Introduction
Uzabus complies with the New Zealand Privacy Act 2020 (the Act) when dealing with personal information. Personal information refers to details about an identifiable individual (a natural person). This policy does not limit or exclude any of your rights under the Act. If you wish to seek further information on the Act, see www.privacy.org.nz.
Privacy Officer
Uzabus has appointed a Privacy Officer responsible for overseeing privacy matters and ensuring compliance with the Privacy Act 2020. The Privacy Officer is the Contracts Manager or Managing Director, who can be contacted at support@uzabus.co.nz or 0800 892287. The Privacy Officer’s responsibilities include responding to privacy-related inquiries, managing data breaches, and ensuring that Uzabus’s privacy practices remain up to date.
Who do we collect your personal information from?
We collect personal information about you from:
- You, when you provide that personal information to us via the website and any related service, through any registration process OR through any contact with us (e.g. telephone call or email).
- Third parties where you have authorised this or the information is publicly available.
If possible, we will collect personal information from you directly.
How we use your personal information
Uzabus will only collect personal information necessary for functions, activities or services provided to you, which aligns with the principle of data minimisation under the Privacy Act 2020.
We will use your personal information
- to verify your identity
- to provide services and products to you
- to market our services and products to you, including contacting you electronically (e.g. by text or email for this purpose)
- to improve the services that we provide to you
- to undertake pre-employment checks of you
- to bill you and to collect money that you owe us, including authorising and processing credit card transactions
- to respond to communications from you, including a complaint
- to protect and/or enforce our legal rights and interests, including defending any claim
- for any other purpose authorised by you or the Act.
Use of Personal Information for Contract-Related Services
Personal information collected or received as part of a contracted service will be used solely for the delivery of services related to this contract, and for no other purpose unless required or permitted by law, or with your explicit consent. Uzabus enforces this through internal policies, staff training, and regular audits to ensure compliance. Any use of personal information for purposes unrelated to the contract is strictly prohibited.
Disclosing your personal information:
Some personal information may be transferred and held outside of New Zealand (e.g., cloud storage services). Uzabus will ensure that any international recipients of personal data adhere to comparable privacy standards as required by the Privacy Act 2020, or we will obtain your consent for the transfer.
We may disclose your personal information to:
- another entity within our group
- any business that supports our services and products, including any person that hosts or maintains any underlying IT system or data centre that we use to provide the website or other services and products
- a credit reference agency for the purpose of credit checking you
- Police, TORO or other parties in the nature of pre-employment checks
- a person who can require us to supply your personal information (e.g. a regulatory authority)
- any other person authorised by the Act or another law (e.g. a law enforcement agency)
- any other person authorised by you.
A business that supports our services and products may be located outside New Zealand. This may mean your personal information is held and processed outside New Zealand, for example, cloud storage
In compliance with the Privacy Act 2020, Uzabus will notify affected individuals and the Privacy Commissioner if a privacy breach occurs that poses a risk of serious harm. We will take all necessary steps to manage and mitigate the impact of any such breach.
Storage and Protection of Personal Information
Uzabus stores personal information in secure electronic systems and, where necessary, in physical files. Access to personal information is restricted to authorised personnel only, based on their role and the necessity to perform their duties. We use a combination of physical, technical, and administrative safeguards to protect personal information from loss, unauthorised access, use, modification, or disclosure. These measures include password-protected systems, regular security reviews, staff training, and secure physical storage for paper records.
Retention of Personal Information
Uzabus retains personal information only for as long as it is required to fulfil the purposes for which it was collected, or as required by law (such as for tax or employment records). Once personal information is no longer needed, it will be securely destroyed or anonymised in accordance with our data retention and destruction policy. If you require more information about specific retention periods, please contact our Privacy Officer.
Destruction or Return of Personal Information
When personal information is no longer required, Uzabus will securely destroy it by permanently deleting electronic records and shredding or otherwise securely disposing of physical documents. If personal information is held on behalf of a client or partner, Uzabus will return or destroy the information as instructed, using secure methods to ensure that it cannot be reconstructed or retrieved.
Accessing and correcting your personal information
You have the right to access and request corrections to any personal information Uzabus holds about you. Uzabus will respond to these requests within a reasonable timeframe and make any reasonable corrections. If Uzabus declines a correction request, we will take steps to record the request alongside the existing information.
You have the right to ask for a copy of any personal information we hold about you, and to ask for it to be corrected if you think it is wrong. If you’d like to ask for a copy of your information or to have it corrected, please contact the Privacy Officer at support@uzabus.co.nz, 0800 892287, or P.O Box 3073, Greerton, Tauranga 3142.
Your email should provide evidence of who you are and set out the details of your request (e.g. the personal information, or the correction, that you are requesting). We may charge you our reasonable costs of providing you copies of your personal information or correcting that information.
Internet use
While we take reasonable steps to maintain secure Internet connections, if you provide us with personal information over the Internet, the provision of that information is at your own risk.
- If you post your personal information on the website’s [message board/ chat room], you acknowledge and agree that the information you post is publicly available.
- If you follow a link on our website to another site, the owner of that site will have its own privacy policy relating to your personal information. We suggest you review that site’s privacy policy before you provide personal information
- We use cookies (an alphanumeric identifier that we transfer to your computer’s hard drive so that we can recognise your browser) to monitor your use of the website. You may disable cookies by changing the settings on your browser, although this may mean that you cannot use all of the features of the website.
