AIEQUITAS Privacy Policy

1. Introduction

AIEQUITAS LIMITED ("AIEQUITAS", "we", "us", or "our") is a software company operating in New Zealand. We are committed to protecting your privacy and personal information in accordance with the New Zealand Privacy Act 2020 and the Information Privacy Principles ("IPPs") contained within it.

This Privacy Policy explains how we collect, use, store, and protect your information when you visit our company website and use our contact forms. We collect personal information only for lawful purposes that are directly connected to our business functions, and only to the extent that it is necessary for those purposes.

2. Information We Collect

We collect personal information directly from you when you voluntarily submit it through our "Contact Sales" or inquiry forms. We do not collect personal information about you from third-party sources. The information we collect includes:

• Name
• Email address
• Phone number (optional)
• The content of your message or inquiry

3. How We Use Your Information

We use the information you provide solely for the following purposes:

• To respond to your inquiries and provide customer support
• To send you information regarding our products and services that you requested
• To protect our website against malicious activity and spam

We will not use your personal information for any purpose other than those listed above without your consent.

4. Essential Cookies and Security

5. Information Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties. We may only share your information in the following limited circumstances:

• Service Providers: With trusted service providers who assist us in operating our website and conducting our business (such as secure email delivery and cloud hosting services), provided those parties agree to keep this information confidential and use it only for the services they provide to us.
• Legal Requirements: Where we are required to do so by law, or where disclosure is necessary to comply with a legal obligation, protect our rights, or ensure the safety of our users.

6. Data Retention

We retain your personal information only for as long as is necessary to fulfil the purposes for which it was collected, in accordance with IPP 9 of the Privacy Act 2020. Specifically:

• Contact form submissions: We retain inquiry data for up to 24 months from the date of your last interaction with us, after which it is securely deleted.
• Business correspondence: If your inquiry leads to an ongoing business relationship, we may retain your contact details for the duration of that relationship, plus any period required by applicable law.

You may request earlier deletion of your personal information at any time by contacting us.

7. Data Storage and Security

We implement appropriate technical and organisational security measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of all data in transit using secure protocols (HTTPS/TLS)
• Secure, access-controlled storage of collected data
• Regular review of our security practices

8. Overseas Data Transfers

Our website infrastructure may utilise cloud hosting services with servers located outside of New Zealand (including in Australia and other regions). In accordance with IPP 12 of the Privacy Act 2020, we will only disclose your personal information to an overseas recipient if we are satisfied that the recipient is subject to privacy laws that provide comparable safeguards to the New Zealand Privacy Act 2020, or if you authorise the disclosure.

Our hosting and email service providers are bound by contractual obligations to protect your data to a standard consistent with New Zealand privacy law.

9. Your Privacy Rights (NZ Privacy Act 2020)

Under the New Zealand Privacy Act 2020, you have the following rights:

• Right of Access (IPP 6): You may request a copy of any personal information we hold about you.
• Right of Correction (IPP 7): You may request that we correct any personal information that is inaccurate, incomplete, or misleading.
• Right to Request Deletion: You may ask us to delete your personal information, and we will do so unless we are required by law to retain it.

We will respond to all privacy rights requests within 20 working days, as required by the Privacy Act 2020. There is no charge for making a request.

If you are not satisfied with our response, you have the right to make a complaint to the Office of the Privacy Commissioner:

• Website: www.privacy.org.nz
• Phone: 0800 803 909 (free within New Zealand)

10. Privacy Breach Notification

In the event of a privacy breach that we believe has caused, or is likely to cause, serious harm to any affected individual, we will:

• Notify the Office of the Privacy Commissioner as soon as practicable
• Notify affected individuals as soon as practicable
• Take all reasonable steps to contain the breach and mitigate any harm

This is in accordance with the mandatory breach notification requirements under Part 6, Subpart 2 of the Privacy Act 2020.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Any changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this page periodically. Your continued use of our website following any changes constitutes your acceptance of the revised policy.

12. Contact Information

If you have any questions about this Privacy Policy, would like to exercise your privacy rights, or wish to make a privacy-related complaint, please contact us at:

Email: Admin@info.aiequitas.com
Response Time: We aim to respond within 48 hours for general queries, and within 20 working days for formal privacy requests as required by law.

Effective Date: April 27, 2026