Privacy Policy

We are committed to complying with our obligations under the New Zealand Privacy Act 2020 and the Australian Privacy Act 1988 (Cth). For our customers and website users based in the United Kingdom and European Economic Area (EEA), we take reasonable steps to align our practices with applicable data protection laws, including the UK Data Protection Act 2018, UK General Data Protection Regulation (UK GDPR), and the General Data Protection Regulation (GDPR). We will also endeavour to ensure compliance with applicable data protection legislation of other countries or jurisdictions where we operate or have users, to the extent reasonably practicable.

This Privacy Policy sets out how your “personal information” (having the meaning given under the NZ Privacy Act 2020 or the Australian Privacy Act 1988 (as applicable), or “personal data” under UK and EEA data protection legislation (for the purposes of this Privacy Policy collectively called “personal information”), is collected, used, and disclosed by Wizbang Technologies Limited (a New Zealand registered company with company number 182344) and its subsidiaries including NZ POS Systems Limited (NZ company number 2354719) and Wizbang Pty Ltd (Australian company number 39 630 383 256) (collectively, “Wizbang”, “we”, “us”, or “our”).

For the purposes of applicable data protection laws:

• Where we provide our software and services to business customers who determine the purposes and means of processing personal information of their employees, customers, or other end users, we act as a data processor (or service provider) and our customer acts as the data controller.
• Where we collect and process personal information directly from individuals who visit our website, register for our services, or interact with us directly, we act as a data controller.
• The specific role we undertake will depend on the context of the data processing activity as described in this Privacy Policy.

This Privacy Policy applies to the websites, apps, software, products and services offered by Wizbang and its subsidiaries listed above (collectively referred to as the Services).

This Privacy Policy is subject to change at our discretion, and we will update it from time to time. The current version will always be available on our website at https://wizbang.co.nz. If we change this Privacy Policy in any material way, we will post a notice on our website along with the updated Privacy Policy. We encourage you to read this Privacy Policy each time you deal with us so that you are aware of any changes made to it. Your continued use of our Services after the effective date of the changes constitutes your acceptance of the revised Privacy Policy.

Information for End-users

If you are an end user who uses our Services, we collect, use, and disclose your personal information as a result of your relationship with our customers who engage us to provide Services (Customer).  In such circumstances, we collect, use, and disclose your personal information on behalf of the Customer.  The kinds of personal information we collect about you is in part determined by the Customer, and we use and disclose that information to provide our services to the Customer, and to carry out our business activities.  The collection, use, and disclosure of your personal information will also be subject to their policies and procedures.  We are not responsible for the privacy or security practices of our Customers, which may be different from our privacy and security practices.

What personal information do we collect?

Personal information is any information that relates to an identified or identifiable individual. It does not include information that can’t identify an individual (such as deidentified or aggregated data).

Where we act as a data controller, for example, when you are our direct customer, visit our website or set up an account with us, personal information we collect from you may include:

• Contact data: your name, email address, phone number, business name, postal address, and other contact information you provide to us.
• Profile data: user name and password.
• Usage data: information about how you use our website and Services, including pages viewed, features accessed, time spent, frequency of use, and interaction patterns. This also includes technical data such as device type, operating system, browser type and version, IP address, device identifiers, and general location data. For detailed information about cookies and similar tracking technologies, see the “Cookies and other tracking technologies” section below.
• Information from you about your customers and employees, who are end users

When acting as a data processor:

When you use our Services as our Customer, we process personal information of your customers and employees on your behalf – you are the data controller. This may include employee data, customer transaction data, customer loyalty data, reservation/booking data, dietary requirements, special requests, and other information as determined by the Customer and as necessary to provide our Services. We may process various categories of personal information as directed by and on behalf of our Customers. The specific categories and types of personal information processed are determined solely by our customers’ instructions and their use of our Services. Our customers remain responsible for providing appropriate privacy notices to their end users regarding such data processing activities. You are responsible for ensuring that any processing of personal information relating to individuals under 18 years of age through our Services complies with all applicable laws and that appropriate legal authority and safeguards are in place. Our role is limited to that of a data processor (or service provider) acting in accordance with your instructions in accordance with our End User Licence Agreement and Terms of Sale. You warrant that you have all necessary rights, consents, and authorisations to provide personal information to us for processing through our Services, and that you will comply with all applicable data protection laws in your capacity as data controller.

