At Chippur we take your privacy extremely seriously.
We have a firm commitment to maintaining the privacy of all our users and customers.
In this policy, “Personal Information” means the same as it does in the Privacy Act 1993 (which is: information about an identifiable individual). Other terms that have capital letters in this Privacy Policy but aren't defined here carry the same meaning as in the Terms of Service.
A. Use of your information
Chippur does not sell or rent your Personal Information to third parties. Personal Information is information about an identifiable individual, as defined by the Privacy Act 1993.
Chippur does not provide Personal Information that you provide us to your employer without your express permissions (excluding situations under A.6).
This privacy policy applies to Personal Information we collect from visitors to our Website or Service, our customers and other person with whom we deal directly.
Chippur uses the information we collect to help us enforce or apply our terms and conditions, to protect the rights, property, or safety of Chippur, our users, or others, for internal research purposes, for promoting and marketing our services to you, and for any other use that you authorise.
Chippur uses information we hold about you to provide you with a more personalised experience, such as suggesting things you might like, and suggesting search terms to you based on your recent searches.
We release Personal Information only when we believe release is appropriate for legal compliance and law enforcement (including to government agencies with statutory law enforcement responsibilities); to facilitate court proceedings; enforce or apply our terms and conditions; or protect the rights, property, or safety of Chippur, our users, or others. Government agencies with statutory roles enabling them to request data from us include but are not restricted to the Police, Inland Revenue and the Ministry of Business, Innovation and Employment.
You can contact Chippur to ask whether your information has been provided, or with any other privacy-related question.
Where Chippur uses third parties to provide services, we may provide those third parties with some of your information if it is required to fulfil those services. For example, we use third parties to provide We also use third party software (such as customer relationship management, marketing automation and accounting software) that holds your information, sometimes overseas.
B. What personal information do we collect
Users of our SaaS service (Service) may collect Personal Information from individuals (e.g. their employees and customers) and upload, store or process that information in our Services (User Data).
When you register for, or login to, an account on our website or service, we collect your name and email address and any other information we require or ask for to set you up with an account.
When you update your user profile, we collect any information that you provide us.
We also collect the following sensitive or special categories of Personal Information: personal data revealing health and sex life (Sensitive Information). We collect Sensitive Information when you provide it to us.
When you fill in a contact or enquiry form on our website, call us, meet us in person or otherwise contact us, we collect your name, email address, and/or phone number and any other information you choose to provide to us.
We use a third party service provider to process credit card transactions and other payment information. We do not have access to your credit card information. The name of this third party provider will generally be displayed when you are requested to enter your credit card information. You can see further information about how they process your credit card information in their privacy policy.
When you access and use our website or related services we may automatically collect information about your device and usage of our website, products and services, including your operating system, browser type, time spent on certain pages of the website, pages visited, links clicked, and/or language preferences.
Some of this data is collected through third party tools and/or the use of cookies, web beacons and similar storage technologies. Please refer to our cookie policy below for further information, including information on how you can disable these technologies.
We do not intend to collect Personal Information from or about children aged under 16. If you have reason to believe that we have collected Personal Information from or about a child under the age of 16, please contact us at privacy@chippur.com.
C. GDPR
For the purposes of the GDPR and the UK GDPR, our customers are the data controller when storing or otherwise processing User Data that we hold solely for the purpose of providing our Service and we are the data processor.
We are the data controller when storing or otherwise processing User Data that we use for our own purposes.
We only process User Data as authorised by our customers in our agreements with our customers that govern the processing of User Data (as applicable).
Unless required otherwise under applicable law, if we receive any request or enquiry relating to User Data that we hold solely for the purpose of providing our SaaS service, we will forward this request to our relevant customer. If we receive any requests or enquiries relating to User Data that we use for our own purposes, we will deal with these requests or enquiries as set out in this privacy policy.
A business that supports our website, products and services may be located outside of New Zealand (the country where we are incorporated) and also outside of the country where you are located. This means that the Personal Information we collect may be transferred to, and stored in, a country outside of New Zealand and the country where you are located.
