Privacy Statement

 

Last updated: 1 September 2025

Our privacy statement describes how we collect, process, use, dispose and protect information that relates to an identified or identifiable individual (Personal Information) across our website (noted.com) (Website) and Service. If an individual can’t be identified (for example, when Personal Information is aggregated or anonymised) then the information or data is not Personal Information and this privacy statement doesn’t apply.

Noted Limited, operating as Noted is a company registered in Wellington, New Zealand.

This privacy policy is governed by New Zealand law. When handling Personal Information, we will comply with the New Zealand Privacy Act 2020.

This privacy statement uses the same definitions as those used in our standard terms of use, found at noted.com/standard-terms-of-use (Terms).

INFORMATION WE COLLECT

We collect, hold and process two categories of Personal Information:

Website and User Information is Personal Information that we collect about:

  • Users of the Services, in connection with the creation, administration and operation of a Subscriber account and access to and use of the Service; and
  • other individuals who visit our Website or contact us directly (e.g. telephone call, web chat or email) to receive information about us or our Service or sign up to receive Noted communications.

Website and User Information may include names, phone numbers, email addresses, location information, billing information, information about how users use the Website and the Service, IP addresses and/or other device identifying data, information contained in an individual’s correspondence with us and other information required to provide requested services or information, but does not include Uploaded Information.

Uploaded Information is Personal Information contained in Subscriber Data that is uploaded by Users into the Service, and processed by us solely to provide the Service to the relevant Subscriber. We process this Uploaded Information as an agent for our customers under the Privacy Act 2020. Our Subscribers act as the data controller in respect of all Uploaded Information, and are responsible for compliance with the Privacy Act 2020 and any other applicable privacy laws or regulation. The Subscriber is also responsible for providing notice and/or obtaining the appropriate consents and approvals required for us to lawfully process such Personal Information. We will not process Uploaded Information, except in accordance with the Terms.

WHO DO WE COLLECT PERSONAL INFORMATION FROM

We collect Website and User Information from:

  • individuals directly, when: 
    • a User inputs their Personal Information into the Website or Service directly; or
    • other individuals who visit our Website or contact us directly (e.g. telephone call, web chat or email) provide their Personal Information to us;
  • use of the Website and/or the Service, when an individual performs any action on, or interacts with, any part of the Website or Service, including:
    • clickstream data, which is a record of how the user navigates or clicks through our Website or Service; and
    • information obtained through the use of cookies, web beacons and similar storage technologies. Please refer to the section of this privacy statement entitled “Cookies and Tracking” for further information, including information on how these technologies can be disabled.
Uploaded Information is collected from Users when they upload Subscriber Data into the Service on behalf of the relevant Subscriber.

HOW WE USE PERSONAL INFORMATION

We will not process Personal Information, other than as outlined in this privacy statement, without having a lawful basis to do so.

Website and User Information

We process Website and User Information:

  • to activate Subscriber accounts within the Service;
  • to provide our Website and Service and otherwise carry out our obligations under the Terms;
  • to invoice Fees and other charges and to collect money that is owed;
  • to communicate with third parties, as necessary to provide the Website and Service;
  • to communicate with Users, and other subscribers and suppliers relating to the Service, including for administration purposes, such as account management, customer service or system maintenance;
  • to comply with our obligations to our third-party service providers, subscribers, suppliers and other users of our Website and Service;
  • to send the Subscriber and its Users marketing and promotional messages and other information that may be of interest to the Subscriber where the Subscriber has consented to receiving such material. Users can opt out of receiving marketing materials from us by using the opt-out facility provided (e.g. an unsubscribe link) or by emailing us at privacy@noted.com;
  • to improve our Website and Service;
  • to analyse and monitor usage of the Website and Service, or carry out research and analysis, so we can improve the Website and Service;
  • to enforce compliance with our Terms;
  • to respond to due diligence requests and/or transfer Personal Information in the case of a sale, merger, consolidation, liquidation, reorganisation or acquisition of our business;
  • to protect and/or enforce our legal rights and interests (including defending any claim) or the safety of our employees, customers or the public; and
  • to comply with our legal obligations, including any notification and reporting obligations and any access directions imposed on us by a Government agency or regulatory authority.

We may also use Website and User Information collected for such other purposes that are compatible with the original purpose described above, or that the relevant individual has otherwise consented to from time to time.

We may anonymise and aggregate Website and User Information (in the manner specified in our Terms) such that no person could be re-identified from the information. This aggregated and anonymised data is not Personal Information and this privacy statement does not apply to it.

If an individual chooses not to share their contact details, we will be unable to respond to their contact request. Further, if a User hasn’t provided correct and up to date information to us, we may not be able to properly provide our Service to the relevant Subscriber.

Website and User Information

We process Uploaded Information solely as necessary to provide the Service to the relevant Subscriber and strictly in accordance with the Terms.

DISCLOSING PERSONAL INFORMATION

We do not sell or rent Personal Information to any third party. However, we may disclose Personal Information, as necessary, to:

  • service providers, partners and suppliers who provide necessary goods and/or services to us or help us market and supply the Website and Service;
  • third parties, as necessary to provide the Website and the Service;
  • any business that supports us, including hosting or maintaining any underlying IT system that we use to provide our Website and Service;
  • in respect of Website and User Information only, other third parties to anonymise and aggregate statistical information;
  • a person who can require us to supply Personal Information (e.g. a regulatory authority or law enforcement agency);
  • third party partners or other customers of the Service, where those partners or other customers have been validly and lawfully authorised to share information with each other via our systems or the Service; and
  • any other person or entity that we have been validly authorised to disclose information to.

For further information about the safeguards used when an individual’s information is transferred outside of New Zealand, see the section of this privacy statement below entitled “Overseas Transfers”.

OVERSEAS TRANSFERS

Noted utilises the services of entities in Australia to provide us with hosting and maintenance services. Consequently, we may transfer Personal Information to parties located in this country. Although we will endeavour to ensure that Personal Information is treated securely and in accordance with this privacy statement as well as applicable privacy laws, we advise that Australia may not have an equivalent level of data protection laws as those in New Zealand.

THIRD PARTY SERVICES

We use third party services for providing the Website and Service, to ensure a better experience for users and for improving the Website and Service. In the process of doing so, the third party service provider may have access to Personal Information. However, these third parties do not have the right to use the Personal Information for their own use.

INTERNET USE

While we take reasonable steps to maintain secure internet connections, if an individual provides us with Personal Information over the internet, the provision of that information is at their own risk.

If an individual follows a link on our Website or the Service to another website, the owner of that website will have its own privacy policy relating to that individual’s Personal Information. We suggest reviewing that website’s privacy policy before providing access to Personal Information.

PROTECTING PERSONAL INFORMATION

We take the protection of Personal Information seriously and we will take reasonable steps to keep Personal Information in our possession safe from loss, unauthorised activity, or other misuse, including in respect of the Service, as detailed in our Terms.

We keep Personal Information safe by storing it in online password protected databases and only allow Noted staff (or other persons who have been validly authorised to access such information) to access it.

We limit the Personal Information provided to our service providers, suppliers and partners to that which is reasonably necessary for them to perform their functions, and our contracts with them require them to maintain the confidentiality of such information. 

COOKIES AND TRACKING

We may use various technologies to collect and store information about individuals when they use the Website and/or Service, and this may include using cookies and similar tracking technologies, such as pixels and web beacons.

Cookies

A cookie is a piece of information that our web server may send to an individual’s machine when they visit our Website. The cookie is stored on the individual’s device, but does not identify that individual or give us any information about their device. 

The types of cookies we use may include:

  • Strictly necessary cookies: These cookies are essential for the full functionality of our Website. They enable you to navigate around our Website and use its features. Without these cookies, a user may not be able to access all the functions of our Website.
  • Performance cookies: These cookies collect information about how users use our Website. All information these cookies collect is anonymous and only used to improve our Website.
  • Functionality cookies: These cookies allow our Website to remember the choices users make (for example, their user name, language or region). Although these cookies are used to enhance the performance of our Website and are non-essential, without these cookies, certain functionality may become unavailable.

The length of time a cookie will stay on a browsing device depends on whether it is a persistent or session cookie. Session cookies will only stay on a device until the user stops browsing. Persistent cookies will stay on a browsing device until they expire or are deleted.

With most internet browsers, users can erase cookies from their computer hard drive, block all cookies, or receive a warning before a cookie is stored. If  a user rejects the use of cookies, they will still be able to access our Website but some of its functions may not work as well as if cookies were enabled. To learn more about how to enable, edit, or disable cookies, please visit the aboutcookies.org website.

Web analytics

We use HubSpot and Google Analytics to collect information about use of our Website, with the goal of improving our Website. HubSpot and Google Analytics collect information such as how often users visit the Website, what pages they visit when they do so, and what other sites they used prior to coming to the site.

Web beacons

Web beacons are tiny graphics with a unique identifier that may be included on the Website for several purposes. For example, we may use web beacons to deliver or communicate with cookies, to track and measure the performance of the Website, to monitor how many visitors view our Website, and to monitor the effectiveness of our advertising. Unlike cookies, which are stored on an individual’s hard drive, Web Beacons are typically embedded invisibly on web pages (or in an email). We use these web beacons to customise content and advertising and to analyse traffic to our Website.

EMAIL COMMUNICATIONS

All Noted contact requests we receive through our Website contact form or contact requests sent directly to sales@noted.com or support@noted.com will be signed up automatically to receive email marketing communications. For all our marketing emails, an individual can choose to remove themselves from receiving these communications by following the “unsubscribe” prompt at the bottom of each email.

YOUR RIGHTS

Individuals have the right to access their readily retrievable Personal Information that we hold about them, and to ask for it to be corrected if they think it is wrong. 

An individual can exercise these rights, by emailing our Privacy Officer at privacy@noted.com. The email should provide evidence of the individual’s identity and set out the details of the information request (e.g. the Personal Information, or the correction, being requested).

There may still be residual information such as errors logs, emails, calendar invites, data backups etc that record some Personal Information (primarily email address, name, and any content sent via email). to request the deletion of this information, please contact our Privacy Officer (privacy@noted.com).

If an individual believes we are unlawfully processing their Personal Information and wishes to lodge a complaint, they can lodge a complaint with us directly using the above contact details, or they can lodge a complaint with the New Zealand Privacy Commissioner. Information about how to lodge a complaint is available at Privacy Commissioner’s website.

CHANGES TO THIS PRIVACY STATEMENT

From time to time we may make changes to this privacy statement (for example, to reflect any changes in our Website, or Service or any applicable laws). Where a change is significant, display a notice on our Website or by sending an email.