1. Your contact

The organisation responsible for Datastrophe’s processing and its contact details are identified in the legal notice. Send questions or privacy requests through the contact page. A partner offering its own services is responsible for its own processing and provides its own privacy information.

2. Information concerned

We receive the details you provide in forms and correspondence: name, contact details, country, device and problem description, and information needed for follow-up. Required fields are marked; without necessary details we may be unable to respond or arrange a referral. Technical information can include connection identifiers, browser information, the referring page and form events. Do not send passwords, encryption keys, personal files or unnecessary sensitive information with an initial enquiry.

3. Purposes

Information is used to answer and follow up your request, organise the requested referral, prevent abuse, protect the service and meet legal obligations. The intended recipient and disclosure are explained before a referral; any necessary specific consent must be obtained. Sending an enquiry is not general permission for marketing. Consent-based uses remain optional and consent may be withdrawn for the future.

4. Recipients and permitted uses

The information collected is not sold to third parties. It will never be used to create or enrich prospecting databases, including partners’ marketing databases. It is not used for advertising targeting on behalf of third parties. Any advertising targeting is solely for Datastrophe and remains subject to applicable consent and objection requirements; this does not authorise the creation of prospecting databases.

Information is hosted on infrastructure managed for the service and accessible to authorised personnel for handling requests. An independent partner receives only what is necessary for the explained introduction. The partner does not pay for this disclosure. Information may also be disclosed where required by law. Datastrophe remains responsible for the lawfulness and security of its own processing.

5. Retention and security

Referral enquiry information is kept for six months from receipt and then deleted. Only information necessary for a legal obligation or dispute may be isolated and retained with restricted access for the justified period. Technical media and recovered-file time limits in the terms do not automatically apply to contact details, messages or technical logs. Appropriate access controls, protected exchanges and deletion measures are required; no system guarantees zero risk. Incidents and legally required notifications must be handled appropriately.

6. Hosting and international transfers

Enquiry information for this market is stored on servers in New Zealand.

Storage location alone does not determine where authorised people or partners access information. Any international disclosure or access must meet the applicable safeguards and information requirements. The countries, recipients and safeguards for actual transfers must be explained; you may ask how to obtain the relevant information through the contact page. Submitting a form is not blanket permission to transfer information anywhere.

7. Browsing and tracking

Technical information may be used for operation, security or audience measurement. Non-essential tracking requiring prior consent must wait for that consent; refusal or withdrawal must remain possible. Advertising, if used, is limited to Datastrophe and does not authorise third-party targeting or prospecting databases. Information about tools, recipients, purposes and retention must match the actual configuration.

8. Your rights

Use the contact page to request access or correction or exercise other applicable rights. Identity checks must be proportionate, not automatic. Requests and complaints are handled within the applicable legal time limits; lawful extensions and reasons must be communicated. Requests about a partner’s independent processing may also be sent directly to that partner.

Where the Privacy Act 2020 applies, you may request access or correction and complain to the Privacy Commissioner. Access and correction decisions are generally communicated within 20 working days, subject to lawful extensions. If correction is refused, you may request that a statement of the correction sought be attached. Overseas disclosure must meet principle 12; any reliance on an informed authorisation without comparable safeguards requires the specific warning and authorisation, not merely acceptance of this policy. For information collected indirectly, the applicable notification duties under principle 3A must also be met, subject to its exceptions.

You may contact the competent authority, including Office of the Privacy Commissioner of New Zealand, subject to the applicable complaint procedure.

Related legal pages

Terms and conditions

Legal notice

Copyright