CyberGrape is a leading New Zealand Cybersecurity firm based in Taranaki, servicing clients all over the world. This policy outlines the way in which we manage the personal information we hold about our clients, potential clients, contractors and others. We, us, our and CyberGrape, are defined at the end of this policy.
CyberGrape is bound by the Privacy Act 2020 (Privacy Act).
In summary, ‘personal information’ is information about an identifiable individual.
Why does CyberGrape collect personal information?
We collect personal information in order to conduct our business, to provide and market our services and to meet our legal obligations.
Who does CyberGrape collect personal information about?
We collect and hold personal information about (but not limited to):
- clients, business associates and potential clients and their employees, contractors, owners and directors;
- individuals we deal with in the course of acting for clients and carrying on our business;
- suppliers and their employees and contractors;
- prospective employees, employees and contractors; and
- other people who come into contact with CyberGrape.
What kinds of personal information does CyberGrape collect?
In general, and depending upon the nature of the person’s connection with CyberGrape, the type of personal information we collect and hold includes (but is not limited to): names, addresses, contact details, testimonials and feedback, nature of relationship to our client and other information which assists us in conducting our business, providing and marketing our services and meeting our legal obligations.
In some cases, if personal information we request is not provided, it might adversely impact our ability to supply the relevant product or service or to perform our obligation.
How does CyberGrape collect personal information?
Except as otherwise permitted by law, we will collect personal information:
- from publicly available websites.
- from you directly when you provide your details to us;
- from you indirectly (through emails, forms, subscription applications, face-to-face meetings, interviews, registration and attendance at seminars, business cards, telephone conversations and through the use of the services and facilities available through our websites and social media channels);
- from third parties in some instances, for example:
- we may use third parties to analyse traffic at our websites and social media channels, which may involve the use of cookies;
- in some circumstances we might collect personal information about an individual from a third party, for example (but not limited to), existing clients who have requested CyberGrape to contact you in regard to the security of the services they acquire from you;
- where a third party provides security-related services; and
- from publicly available websites.
Management of personal information
We take reasonable steps to protect the security of personal information. CyberGrape’ personnel are required to respect the confidentiality of personal information and the privacy of individuals.
We take reasonable steps to protect personal information held by us from misuse and loss and from unauthorised access, modification or disclosure, for example by use of physical security and restricted access to electronic records.
Where we no longer require your personal information we will comply with our legal obligations in respect of that information.
How might CyberGrape collect, hold, use and disclose your personal information?
In general, we collect, hold, use and disclose your personal information for the following purposes:
- to comply with our legal obligations.
- to conduct our business;
- to provide and market our services to you;
- to provide joint marketing initiatives with other service providers;
- to engage third parties on your behalf;
- to communicate with you;
- to purchase goods or services;
- to help us manage and enhance our services;
- for health and safety, or security purposes;
To whom might CyberGrape disclose your personal information?
We may disclose your personal information to:
- other companies or individuals who assist us in providing services or who perform functions on our behalf (such as mailing houses, hosting and data storage providers and specialist consultants);
- other companies or individuals who perform checks that are necessary or desirable under law on our behalf;
- other companies, agencies or individuals that maintain databases against which your identity may be verified;
- social media sites on which we have a presence;
- courts, tribunals and regulatory authorities;
- anyone else to whom you authorise us to disclose it; and
- where we are required to do so by law.
How can you access and correct your personal information?
We endeavor to ensure that the personal information we hold is accurate, complete and up-to-date.
We encourage you to contact us in order to update any personal information we hold about you. Contact details are set out below. You have the right to correct any personal information we hold about you in accordance with the Privacy Act.
Subject to the exceptions set out in the Privacy Act, you may seek access to the personal information which we hold about you by contacting our Privacy Officer on 0800 617 946.
We will require you to verify your identity and to specify what information you require. A fee may be charged for providing access. If a fee is to be charged, we will advise you of the likely cost in advance.
International Privacy
CyberGrape can offer services to businesses located outside of New Zealand and as such, we acknowledge the following:
Third Party Privacy Policies
CyberGrape’s Privacy Policy does not apply to other advertisers or websites. Thus, we are advising you to consult the respective Privacy Policies of these third-party ad servers for more detailed information. It may include their practices and instructions about how to opt-out of certain options.
You can choose to disable cookies through your individual browser options. To know more detailed information about cookie management with specific web browsers, it can be found at the browsers’ respective websites.
CCPA Privacy Rights (Do Not Sell My Personal Information)
Under the CCPA, among other rights, California consumers have the right to:
Request that a business that collects a consumer’s personal data disclose the categories and specific pieces of personal data that a business has collected about consumers.
Request that a business delete any personal data about the consumer that a business has collected.
Request that a business that sells a consumer’s personal data, not sell the consumer’s personal data.
If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us.
GDPR Data Protection Rights
We would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:
The right to access – You have the right to request copies of your personal data. We may charge you a small fee for this service.
The right to rectification – You have the right to request that we correct any information you believe is inaccurate. You also have the right to request that we complete the information you believe is incomplete.
The right to erasure – You have the right to request that we erase your personal data, under certain conditions.
The right to restrict processing – You have the right to request that we restrict the processing of your personal data, under certain conditions.
The right to object to processing – You have the right to object to our processing of your personal data, under certain conditions.
The right to data portability – You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us.
Children’s Information
Another part of our priority is adding protection for children while using the internet. We encourage parents and guardians to observe, participate in, and/or monitor and guide their online activity.
does not knowingly collect any Personal Identifiable Information from children under the age of 13. If you think that your child provided this kind of information on our website, we strongly encourage you to contact us immediately and we will do our best efforts to promptly remove such information from our records.
Do Not Track
“Do Not Track” Policy as Required by California Online Privacy Protection Act (CalOPPA)
Our Service does not respond to Do Not Track signals.
However, some third party websites do keep track of Your browsing activities. If You are visiting such websites, you can set your preferences in your web browser to inform websites that You do not want to be tracked. You can enable or disable DNT by visiting the preferences or settings page of Your web browser.
How can you make a privacy complaint?
If you have any questions about privacy related issues or wish to complain about the handling of your personal information by us, please contact our Privacy Officer on 0800 617 946. We may ask you to lodge your complaint in writing. Any complaint will be investigated by the Privacy Officer and you will be notified of the decision in relation to your complaint as soon as practicable after it is made, usually within 20 working days.
If we are unable to satisfactorily resolve your concerns about our handling of your personal information, you can contact the Office of the Privacy Commissioner at: PO Box 10-094, The Terrace, Wellington 6143, phone 0800 803 909 or visit http://privacy.org.nz.
Address details of CyberGrape
The address of CyberGrape, as the person collecting and holding your personal information, is:
CyberGrape Ltd
20 The Outlook
Oakura
New Plymouth, 4374
Updates to this Policy
This Policy will be reviewed from time to time to take account of new laws and technology, changes to our operations and practices and the changing business environment. The most current version of this Policy is located at cybergrape.co.nz and can be obtained by contacting our Privacy Officer on 0800 617 946.
Definitions
In this Policy:
“We”, “us” and “our” means CyberGrape Ltd in New Plymouth, Taranaki.
CyberGrape Building, 20 The Outlook, Oakura, New Plymouth, 4374.