Privacy Policy

Introduction

This Privacy Policy explains how marketbase.nz ("MarketBase", "we", "us", or "our") collects, uses, stores, and protects information when you use our website and services. We are committed to protecting your privacy and complying with the Privacy Act 2020 (New Zealand) and applicable international privacy regulations.

This policy applies to all users of the MarketBase platform, whether accessing public features or authenticated services. By using MarketBase, you consent to the data practices described in this policy.

Information We Collect

Personal Information You Provide

When you create an account with MarketBase, we collect information that you voluntarily provide, including your full name, email address, phone number, password (stored in encrypted format), and associated business details. This information is essential for providing our services and maintaining your account.

For users who engage our Do It For Me services, we may collect additional business information as required to deliver the specific services requested. This information is collected on a case-by-case basis and is limited to what is necessary for service delivery.

Information Collected Automatically

When you visit our website or use our services, we automatically collect certain technical information to improve our services and ensure platform security. This includes your IP address, browser type and version, device identifiers, operating system information, and general location data derived from your IP address. We also collect information about your interactions with our platform, including pages viewed, features used, time spent on pages, and navigation patterns.

We maintain logs of this non-personalised browsing data for a maximum of two years, using it exclusively for service improvement, security monitoring, and technical troubleshooting purposes.

Cookies and Tracking Technologies

MarketBase employs cookies and similar tracking technologies to enhance your experience and analyse platform usage. We use essential cookies that are necessary for the platform to function properly, including authentication and security features. Functional cookies remember your preferences and settings to provide a personalised experience. Analytics cookies, including Google Analytics, help us understand how users interact with our platform to improve our services. We also use advertising cookies, including Facebook Pixel, to measure the effectiveness of our marketing campaigns.

You can control cookie preferences through your browser settings. However, disabling certain cookies may limit your ability to use some features of our platform. Our analytics and advertising partners may collect information about your online activities over time and across different websites when you use our platform.

Information from Public Sources

As part of our core service offering, MarketBase collects publicly available business information from various online sources using proprietary technology. This includes business listings, reviews, social media profiles, and other publicly accessible marketing data. This information is used to generate competitive analysis and market intelligence reports. We do not associate this public business data with personal user information unless a user specifically claims a business in their account.

How We Use Your Information

Service Provision

We use the information we collect primarily to provide, maintain, and improve our services. This includes creating and managing your account, processing subscriptions and payments through our payment processor Paddle, generating personalised reports and recommendations based on your claimed businesses and selected markets, and providing customer support and responding to enquiries.

Communication

We use your contact information to send essential service communications, including account notifications, subscription updates, and important platform changes. With your consent, we also send marketing communications about new features, services, and promotional offers. You may opt out of marketing communications at any time through the unsubscribe link included in every marketing email.

Platform Improvement and Security

We analyse aggregated usage data to understand how users interact with our platform, identify areas for improvement, and develop new features. We also use information to monitor platform security, detect and prevent fraudulent activity, and ensure compliance with our Terms and Conditions.

Information Sharing and Disclosure

Service Providers

We share your information with trusted third-party service providers who assist us in operating our platform and delivering services. These providers are contractually obligated to protect your information and use it only for the purposes we specify. Our primary service providers include Paddle for payment processing and subscription management, Postmark for email delivery services, Cloudways and Amazon Web Services for hosting and data storage, and analytics providers for platform improvement.

Legal Requirements

We may disclose your information when required by law or in response to valid legal processes, including court orders or government requests. We may also share information when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.

Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email and prominent notice on our website of any change in ownership or uses of your personal information.

No Sale of Personal Information

We do not sell, rent, or trade your personal information to third parties for their marketing purposes. We only share information as described in this policy or with your explicit consent.

Data Security

MarketBase implements comprehensive security measures to protect your information from unauthorised access, alteration, disclosure, or destruction. Our security infrastructure includes TLS encryption for all web traffic using LetsEncrypt certificates, ensuring data in transit is protected. All personally identifiable information (excluding billing information managed by Paddle) is stored in an encrypted state on Amazon Web Services servers.

