PRIVACY POLICY
Dune Digital is committed to safeguarding website visitors' privacy. This policy outlines Dune Digital's website data processing practices.
Information Collected
Personal information is collected as required for the services provided. In some instances, this includes basic registration information such as name, address, and email. Other online forms may require additional details necessary for fulfilling specific service requests.
Information Sources
Personal data may be obtained from several sources:
-
When a service or product is purchased, which may involve creating a Dune Digital account, relevant details including full name, email, company (if applicable), billing information, and password are collected.
-
Information from enquiries or responses may inform how services are used.
-
Data may be gathered from publicly available documents, such as the electoral register.
Each website visit automatically logs:
-
Technical device information (e.g., desktop, mobile, tablet)
-
Details about the visit, such as products viewed, search behaviour, page response times, errors, duration of visits, interaction details (scrolling, clicks, mouse-overs), navigation methods, document downloads, and mailing list subscriptions.
No collection of special categories of personal information is anticipated under Data Protection Laws (e.g., health or ethnic origin). Should such data be sought, explicit consent will be requested, and there is no obligation to provide it.
Third Parties
When submitting data on behalf of others, it is the individual’s responsibility to ensure all necessary consents and notices are in place, enabling lawful transfer of personal data for the purpose and duration of agreements. The third party should be informed of this Privacy Policy, and legal data protection requirements apply.
If adequate consent cannot be assured, do not submit the third party’s personal data.
Purpose of Personal Information Use
Personal data is collected for reasons including but not limited to correspondence, fulfilling contracts, marketing analysis, research, contacting users, notifying of service changes, website administration, internal operations, and security purposes.
Data will only be held for as long as needed to meet these objectives:
-
To verify user identity upon contact.
-
To discharge contractual obligations and provide requested information, products, or services.
-
For marketing analysis and research (excluding automated profiling or credit decisions without express consent).
-
For direct communication regarding similar products or services, unless opted out.
-
Service change notifications.
-
Presenting web content effectively.
-
Website administration and internal operations.
-
Improving the website and ensuring secure access.
Data will not be disclosed to third parties except as outlined in this policy or with express consent.
Third-party access may occur if:
-
Dune Digital or its assets are acquired by a third party, making customer data a transferrable asset.
-
Information is legally required for regulatory or legal proceedings.
-
Third parties perform functions on behalf of Dune Digital, subject to contract, limited data access, purpose restrictions, and compliance with this policy and law.
Third-party examples include:
-
Customer relationship management software providers
-
Secure online payment platforms
-
Online accounting platforms
For transactions, if false or misleading information is provided and fraud is suspected, records may be shared with other entities engaged in fraud prevention.
Marketing Data Sharing
Customer information is not shared with third-party marketers or organisations that could use personal data for marketing.
Data Protection
Compliant with Data Protection Laws, Dune Digital enforces security measures to protect personal data.
All personal information is stored securely, and SSL encryption protects data transmission. Payments are processed via secure channels (bank transfer, PayPal, Stripe).
Safeguards exist for collection, storage, and disclosure, and proof of identity may be required before disclosing personal data. Users are encouraged to protect passwords and sign off shared computers. If email credentials are compromised, contact support to reset the password.
Personal data is retained only as long as necessary, typically up to seven years, considering data sensitivity, risk, purpose, and legal requirements. Some data may be anonymised for indefinite research or statistical use.
Email Communications
Occasional emails are sent regarding relevant services, interests, or support, provided an email address has been supplied for such communication.
Website Improvement Information
Web statistics are collected based on IP address to monitor site usage patterns and improve services. This data is not used to identify individuals unless a form is completed or transaction occurs, thereby providing user identification. Statistics help enhance site performance and understanding of user needs.
Cookies
Cookies are used to store preferences, session data, and record activity (such as cart contents and pages visited). Cookies may alert users to new areas, recall past activity for improved service, and customise page content for browser type or other submitted information.
Security Measures
Physical, electronic, and procedural safeguards protect against loss, misuse, or alteration of data.
Access to Information
Under the Data Protection Act 1998, formal requests can be made for:
-
Confirmation of personal data processing by Dune Digital
-
A description and copy of personal data held
-
Reasons for data processing
-
Information on disclosures to third parties
Requests and correction of inaccuracies can be made by emailing info@dunedigital.co.nz
Contact
Comments or concerns regarding this policy may be directed online to the following address: