Privacy Policy

ZuvoHQ AutoReel Limited - Data Protection & Privacy Notice

Last Updated: 15/08/2025

Your Privacy Matters: We are committed to protecting your personal information and complying with privacy laws including GDPR, CCPA, and New Zealand Privacy Act 2020.

1. Introduction

ZuvoHQ AutoReel Limited ("we", "our", "us") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and protect your information when you use our website and services.

Data Controller: ZuvoHQ AutoReel Limited

Address: 123 Queen Street, Auckland 1010, New Zealand

Email: privacy@zuvohq.com

Phone: +64 9 123 4567

2. Information We Collect

2.1 Personal Information:

• Name and contact details (email, phone number)

• Billing information and payment data (processed securely via Stripe)

• Business information (company name, brand details)

• Project requirements and preferences

2.2 Content and Files:

• Video footage and images you provide

• Brand guidelines and creative briefs

• Communication history and project notes

2.3 Technical Information:

• IP address and browser information

• Website usage data and analytics

• Device information and operating system

• Cookies and tracking technologies

2.4 Communication Data:

• Email correspondence and support tickets

• Chat messages and consultation notes

• Feedback and review submissions

3. How We Use Your Information

3.1 Service Delivery:

• Creating and delivering your video content

• Processing payments and managing orders

• Providing customer support and communication

• Managing project timelines and delivery

3.2 Legal Basis (GDPR):

• Contract Performance: Fulfilling our service obligations

• Legitimate Interest: Improving services and customer experience

• Consent: Marketing communications and analytics

• Legal Obligation: Compliance with tax and business laws

3.3 Business Operations:

• Account management and billing

• Quality assurance and service improvement

• Fraud prevention and security

• Legal compliance and record keeping

3.4 Marketing (With Consent):

• Sending service updates and newsletters

• Promotional offers and new service announcements

• Customer satisfaction surveys

4. Data Sharing and Third Parties

4.1 Service Providers:

• Stripe: Payment processing (PCI DSS compliant)

• AWS/Google Cloud: Secure file storage and hosting

• Firebase: Authentication and user management

• Vercel: Website hosting and deployment

4.2 Analytics and Marketing:

• Google Analytics (with IP anonymization)

• Social media platforms (for marketing campaigns)

• Email marketing services (with consent)

4.3 Legal Requirements:

• Law enforcement or regulatory authorities when required by law

• Professional advisors (lawyers, accountants) under confidentiality

• Business transfers (with appropriate data protection measures)

5. Data Security

5.1 Technical Safeguards:

• SSL/TLS encryption for data transmission

• Encrypted storage for sensitive information

• Regular security audits and updates

• Multi-factor authentication for staff access

5.2 Organizational Measures:

• Staff privacy training and confidentiality agreements

• Access controls and permission management

• Regular backup and disaster recovery procedures

• Incident response and breach notification protocols

5.3 Data Breach Response:

• Immediate containment and assessment

• Notification to authorities within 72 hours (GDPR)

• Individual notification for high-risk breaches

• Post-incident review and security improvements

6. Your Privacy Rights

6.1 GDPR Rights (EU Residents):

• Access: Request copies of your personal data

• Rectification: Correct inaccurate or incomplete data

• Erasure: Request deletion of your data ("right to be forgotten")

• Portability: Receive your data in a structured format

• Restriction: Limit how we process your data

• Objection: Object to processing based on legitimate interests

6.2 CCPA Rights (California Residents):

• Know what personal information is collected

• Know if personal information is sold or disclosed

• Say no to the sale of personal information

• Access your personal information

• Equal service and price, even if you exercise your rights

6.3 New Zealand Privacy Rights:

• Access your personal information we hold

• Request correction of inaccurate information

• Complain to the Privacy Commissioner

• Understand how your information is used

7. Cookies and Tracking Technologies

7.1 Essential Cookies:

• Authentication and session management

• Security and fraud prevention

• Basic website functionality

7.2 Analytics Cookies (With Consent):

• Website usage statistics

• Performance monitoring

• User experience improvements

7.3 Marketing Cookies (With Consent):

• Personalized advertising

• Social media integration

• Conversion tracking

You can manage cookie preferences through our cookie banner or browser settings.

8. Data Retention

8.1 Retention Periods:

• Account Data: 7 years after account closure (tax requirements)

• Project Files: 2 years after project completion

• Marketing Data: Until consent is withdrawn

• Analytics Data: 26 months (Google Analytics default)

8.2 Secure Deletion:

• Permanent deletion from active systems

• Secure overwriting of storage media

• Backup data removal within retention periods

9. International Data Transfers

Some of our service providers are located outside New Zealand. We ensure adequate protection through:

• EU-US Privacy Shield certified providers

• Standard Contractual Clauses (SCCs)

• Adequacy decisions by relevant authorities

• Binding Corporate Rules where applicable

10. Contact Us and Complaints

10.1 Privacy Requests:

Email: privacy@zuvohq.com

Phone: +64 9 123 4567

Address: 123 Queen Street, Auckland 1010, New Zealand

Response Time: Within 30 days

10.2 Regulatory Authorities:

• New Zealand: Privacy Commissioner (privacy.org.nz)

• EU: Your local Data Protection Authority

• California: California Attorney General

11. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. Material changes will be communicated via:

• Email notification to registered users

• Prominent website notice

• Updated "Last Modified" date

Continued use of our services after changes constitutes acceptance of the updated policy.

This document was last updated on 15/08/2025