We maintain strict access controls, limiting employee access to personal information on a need-to-know basis. Our security practices include weekly security audits to identify and address potential vulnerabilities. We employ both software-based and physical security measures to protect our infrastructure. Despite these measures, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security of your information.

Data Storage and International Transfers

Your information is stored on servers located in Sydney, Australia, and Christchurch, New Zealand. All data handling complies with New Zealand privacy laws, which provide strong protection for personal information. If you access our services from outside New Zealand or Australia, you understand that your information may be transferred to and processed in these countries.

We ensure that any international data transfers comply with applicable privacy laws and that appropriate safeguards are in place to protect your information. By using our services, you consent to the transfer and processing of your information in accordance with this policy.

Your Privacy Rights

Access and Correction

Under the Privacy Act 2020, you have the right to access the personal information we hold about you and request corrections if any information is inaccurate or incomplete. To exercise these rights, please contact our Privacy Officer at the details provided below.

Data Deletion

You may request that we delete all personal information we hold about you at any time. Upon receiving a valid deletion request, we will remove your data from our systems within 72 hours. Please note that deletion of your account and associated data will result in permanent loss of access to our services and any claimed businesses or reports in your account.

Data Portability

You have the right to receive a copy of your personal information in a structured, commonly used format. This allows you to transfer your data to another service provider if desired.

Processing Timeframes

We aim to respond to all privacy-related requests within 20 working days, as required by New Zealand law. Complex requests may require additional time, in which case we will notify you of the expected timeframe.

Children's Privacy

MarketBase is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children under 16 years of age. If we become aware that we have collected personal information from a child under 16, we will take immediate steps to delete such information from our systems within 72 hours of discovery.

Parents or guardians who believe we may have collected information from their child should contact our Privacy Officer immediately. We will promptly investigate and remove any improperly collected information.

Marketing Communications

We may send you marketing communications about our services, features, and promotional offers if you have provided consent. Every marketing email includes a clear unsubscribe link at the bottom of the message. You can opt out of marketing communications at any time by clicking the unsubscribe link or contacting us directly.

Opting out of marketing communications will not affect essential service communications, such as account notifications, subscription updates, or security alerts, which are necessary for providing our services.

Data Breach Notification

In the unlikely event of a data breach that may compromise your personal information, we maintain a comprehensive incident response procedure. We will notify affected users by email within six hours of discovering and verifying the breach. We will also publish a bulletin in our resources area providing information about the breach, its potential impact, and steps being taken to address it.

Our breach notification will include the nature of the compromised information, steps we are taking to investigate and mitigate the breach, recommendations for protective measures you can take, and contact information for further enquiries.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. We will notify registered users of material changes via email where we have permission to contact you. The updated policy will be posted on our website with a revised effective date.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our services after any changes constitutes acceptance of the updated policy.

Contact Our Privacy Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact our designated Privacy Officer:

Privacy Officer: Jeremy Gray

Email: [email protected]

Postal Address:

C/O Gray & Shinn Limited

2/83 Victoria Street

Christchurch Central City

New Zealand

Phone: 0800 003 003

Our Privacy Officer is responsible for overseeing compliance with this policy and applicable privacy laws. All privacy-related enquiries will be treated confidentially and responded to promptly.

Additional Information for International Users

While MarketBase focuses on serving New Zealand businesses, we do not restrict international access to our platform. International users should be aware that by using our services, they consent to the collection, storage, and processing of their information in accordance with New Zealand privacy laws.

If you are located in the European Union, you may have additional rights under the General Data Protection Regulation (GDPR). Please contact our Privacy Officer to discuss how these rights may apply to your use of our services.

Retention Periods

We retain different types of information for varying periods based on legal requirements and business needs. Account information is retained for as long as necessary to provide services and for a maximum of two years after account cancellation. Non-personalised browsing data is retained for a maximum of two years. Financial records are retained as required by New Zealand tax and business laws, typically seven years.

After these retention periods expire, we securely delete or anonymise your information so it can no longer be associated with you.

Third-Party Links

Our platform may contain links to third-party websites or services that are not operated by us. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party sites you visit through links from our platform.

By using MarketBase, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and disclosure of your information as described herein.

Last Updated: 6th August 2025

Version: 1.0