If you are located in the European Union (EU), your Personal Information may be transferred outside of the European Economic Area (EEA). Under the GDPR, the transfer of Personal Information to a country outside the EEA may take place where the European Commission has decided that the country ensures an adequate level of protection. In the absence of an adequacy decision, we may transfer Personal Information if other appropriate safeguards are in place.
If you are located in the United Kingdom (UK) your Personal Information may be transferred outside of the UK. Under the UK GDPR, the transfer of Personal Information to a country outside the UK may take place where the European Commission (as at 31 December 2020) or the UK government has decided that the country ensures an adequate level of protection. In the absence of an adequacy decision, we may transfer Personal Information if other appropriate safeguards are in place.
Where we transfer Personal Information outside the EEA or UK, it will only be transferred to countries that have been identified as providing adequate protection for EU/UK data, or to a third party where approved transfer mechanisms are in place to protect your Oersonal Information (e.g. by entering into the European Commission’s Standard Contractual Clauses). For further information, please contact at privacy@chippur.com.
Some of the Personal Information we collect is processed in New Zealand. New Zealand is recognised by the European Commission as a country that has an adequate level of data protection and we rely on this decision in transferring Personal Information to New Zealand.
Our lawful basis for processing (as that term is defined in the GDPR and UK GDPR) Personal Information that we collect, use and disclose depends on the Personal Information collected and the context in which we collect it. Generally, we collect Personal Information from you where we have your consent, where processing is necessary for the performance of a contract to which you are party or in order to take steps at your request prior to entering into a contract, or where processing is necessary for the purposes of our legitimate interests (except where such interests are overridden by your interests or fundamental rights and freedoms). Where we process Personal Information based on your consent, you may withdraw your consent at any time.
Our lawful basis for processing Sensitive Information is your consent. If you have any question about the legal basis on which we process Personal Information or need further information, please contact us at privacy@chippur.com.
If you are located in the European Union or the United Kingdom, your rights in relation to your Personal Information include: right of access, right to rectification, right to erasure, right to withdraw consent, right to restrict processing, right to object to processing, rights related to automated decision-making, including profiling, right to data portability, the right to complain to a supervisory authority
If you would like to exercise any of your rights, please contact us at privacy@chippur.com. If you are not satisfied by the way we deal with your query, you may refer your query to your local data protection authority.
D. Cookies and local storage
Chippur uses various technologies, including cookies and local storage, to collect and store information about you when you visit Chippur.
Cookies and local storage allow us to store information (including your Personal Information) in a file on the device you use to access Chippur. We use cookies and local storage to deliver information and fresh content specific to your interests and to improve the experience of using Chippur. Cookies and local storage are widely used.
Chippur uses "session" cookies to temporarily store information to help you use Chippur. This information is used to deliver the right content to you as you use Chippur. Session cookies expire immediately when you close your browser or are deleted after 30 minutes of no activity on Chippur.
Chippur also uses "persistent" cookies and local storage to personalise the user experience, to help protect our members and to provide us with research information (such as how often members visit Chippur each month). Persistent cookies allow us to track users on Chippur and helps us identify users abusing the Service.
E. Third party links
Chippur contains non-advertising links to a variety of third party sites to enhance the member experience. Chippur has no control of either the content or privacy policies of such sites, nor should such links be considered an endorsement of these sites except where otherwise noted.
F. Internet statistics and analytics
Chippur uses Google Analytics to better understand the behaviour of visitors to our Website or Service, and to improve our Website and Service. For more information, view Google Analytics' information on safeguarding your data.
Chippur uses Google Analytics Demographics and Interest reporting to give us insight into users behaviour, and to serve you with more relevant content. Information we collect through this reporting service is in aggregate form, and anonymous. You can opt out of Google Analytics Display Advertiser Features here.
G. Updates to our information practices
From time to time, we make changes to our information practices or alter the functionality of our Website or Service.
We update this statement from time to time, so we encourage you to periodically review this page for the latest information on privacy practices at Chippur.
If you have any questions about our privacy policies or any other matter, please contact us at privacy@chippur.com.
This policy was last updated on the 7th of November 2021