, time spent on pages), your IP address and/or other device identifying data, and other information required to provide a service or information you have requested from us.

User Data is personal information that our customers collect and store using, or input into Tatou.  This may include personal information about individuals who are employed by, or contracted to, our customer, for example, their name, address, date of birth, right to work and proof of identity.

We are acting as our customers’ agent when storing or otherwise processing User Data.  Our customers determine what and how they collect, use, disclose and transfer User Data.  This means that our customers’ collection and use of User Data is governed by their privacy policy and practices, not ours.

We do not use personally identifiable User Data for our own business purposes. 

We will not process User Data except as provided in our Terms of Use and we require our customers to comply with applicable privacy and data protection laws.

The remainder of this privacy policy sets out how we will collect, use, disclose and protect Account and Marketing Data and does not apply to User Data.

HOW DO WE COLLECT PERSONAL INFORMATION

Directly from you

We collect the following information directly from you:

  • when you fill in a contact or enquiry form on our website, call us, meet us in person or otherwise contact us, your name, email address, phone number and any other information you choose to provide to us

  • when you sign up to our newsletter and other electronic alerts relating to Tatou, your name, email address and any other information you provide to us when you ask to receive our newsletter or other alerts

  • when you register for, or login to, an account on Tatou, your name, email address and any other information we require or ask for to set you up with an account or that you submit to us for billing or payment purposes.  See below for further details of the information collected.

Some personal information that we collect directly from you may be mandatory and some may be optional.  We will let you know which of these applies at the time we collect the relevant personal information.  While you do not have to provide us with some information we may request, this might mean that Tatou may not perform as well as it should, or that we may not be able to provide some parts of Tatou to you.  If you require further information about the consequences of not providing us with any information, please contact us at hello@tatou.app.

Automatically when you use Tatou

When you access and use Tatou we may automatically collect information about your device and usage of Tatou, including your IP address, operating system, browser type, time spent on certain pages of the website or app, pages visited and links clicked.

Some of this data is collected through third party tools and/or the use of cookies, web beacons and similar storage technologies.  Please refer to the Cookies section below for further information, including information on how you can disable these technologies.

HOW WE USE YOUR PERSONAL INFORMATION

We collect and use your personal information: 

  • to identify you when you sign in to your account and to verify your account is not being used by someone else

  • to provide Tatou to you

  • to market our services and products to you, including contacting you electronically (e.g. by text or email for this purpose)

  • to improve Tatou

  • if you are our customer, to invoice you and to collect money that you owe us, including authorising and processing credit card transactions

  • to respond to communications from you, including a complaint

  • to conduct research and statistical analysis (on an anonymised basis)

  • to protect and/or enforce our legal rights and interests, including defending any claim

  • for any other purpose authorised by you or the Act.

You can, at any time, amend, correct or remove information on your profile by signing into your account and editing your profile. 

DISCLOSURE

We may disclose personal information to:

  • another company within our group

  • any business that supports our services and products, including any person that hosts or maintains any underlying IT system or data centre that we use to provide Tatou, the website or other services and products

  • other third parties (for anonymised statistical information)

  • a person who can require us to supply personal information (e.g. a regulatory authority)

  • any other person authorised by the Act or another law (e.g. a law enforcement agency)

  • any other person authorised by the individual concerned.

A business that supports our services and products may be located outside New Zealand.  This may mean personal information is held and processed outside New Zealand.  These businesses store and/or process personal information as our agent for the purposes of the Act, and do not use or store that personal information for their own purposes.

We may transfer personal information in the case of a sale, merger, consolidation, liquidation, reorganisation or acquisition.

PROTECTING YOUR PERSONAL INFORMATION

We will take reasonable steps to keep your personal information safe from loss, unauthorised activity (including unauthorised access, use, modification and disclosure), or other misuse.  We implement appropriate technical and organisational measures to ensure a level of security appropriate to risks inherent in processing personal information.

If you are a user of Tatou, you can play an important role in keeping personal information secure by maintaining the confidentiality of any password and accounts used in relation to Tatou.  Please do not disclose your password to third parties.  Please notify us immediately if there is any unauthorised use of your account or any other breach of security.

ACCESSING AND CORRECTING YOUR PERSONAL INFORMATION

Subject to certain grounds for refusal set out in the Act, you have the right to access your readily retrievable personal information that we hold and to request a correction to your personal information.  Before you exercise this right, we will need evidence to confirm that you are the individual to whom the personal information relates.

In respect of a request for correction, if we think the correction is reasonable and we are reasonably able to change the personal information, we will make the correction.  If we do not make the correction, we will take reasonable steps to note on the personal information that you requested the correction.

If you want to exercise either of the above rights, email us at hello@tatou.app. Your email should provide evidence of who you are and set out the details of your request (e.g. the personal information, or the correction, that you are requesting).

We may charge you our reasonable costs of providing to you copies of your personal information or correcting that information.

If we receive any requests to access or correct personal information that is User Data, we will forward this request to the relevant customer, unless we are prohibited to do so by law.

INTERNET USE

While we take reasonable steps to maintain secure internet connections, if you provide us with personal information over the internet, the provision of that information is at your own risk.

If you follow a link on our website to another site, the owner of that site will have its own privacy policy relating to your personal information. We suggest you review that site’s privacy policy before you provide personal information.

COOKIES

We use cookies (an alphanumeric identifier that we transfer to your computer’s hard drive so that we can recognise your browser) to monitor your use of the website. You may disable cookies by changing the settings on your browser, although this may mean that you cannot use all of the features of the website.

DATA RETENTION POLICY

The personal information that we collect and use will not be kept longer than necessary for the purposes for which it is collected, or for the duration required for compliance with applicable law, whichever is longer.

CONTACTING US

If you have any questions about this privacy policy, our privacy practices, or if you would like to request access to, or correction of, your personal information, you can contact us at hello@tatou.app.

If you are not satisfied by the way your query is dealt with, you have the right to make a complaint to the Privacy Commissioner.