What we collect and what we do with it
This policy covers personal information collected through the public eSafety website. The eSafety App has its own privacy policy because it stores much more detailed company and workplace information
1. Who we are
eSafety NZ Limited is a New Zealand business based in Tauranga. We collect and handle personal information in accordance with the Privacy Act 2020
2. Information we collect through this website
- your name, business name, email address and phone number
- business address and delivery or billing information supplied with an order
- the H&S package, industry modules, risk selections and add-ons you choose
- company logos or files you voluntarily attach to an order
- messages and information submitted through the contact form
- payment method and transaction information needed to process or reconcile an order
- basic technical and security information generated when the website and its services are used
3. Why we collect it
We use personal information to answer enquiries, process and personalise orders, send confirmations and completed products, manage payments, provide support, protect the website and our systems, keep business and accounting records, and meet legal obligations
We do not sell personal information or customer order information to marketers or data brokers
4. Service providers
We use reputable service providers to run parts of the website and ordering process. These may include Google Firebase and Google Cloud for hosting and backend services, Google Maps or Places for address suggestions, SendGrid for transactional email, and Stripe for card payments
Those providers may process the information needed to provide their service, including outside New Zealand. We take reasonable steps to use providers and arrangements that protect personal information appropriately
When you pay by card, card details are handled by Stripe. eSafety does not need to receive or store your full card number
5. Storage, security and retention
We take reasonable technical and organisational steps to protect personal information against loss, unauthorised access, misuse, alteration or disclosure
Information is kept only for as long as reasonably needed for the purpose it was collected, including order fulfilment, support, accounting, legal, fraud-prevention and security requirements. Some information may remain for a period in email systems, backups or business records after the original transaction is complete
6. Access and correction
You can ask to see personal information eSafety holds about you and ask for it to be corrected if it is wrong. Use the contact form or phone us and tell us what information you are asking about
7. Information about other people
If you provide personal information about another person, you should have authority to do so and make sure the person is told about the collection where required. This is particularly important when providing employee, contractor or other third-party information
8. Privacy breaches
If a privacy breach occurs that is likely to cause serious harm, eSafety will assess and notify the Office of the Privacy Commissioner and affected people where the Privacy Act requires it
9. Advertising and tracking
We do not sell your browsing or order information for advertising. We do not currently use third-party advertising tracking on the public website. Necessary technical services may still process standard connection, security or diagnostic information
