Important: This Privacy Policy explains how Otago Marketing Group Limited ("we," "us," or "our") collects, uses, and protects your personal information in compliance with New Zealand's Privacy Act 2020.
1. Information We Collect
1.1 Personal Information
We collect personal information that you voluntarily provide to us when you:
- Create an account or register for the Service
- Make purchases at participating businesses
- Contact us for customer support
- Subscribe to our communications
- Participate in surveys or promotions
This information may include:
- Name and contact information (email, phone number)
- Date of birth and demographic information
- Payment and transaction information
- Account preferences and settings
- Communications with us
1.2 Automatically Collected Information
We automatically collect certain information when you use our Service:
- Device information (IP address, browser type, operating system)
- Usage data (pages viewed, time spent, features used)
- Location information (with your consent)
- Cookies and similar tracking technologies
2. How We Use Your Information
We use your personal information for the following purposes:
- Service Provision: To provide, maintain, and improve our Service
- Account Management: To create and manage your account
- Transaction Processing: To process points earnings and redemptions
- Communication: To send you service-related notifications and promotional content
- Customer Support: To respond to your inquiries and provide assistance
- Analytics: To understand how our Service is used and improve user experience
- Legal Compliance: To comply with legal obligations and protect our rights
3. Information Sharing
3.1 With Participating Businesses
We share necessary information with participating businesses to facilitate your transactions and points earning/redemption. This includes:
- Transaction details for points calculation
- Account identifiers for reward redemption
- Aggregated usage statistics (anonymized)
3.2 With Service Providers
We may share your information with trusted third-party service providers who assist us in operating our Service, including:
- Cloud hosting and data storage providers
- Payment processing services
- Email and communication services
- Analytics and marketing platforms
3.3 Legal Requirements
We may disclose your information when required by law or to:
- Comply with legal process or government requests
- Protect the rights, property, or safety of our users
- Prevent fraud or security threats
- Enforce our Terms of Service
4. Data Storage and Security
4.1 Data Storage
Your personal information is stored on secure servers. While we primarily use New Zealand-based services, some data may be processed or stored overseas with appropriate safeguards in place.
4.2 Security Measures
We implement appropriate technical and organizational measures to protect your personal information, including:
- Encryption of data in transit and at rest
- Regular security assessments and updates
- Access controls and authentication measures
- Staff training on data protection practices
5. Your Privacy Rights Under New Zealand Law
Under the Privacy Act 2020, you have the right to:
- Access: Request access to your personal information we hold
- Correction: Request correction of inaccurate or incomplete information
- Deletion: Request deletion of your personal information (subject to legal requirements)
- Portability: Request your data in a portable format
- Restrict Processing: Request limitation of how we use your information
- Object: Object to certain types of processing
- Complaint: Lodge a complaint with the Privacy Commissioner
To exercise these rights, please contact us using the information provided below. We will respond to your request within one month.
6. Cookies and Tracking Technologies
We use cookies and similar technologies to:
- Remember your preferences and settings
- Analyze website traffic and usage patterns
- Provide personalized content and recommendations
- Measure the effectiveness of our marketing campaigns
You can control cookies through your browser settings, but disabling cookies may affect the functionality of our Service.
7. Data Retention
We retain your personal information for as long as necessary to:
- Provide our Service to you
- Comply with legal obligations
- Resolve disputes and enforce our agreements
- Maintain security and prevent fraud
Account information is typically retained for 7 years after account closure or as required by law.
8. Third-Party Links
Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies before providing any personal information.
9. Children's Privacy
Our Service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by:
- Posting the updated policy on our website
- Sending an email notification to registered users
- Providing notice through our Service
11. International Data Transfers
If we transfer your personal information outside New Zealand, we will ensure appropriate safeguards are in place, such as:
- Adequacy decisions by the Privacy Commissioner
- Standard contractual clauses
- Certification schemes or codes of conduct
12. Contact Information
Privacy Officer
Otago Marketing Group Limited
Email: info@otagomarketingrewards.co.nz
Address: New Zealand
Phone: Available upon request
Privacy Commissioner Contact
If you have concerns about how we handle your personal information, you can contact the New Zealand Privacy Commissioner:
Website: privacy.org.nz
Phone: 0800 803 909
Email: enquiries@privacy.org.nz
13. Automated Decision Making
We may use automated systems to make decisions about your account, such as:
- Fraud detection and prevention
- Personalized content recommendations
- Account security measures
You have the right to request human intervention in automated decision-making processes that significantly affect you.