Privacy Policy

OperatorHub Limited ("OperatorHub", "we", "us" and "our") takes data protection and privacy responsibilities seriously. We comply with the New Zealand Privacy Act 2020 (the Act) when dealing with personal information. Personal information is information about an identifiable individual. This policy sets out how we will collect, use, disclose and protect your personal information. This policy does not limit or exclude any of your rights under the Act. If you wish to seek further information on the Act, see www.privacy.org.nz.

We generally store and process information about and on behalf of our clients on our servers as a processor (or service provider) based on a client’s instructions and in accordance with the terms of our service agreements with such client. As such, this Privacy Policy also does not apply to personal information collection activities by our clients or on their behalf (Client Data). This Privacy Policy does not describe the processing of Client Data, and we invite you to visit the applicable client’s privacy policy for information about their privacy practices. Each client controls and is responsible for the information they process using our services and for complying with any regulations or laws that require providing notice, disclosure, and/or obtaining consent prior to transferring the Client Data to us for processing purposes. We are not responsible for how our clients treat your personal information, and we recommend you review their own privacy policies. Any questions you have relating to such information and your rights under privacy law should be directed to the client, as the controller of that information, and not to OperatorHub.

Updates

We may amend this Privacy Policy from time to time to keep it up to date with legal requirements and the way we operate our business, and we will place any updates on this website. The change will apply from the date that we upload the revised Privacy Policy. This Privacy Policy was last updated on the date set out at the end of this Privacy Policy. If we make fundamental changes to this Privacy Policy, we will seek to inform you by notice on our website or email.

How we collect personal information

We collect information about you if you register with or use our website, services or products, work with us as a business partner, register or attend an event organised or hosted by us, subscribe to our newsletter or other forms of marketing communications, respond to a survey or fill out a form created or sent by us, or if you otherwise contact us (together, Services). We may also collect personal information from third parties, such as your employer, public databases or social media networks. If possible, we will collect personal information from you directly.

We may also collect anonymous data (which is not personal information) relating to your activity on our websites (including IP addresses) via cookies, or we may collect information from you in response to surveys. We generally use this information to report statistics, analyse trends, administer our Services, diagnose problems and target and improve the quality of our Services. To the extent this information constitutes personal information we treat it in accordance with our obligations under this Privacy Policy.

How we use personal information

We will use your personal information:

to verify your identity;
to operate, monitor, maintain and provide our Service to you;
to market our Services, including contacting you electronically (e.g. by text or email for this purpose);
to develop improve the Services that we provide (e.g. troubleshooting or should you require any assistance in relation to any issues with our Services or to deliver a more personalised experience);
to undertake credit checks of you (if necessary)
to bill you and to collect money that you owe us, including authorising and processing credit card transactions;
to communicate with you, including sending Service-related communications, technical notices, security alerts, changes in our Services or policies, marketing communications in accordance with your preferences and responding to any complaints;
to conduct research and statistical analysis (on an anonymised basis);
to protect and/or enforce our legal rights and interests, including defending any claim;
to prevent and address security threats, fraud or breach of our terms; and
for any other purpose authorised by you or the Act.

Notwithstanding the above, we may use information that does not identify you (including information that has been aggregated or de-identified) for any purpose except as prohibited by applicable law.

How we share personal information

We may disclose your personal information to:

any business that supports our Services, including any person that hosts or maintains any underlying IT system or data centre that we use to provide our website or other services;
with other companies within our group, where such disclosure is necessary to provide you with our Services or to manage our business;
our trusted third parties and service providers for business and commercial purposes, including (without limitation) print service providers, call centres and mail houses, advisors, advertising agencies, accountants, auditors and lawyers for data processing, analysis, back-up and storage, information broking, research, investigation, website application development and technology services, infrastructure, customer support, business analytics, and other related services;
other third parties (for anonymised statistical information – e.g. information regarding the visitors to our website, traffic patterns, and website usage with our affiliates or advertisers);
a person who can require us to supply your personal information (e.g. a regulatory authority);
any other person authorised by the Act or another law (e.g. a law enforcement agency); and
any other person authorised by you.

