Privacy Statement

PRIVACY STATEMENT

Actassa Limited (“Actassa”, “we”, “us”) respects your privacy. This statement explains how we collect, use, disclose, store and protect personal information when you use our website, contact us, interact with our social media pages, or use an Actassa-operated chatbot or other service that links to this statement. It also explains how to contact us and exercise your rights under the New Zealand Privacy Act 2020.

Some Actassa services are provided to recruitment agencies and other customers. Where a customer decides why and how personal information is collected through its own service, its privacy statement may also apply. We identify the relevant customer and its notice at the point of interaction where practicable.

Who collects and holds information

Actassa Limited collects and holds personal information covered by this statement. Our contact address is info@actassa.com. If a different organisation holds particular information, we will identify it in the relevant service notice.

Information we collect

Depending on your interaction with us, we may collect:

  • contact and account details, such as your name, organisation, email address, telephone number and login details;
  • messages, form submissions, chatbot conversations, files and other information you choose to provide;
  • transaction and service records, including requests, responses and support correspondence;
  • technical and usage information, such as IP address, device and browser details, pages visited, referral information, dates and times, and cookie or similar identifiers;
  • information made available through a social media platform when you interact with our page or a service using that platform, subject to its settings and policies.

A conversation or uploaded file may contain sensitive information about you or another person. Provide only information needed for the particular request.

Why we collect and use information

We collect and use information to provide the website and services you request; respond to enquiries; manage accounts, access, transactions and support; operate, secure and improve our services; understand website use; and meet legal obligations. We may use contact details to send information about our services where permitted by law and consistent with the reason those details were collected. You can opt out of marketing emails using the unsubscribe link or by contacting us. We will not use information for an unrelated purpose unless the Privacy Act permits it or we obtain your authorisation where required.

We collect information that is reasonably necessary for a lawful purpose connected with our functions or activities. Information requested through an enquiry form is generally voluntary, but without the details needed to respond we may be unable to answer the enquiry. Information needed to create an account, process a transaction or deliver a requested service may be necessary to use that feature.

Information received from others

We may receive personal information from our customers (recruitment agencies) or an integration for the purpose of providing services to our customers. Where we collect information about you from someone else, we take reasonable steps to tell you that it has been collected, its purpose, intended recipients, who collects and holds it, and your access and correction rights as soon as reasonably practicable, unless an exception under the Privacy Act applies or you have already been told. A notice may be provided through the relevant service, by our customer where it gives all required information, or directly by us.

Who receives information

We may disclose personal information to the customer or organisation whose service you choose to use; service providers that host, support, analyse or process our systems; communication and chatbot platform providers used for the relevant interaction; and advisers or authorities where disclosure is permitted or required by law. We may also disclose information with your authorisation. We do not sell personal information.

When you use a third-party platform such as a social media messenger, that platform may receive the content and associated account data under its own privacy terms. A chatbot may send message content, and potentially information contained in that content, to technology providers used to generate or deliver a response. We will describe the providers and relevant data flows for each service before you use it.

Processing outside New Zealand

Some providers or recipients may process personal information outside New Zealand, including but not limited to North America and Europe. Before a disclosure to a foreign recipient to which information privacy principle 12 applies, we assess whether an applicable safeguard permits that disclosure, such as comparable privacy protections or contractual obligations. If we rely on your authorisation instead, we will expressly tell you if the recipient may not provide comparable protection before asking you to authorise that disclosure.

Cookies and similar technologies

Our website may use cookies and similar technologies to keep features working, remember preferences and understand how the site is used. These technologies may collect online identifiers and usage information that is personal information where it can be linked to an identifiable person. You can manage cookies through your browser and any choices we provide on the site. Blocking some cookies may affect features that depend on them.

Storage, security and retention

We take reasonable safeguards against loss, unauthorised access, use, modification and disclosure of personal information. No internet transmission or storage method is completely risk-free, but this does not limit our obligations under the Privacy Act.

We retain personal information only for as long as it is required for a purpose for which we may lawfully use it, including applicable record-keeping duties, and then securely delete or de-identify it where appropriate.

Access, correction and complaints

You may ask for access to personal information we hold about you and ask us to correct it. Contact us at info@actassa.com. We may ask for information to verify your identity before disclosing or changing a record. We will respond as soon as reasonably practicable and within the applicable time under the Privacy Act, generally 20 working days, subject to lawful extensions. If we do not make a requested correction, you may ask us to attach a statement of correction to the information, subject to the Act.

If you have a concern about our handling of your information, contact our privacy officer or privacy contact first at the address above. You may also complain to the Office of the Privacy Commissioner at www.privacy.org.nz.

Privacy breaches and changes

We assess privacy breaches and notify affected people and the Office of the Privacy Commissioner when the Privacy Act requires notification. We may update this statement as our practices change. The current version will be available on our website with its effective date. For material changes, we will take additional steps to inform affected people where appropriate.

Effective date: 29 September 2026