Catalist Market Limited (we, us, our) complies with the New Zealand Privacy Act 2020 (the Act) when dealing with personal information. Personal information is information about an identifiable individual (a natural person).
This policy sets out how we will collect, use, disclose and protect your personal information. It applies to your use of our website and any other interaction you have with us.
This policy does not limit or exclude any of your rights under the Act. If you wish to seek further information on the Act, see www.privacy.org.nz.
We collect personal information about you from:
If possible, we will collect personal information from you directly.
We will use your personal information:
In order to provide our services to you, or to use your personal information as described above, we may disclose your personal information to:
A business we use to support delivery of our services and products may be located outside New Zealand (for example we use secure servers based in Australia to ensure we can provide you with a resilient service). This may mean your personal information is held and processed outside New Zealand.
We use third party identity verification services to help us verify your identity based on the personal information you provide. By providing your personal information in our identity verification form, you confirm that you authorise Catalist to provide those personal details, and consent to your information being checked with the document issuer or official record holder, via those third-party systems for the purpose of confirming your identity.
Data that may be collected includes:
We will take reasonable steps to keep your personal information safe from loss, unauthorised activity, or other misuse.
Subject to certain grounds for refusal set out in the Act, you have the right to access your readily retrievable personal information that we hold and to request a correction to your personal information. Before you exercise this right, we will need evidence to confirm that you are the individual to whom the personal information relates.
In respect of a request for correction, if we think the correction is reasonable and we are reasonably able to change the personal information, we will make the correction. If we do not make the correction, we will take reasonable steps to note on the personal information that you requested the correction.
If you want to exercise either of the above rights, email us at firstname.lastname@example.org. Your email should provide evidence of who you are and set out the details of your request (e.g. the personal information, or the correction, that you are requesting).
We may charge you our reasonable costs of providing to you copies of your personal information or correcting that information.
While we take reasonable steps to maintain secure internet connections, if you provide us with personal information over the internet, the provision of that information is at your own risk.