A business that supports our Services and products may be located outside New Zealand. This may mean your personal information is held and processed outside New Zealand.

We may transfer your personal information in the case of a sale, merger, consolidation, liquidation, reorganisation or acquisition of our business.

How we protect personal information

We will take reasonable steps to keep your personal information safe from loss, unauthorised activity, or other misuse. We have implemented and continue to maintain appropriate technical and organisational security measures, policies and procedures designed to reduce the risk of accidental destruction or loss, or the unauthorised disclosure or access to such information appropriate to the nature of the information concerned. As the security of information depends in part on the security of the computer you use to communicate with us and the security you use to protect User IDs and passwords, please take appropriate measures to protect this information. Nevertheless, transmission of information via the internet is not completely secure and we cannot guarantee the security of information.

How long we keep information we collect about you depends on the type of information and how we collect and store it. After a reasonable period of time, we will either delete or anonymize your information or, if this is not possible, then we will securely store your information and isolate it from any further use until deletion is possible. In specific circumstances we may store your personal information for longer periods of time so that we have an accurate record of your dealings with us in the event of any complaints, if we reasonably believe there is a prospect of a dispute relating to your personal information or dealings or in accordance with other legal, regulatory, tax, accounting requirements.

Accessing and correcting personal information

Under the Act, you have the right to access your readily retrievable personal information that we hold and to request a correction to your personal information. Before you exercise this right, we will need evidence to confirm that you are the individual to whom the personal information relates. In respect of a request for correction, if we think the correction is reasonable and we are reasonably able to change the personal information, we will make the correction. If we do not make the correction, we will take reasonable steps to note on the personal information that you requested the correction. We note, the above is subject to certain exemptions, certain grounds for refusal as set out in the Act, and in some cases dependent upon the processing activity we are undertaking and where your personal information originates from.

Requests can be submitted to dataprotection@operatorhub.tech. Your email should provide evidence of who you are and set out the details of your request (e.g. the personal information, or the correction, that you are requesting). We will respond within 20 working days as required by the Act. We may charge you our reasonable costs of providing to you copies of your personal information or correcting that information.

Cookies

A cookie is a small text file containing small amounts of information which is downloaded to / stored on your computer (or other internet enabled devices, such as a smartphone or tablet) when you visit a website. Cookies may collect personal information about you. Cookies and similar technologies may include:

Functional Cookies: for essential website functions and operations.
Analytical Cookies: for tracking website usage and improving user experience (making it easier for next time you visit).
Targeting Cookies: for tailoring advertising based on browsing history.

Cookies help us remember information about your visit to our website, like your country, language and other settings. Cookies allow us to understand who has seen which webpages and advertisements, to determine how frequently particular pages are visited and to determine the most popular areas of our website. Individuals may adjust cookie preferences via browser settings. You do not have to accept cookies and you can set up your browser to notify you when you receive cookies. This will give you the opportunity to decide whether or not to accept the cookies. If you choose to disable cookies, you may not be able to access certain features of the website.

Internet Use

While we take reasonable steps to maintain secure internet connections, if you provide us with personal information over the internet, the provision of that information is at your own risk. If you follow a link on our website to another site, the owner of that site will have its own privacy policy relating to your personal information. We suggest you review that site’s privacy policy before you provide personal information.

If you have any questions regarding this Privacy Policy, the information we hold about you or if you wish to exercise your rights, we encourage you to first contact us. You can contact us at dataprotection@operatorhub.tech.

We will investigate and attempt to resolve complaints and disputes and make every reasonable effort to honour your wish to exercise your rights as quickly as possible and, in any event, within the timeframes provided by applicable privacy laws.

Issue date of this Privacy Policy: November 2025.