Privacy Policy

1. Updates to this Policy

2. Collection of Personal Information

3. Purposes for which we Collect, Use and Disclose Personal Information

4. Marketing Communications  and Dissclosure of Personal Information

5. Subprocessors

6. Management of Personal Information

7. Access and Correction of Personal Information

8. Complaints

9. Governing Law

This privacy policy (Policy) applies to your use of Infusion Software and services, and any Personal Information submitted through our website www.infusion.nz or where we tell you this Policy applies.

Infusion Business Software Limited (“we”, “us” or “our”) take our obligations in respect of privacy seriously. In this Policy, “you” and “your” means the individual providing Personal Information to us, and includes a registered user of our software or services.

This Policy provides information relating to how we collect, hold, use and disclose your Personal Information. “Personal Information” has the same meaning as in the New Zealand Privacy Act 2020 (Privacy Act). In essence, that is information relating to an individual that can be used to identify that individual or which is linked to an identified individual.

By submitting your Personal Information and/or registering to use our software or services you agree to the terms of this Policy.

1. Updates to this Policy

1.1 This Policy will be reviewed from time to time to take into account new laws and technology, changes to our operations and practices and the changing business environment. The most current version of this Policy is located on our website.

1.2 Use and disclosure of Personal Information collected from you is subject to the Policy in effect at the time such Personal Information is collected, unless otherwise agreed.

2. Collection of Personal Information

2.1 We collect Personal Information when you register to use our software or services (including when you create, or someone on your behalf creates, an account), when you make an enquiry with us, when you communicate with us, including through our website, or when you interact with the marketing communications we send you.

2.2 In general, the Personal Information we collect and hold includes (but is not limited to): your name, email address, phone number and any query you make with us.

2.3 If your Personal Information that is requested is not provided, we may not be able to provide the relevant services to you, or respond to your enquiry, or you may not be able to use our software.

2.4 Your Personal Information may also be collected from any third parties you authorise us to contact, or as otherwise permitted by the Privacy Act.

2.5 If you access the website, our software or services from outside of New Zealand, you agree that any Personal Information you provide us is subject to this Policy and the Privacy Act.

3. Purposes for which We Collect, Use and Disclose Personal Information

3.1 We may collect, use and disclose your Personal Information for the following purposes:

3.1.1 so that you can use our services, including the software’s functionality;

3.1.2 so we can meet our respective obligations under any relevant terms and conditions;

3.1.3 to provide our marketing material to you, including communications around training, support and software upgrades;

3.1.4 to help support, manage and enhance our services and software offerings;

3.1.5 to investigate any matter concerned with the use of our services or software, including so we, or other authorised agencies can detect, investigate, prevent or address security or technical issues;

3.1.6 to protect our property, legal rights, or that of others;

3.1.7 to comply with our legal obligations;

3.1.8 to carry out matters noted in the section below on “Management of Personal Information”; and

3.1.9 any other purpose made known to you when collecting the Personal Information.

3.2 We may also use and disclose your Personal Information in any other circumstances authorised by the Privacy Act.

4. Marketing Communications and Disclosure of Personal Information

4.1 We may disclose your Personal Information to third party providers to assist us to send you our marketing communications. We provide those third parties with your name and email address.

4.2 The relevant third party will collect information about your interaction with the communication. The information collected includes whether you opened the email, the links you clicked on, the webpages viewed and the dates and times of such access and activity. Information about the device used to access the email may also be collected. The third party provides or makes this available to us for the various purposes outlined in this Policy. They also hold this information on our behalf.

4.3 While these third parties are primarily collecting this information on our behalf, some of these third parties may use the information for their legitimate business interests, such as to provide, support and improve their services and to undertake data analytics projects. However, we do not permit them to use your Personal Information to market their or any other personʼs services to you.

4.4 We use third-party service providers, including Mailchimp and HubSpot, to assist us in sending marketing communications. These providers may collect, store, and process personal information on our behalf.

As these providers are based overseas (including in the United States and other jurisdictions), your personal information may be transferred to and held in countries that may not have the same level of data protection as New Zealand.

We take reasonable steps to ensure that any overseas providers we use have appropriate safeguards in place to protect your personal information in accordance with applicable privacy laws.