How do we collect your personal information?

When we act as a data controller, we collect your personal information directly from you, such as when you set up an account, contact us via email, use our website or social media, request customer support, or access or use our Services. We may also collect personal information from your authorised reseller, publicly available sources, third-party service providers, business partners, and other people you have authorised us to collect it from.

When we act as a data processor, we collect and process personal information on behalf of and in accordance with instructions from our Customers (the data controllers).

We may also collect information while you use our Services using technology like cookies, in accordance with the section below.

You are responsible for ensuring the accuracy of all information you provide to us.

Cookies and other tracking technologies

We use cookies and similar tracking technologies to monitor your activity on our website and store certain information (such as your internet protocol address, browser type, browser version, time spent). We may also use third-party vendors (including Google Analytics) who may collect data through cookies and similar technologies. These third parties may collect information about your online activities over time and across different websites. We require these third parties to respect the security of your personal information and to treat it in accordance with applicable law. We do not permit our third-party vendors to use your personal information for their own purposes except where we have obtained your consent for them to do so. Cookies are small data files placed on your device that enable us to enhance and personalise your online experience, understand website usage, and improve our services. The cookies we use may include: essential cookies necessary for the functioning of the website; performance cookies to monitor site usage; functional cookies that remember your preferences; and targeting or advertising cookies to deliver personalised content and advertisements.

For users in the EEA or UK, we will not deploy non-essential cookies (including analytics or advertising cookies) without first obtaining your consent through our cookie consent management tool. You can manage your cookie preferences at any time directly through your browser settings. Most browsers allow you to refuse or accept cookies, delete existing cookies, and set preferences for certain websites. For instructions on managing cookies in your specific browser, please refer to your browser’s help documentation. Withdrawing your consent may impact your user experience and prevent you from using certain parts of our website. Essential cookies, which are strictly necessary for the operation of the website and to provide services you have requested, do not require consent under applicable law as they are required for website security, functionality and accessibility.

For what purposes do we use your personal information?

We may use personal information collected from you to:

• provide our Services
• set up and manage your account
• communicate with you by email, phone, SMS or other electronic communication
• get feedback and improve our Services and your experience
• handle complaints and disputes
• to deliver targeted advertising and remarketing to you (either directly or through our third-party vendors), where you have provided explicit consent to such marketing communications
• comply with our legal and contractual obligations or enforce our legal rights
• promote our Services to you and provide other information we think you may find interesting, where you have consented to receive marketing communications or where we have a legitimate interest to do so and you have not objected
• by aggregating and anonymising your personal information such that it can no longer identify you, to analyse, improve and promote our business and services, and
• for any other purposes for which you have provided explicit written consent, or as required or permitted by applicable law.

We will only use or process your personal information for the purposes for which we collect it and only where there is a lawful basis for such processing under applicable law. The lawful bases we rely on include: (a) your consent (which you may withdraw at any time); (b) performance of contractual obligations with you; (c) compliance with our legal obligations; and (d) our legitimate interests (such as improving our Services). For users based in the EEA or UK, we take reasonable steps to align our practices with the requirements of GDPR and UK GDPR.

Who do we disclose your personal information to and why?

We may disclose your personal information to the following categories of recipients for the purposes specified above. Where we share your personal information with third parties, we require them to respect the security of your data and treat it in accordance with applicable law through appropriate contractual arrangements. This may include:

• any business that helps us or works with us to provide our Services or operate our business, for example, service providers, technology providers, cloud-providers such as Amazon Web Services, data storage and back-up providers, payment providers, and our authorised resellers (who may provide sales and support services)
• any other person where required or permitted by applicable law (which may include, without limitation, law enforcement, regulatory authorities, courts, or other government agencies), or with your prior express consent
• in connection with, or during negotiations of, any merger, acquisition, financing, sale of assets, or other similar transaction involving all or a portion of our business, provided that the recipient enters into a written agreement to protect your personal information in accordance with this Privacy Policy and applicable data protection laws.

We do not sell your personal information.

