Privacy Statement for Cetaware Dashboard
This privacy statement explains how Cetaware New Zealand (“Cetaware”, “we”, “us” or “our”) collects, uses, stores and shares personal information through the Cetaware dashboard and related communications.
Cetaware is the agency that holds the information described in this statement.
What we collect
We may collect:
• your name;
• your contact information, including your email address;
• your location, where you provide it;
• your interactions with us, including demo registrations, access history, support communications and follow-up communications;
• information about how you use the dashboard, such as pages viewed, timestamps and features used; and
Cetaware collects personal information directly from users only.
Why we collect it
We collect and use personal information to:
• register users and grant access to the demonstration web application for our products;
• authenticate users and manage website access;
• monitor dashboard access and traffic;
• operate, maintain, secure and improve the dashboard;
• respond to questions and provide support;
• detect, investigate and prevent misuse or security incidents; and
• follow up with registered users about Cetaware products.
You can opt out of non-essential follow-up messages at any time emailing [email protected]. We may still send messages needed to administer or secure your access.
What you must provide
Providing personal information is voluntary. However, your name and email address are required to register for and access the demonstration dashboard. If you do not provide them, we cannot grant you access.
Who receives your information
Access within Cetaware is limited to authorised senior staff who need the information for the purposes described above.
We also use:
• Amazon Web Services (AWS) to host the access database that our web applications call upon, store contact details and other dashboard information, and help manage website access; and
• Google Analytics (GA) to measure dashboard traffic and understand how the dashboard is used.
We do not use any other direct service providers to process dashboard personal information.
We may also disclose information:
• to professional advisers, contractors or authorities where reasonably necessary and permitted by law;
• where required or authorised by law;
• to protect the rights, safety or security of a person, Cetaware or the dashboard; or
• with your authorisation.
We do not sell personal information.
AWS hosting and security
Dashboard customer content is stored in the AWS Asia Pacific (Sydney) Region (ap-southeast-2). Cetaware does not intentionally replicate that content to another AWS Region.
No online service can guarantee absolute security. If a privacy breach has caused or is likely to cause serious harm, we will notify the Office of the Privacy Commissioner and affected people as soon as practicable, as required by the Privacy Act 2020.
Google Analytics and cookies
GA is used to monitor dashboard traffic. It may process:
• a randomly generated browser identifier;
• pages viewed, events, session information and timestamps;
• browser, device and operating-system information; and
• IP address information used for routing, security and deriving an approximate location. Google states that GA discards raw IP addresses before logging them.
GA is configured to load only after you consent to analytics cookies. Declining analytics cookies does not prevent access to the dashboard.
Overseas storage and disclosure
AWS stores dashboard customer content in Australia. Google and any other confirmed providers may process information in New Zealand and overseas.
How long we keep information
Our standard retention period is 2 years from the date it is collected, then securely erased from active systems.
Your privacy rights
You have the right to ask:
• whether we hold personal information about you;
• for a copy of personal information we hold about you; and
• for correction of that information if you think it is wrong.
Contact us at [email protected] if you have any questions.
Please provide enough detail for us to identify the information concerned. We may need to verify your identity before releasing or correcting it. We will respond as soon as reasonably practicable and no later than 20 working days after receiving your request.