You authorise us to disclose your personal information to these providers for the purpose of sending you marketing communications. For more information, please refer to their privacy policies:
Mailchimp Privacy Policy
HubSpot Privacy Policy

4.5 If you do not wish your personal information to be handled by these providers, you should not subscribe to, or should unsubscribe from, receiving marketing communications from us. You may unsubscribe at any time by using the unsubscribe facility included in any marketing email we send

4.6 We will not be able to provide marketing communications to you if you unsubscribe or do not agree to our use of third parties to assist us with marketing communications.

5. Subprocessors

5.1 We engage third-party organisations (“Subprocessors”) to process Personal Information on our behalf in connection with the provision of our software and services. We only engage Subprocessors who provide sufficient guarantees to implement appropriate technical and organisational measures so that processing meets the requirements of applicable privacy laws, including the Privacy Act.

5.2 Before engaging a Subprocessor, we conduct due diligence to assess their privacy and security practices. We ensure that appropriate contractual obligations are in place, including obligations to process Personal Information only on our documented instructions and to maintain appropriate security measures.

5.3 Where a Subprocessor is located outside New Zealand, we take reasonable steps under Information Privacy Principle 12 of the Privacy Act to ensure the Subprocessor is subject to privacy laws, binding contractual obligations, or other mechanisms that provide comparable protection to the Privacy Act.

5.4 The current list of Subprocessors we engage is set out in the table below. We will update
this list when we add or remove Subprocessors.

5.5 You may request an up-to-date list of our Subprocessors by contacting us using the details in section 7 below.

6. Management of Personal Information

6.1 Personal Information collected by us is held by us. Our address is set out below.

6.2 We may transfer Personal Information to third parties (including Subprocessors) to perform services on our behalf, to process the information for us, or to hold it on our behalf. These third parties may be located offshore. Except to the extent otherwise stated in this Policy, we will not authorise them to use such information for their own purposes.

6.3 The Privacy Act requires us to take reasonable steps to protect the security of Personal Information. We take reasonable steps to protect Personal Information held from misuse, loss and from unauthorised access, modification or disclosure. Our personnel are required to respect the confidentiality of Personal Information and the privacy of individuals.

6.4 We implement appropriate technical and organisational security measures, including encryption in transit and at rest, access controls, and regular security assessments, to protect your Personal Information.

6.5 In the event of a privacy breach that is likely to cause serious harm, we will notify the Office of the Privacy Commissioner and affected individuals as required under Part 6 of the Privacy Act.

6.6 Where we no longer require your Personal Information for a permitted purpose under the Privacy Act, we will take reasonable steps to delete it.

7. Access and Correction to Personal Information

7.1 You have the right to seek access to your Personal Information held by us and to ask for it to be corrected if you believe it is inaccurate, incomplete, misleading, or not up to date. Subject to the exceptions set out in the Privacy Act, you may exercise these rights by contacting us as follows:

Email: support@infusion.nz
Address:
Level 1, 128 Wrights Road
Addington
PO Box 8197
Christchurch 8440
New Zealand

7.2 We will respond to your access or correction request within 20 working days of receiving it, as required by the Privacy Act.

7.3 We endeavour to ensure that the Personal Information we hold is accurate, complete, and up-to-date. If any of the Personal Information you have provided to us changes, we encourage you to contact us to update that Personal Information.

7.4 If a dispute arises between us that we cannot resolve, you may contact the Office of the Privacy Commissioner. You also have the right to make a complaint to the Privacy Commissioner under the Privacy Act.

8. Complaints

8.1 If you believe we have breached the Privacy Act or this Policy, you may make a complaint to us using the contact details in section 7 above. We will acknowledge receipt of your complaint within 5 working days and endeavour to resolve it within 20 working days.

8.2 If you are not satisfied with our response, you may refer the matter to the Office of the Privacy Commissioner, whose details are:

Office of the Privacy Commissioner
Website: https://www.privacy.org.nz/
Phone: 0800 803 909

9. Governing Law

9.1 This Policy is governed by the laws of New Zealand, including the Privacy Act 2020 and any amendments thereto.

Last Reviewed: 17/06/2026