International Data Transfers

Your personal information may be transferred to and processed in countries outside of the country you are in when you provide your information, and such countries may not provide the same level of protection as your home country. Specifically, your cloud services data will be stored on servers in Australia which may involve transfers to and processing in Australia. Your data may also be processed by staff or service providers located in New Zealand, and potentially other countries as we expand our business relationships. We will take all steps reasonably necessary to ensure that your personal information is treated securely and in accordance with this Privacy Policy and applicable data protection laws, and no transfer of your personal information will take place to an organisation or a country unless adequate safeguards are in place.

By using our Services, you acknowledge and agree to the transfer of your personal information to overseas recipients as described in this Privacy Policy. We implement appropriate technical and organizational measures in accordance with applicable data protection laws to facilitate such transfers.  

How we keep your personal information safe and secure

We are committed to keeping your personal information as safe and secure as possible and follow generally accepted industry standards to protect the personal information submitted to us, both during transmission and once we receive it. We have implemented industry-standard physical, electronic, and managerial procedures to keep personal information safe and secure and protect it from misuse, interference, loss, or unauthorised access, modification, and disclosure. However, no method of transmission over the Internet, or method of electronic storage is 100% secure. While we use reasonable efforts to maintain the security of your information to protect your personal information, we cannot guarantee its absolute security. In the event of a data breach, we will notify you and relevant authorities in accordance with and to the extent required by applicable law.

Third party sites

Our website may from time to time have links to other websites not owned or controlled by us. These links are meant for your convenience only. Links to third party websites do not constitute sponsorship or endorsement or approval of these websites. Please be aware that we are not responsible for the privacy practices of other such websites. We encourage our users to read the privacy statements of each and every website that collects personal identifiable information.

Retention of personal information

We will retain your personal information only for as long as it is necessary for the purposes set out in this Privacy Policy and in accordance with any statutory retention periods. If you reside within the EEA or UK, we will also comply with the GDPR and UK GDPR requirements regarding the retention and deletion of personal information.

Your rights regarding personal information

Depending on the law applicable to your location, you may have the following rights regarding your personal information. For individuals in the EEA or UK, these rights are provided under the GDPR and UK GDPR respectively. For individuals in New Zealand, these rights are provided under the Privacy Act 2020. For individuals in Australia, these rights are provided under the Australian Privacy Act 1988. Your rights may include:

• request erasure, restriction of processing, object to processing, and data portability
• request access to and correction of your personal information
• object to processing,
• withdraw consent

You can exercise these rights by contacting us at support@wizbang.co.nz. We will respond to your request within the timeframes required by applicable law (generally within one month for GDPR/UK GDPR requests, 20 working days for NZ Privacy Act requests, and 30 days for Australian Privacy Act requests) after verifying your identity. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant supervisory authority.

Direct Marketing

Subject to applicable law, we may contact you by telephone, regular mail, or electronically (email, SMS or via other electronic means) with promotional material and offers of products or services from us, where you have not opted out of receiving such communications. We will not share your personal information with unaffiliated third parties for their direct marketing purposes without your explicit consent. You can unsubscribe from receiving marketing messages at any time by: (a) using the opt-out function provided in the message; (b) emailing us at support@wizbang.co.nz.

How to make a privacy complaint

If you think we have not followed our privacy obligations, you can make a complaint by contacting us at support@wizbang.co.nz. We will use reasonable efforts to acknowledge your complaint and provide a substantive response within the timeframes required by applicable law in the relevant jurisdiction. You also have the right to lodge a complaint with the relevant supervisory authority:

• New Zealand residents: Office of the Privacy Commissioner (enquiries@privacy.org.nz or https://www.privacy.org.nz)
• EEA residents: Your local Data Protection Authority (contact details available at https://edpb.europa.eu/about-edpb/board/members_en)
• UK residents: Information Commissioner’s Office (https://ico.org.uk or casework@ico.org.uk)
• Australian residents: Office of the Australian Information Commissioner (enquiries@oaic.gov.au or https://www.oaic.gov.au)

If you have any questions about this policy or want to exercise your rights, please contact us at support@wizbang.co.nz or 2/5 Ceres Court, Rosedale, Auckland 0632.

Policy last updated: 27 May 2026