We value your privacy and the trust you place in us.
Last updated on 14 February 2022.
Your privacy is important to us. To better protect your privacy, we provide this notice explaining our online information practices and the choices you can make about the way your information is collected and used. To make this notice easy to find, we make it available on our homepage and at every point where personally identifiable information may be requested. We ensure you we are compliant with the New Zealand Privacy Act 2020 (“Privacy Act”) and the General Data Protection Regulation (“GDPR”) if you are from the European Union or will use our services in any of the country members.
Your consent is given when you visit our website, accept our terms, and buy and use our services. Consequently, you can withdraw your consent by not opening our website, disregarding our terms, not buying or servicing with us, and if you disagree with our Privacy Policy or any changes in the future. Once your consent is withdrawn, your personal information will not be collected anymore.
For the purpose of:
1. the GDPR: your consent withdrawal does not affect the legality of any processing activities based on such consent before its withdrawal.
2. the Privacy Act: your personal information will only be used for the purpose for which it was collected in accordance with this Privacy Policy. Once that purpose no longer needed, we will no longer use your personal information.
About GDPR:
If you are in a Member State of the European Union, you have the following rights with respect to your personal information:
a) Lodging complaints: You have the right to lodge a complaint with a ‘supervisory authority’ established by a Member State under Article 51 of the GDPR.
b) Right of rectification: You have the right to obtain from Shift72 without undue delay the rectification of inaccurate personal information. We may seek to verify the accuracy of the personal information before correcting it.
c) Right to restrict processing: You have the right to limit the ways in which we use your personal information, in particular where:
(i) you contest the accuracy of your personal information;
(ii) the processing is unlawful and you oppose the erasure of your personal information;
(iii) we no longer need your personal information for the purposes of the processing, but you require the information for the establishment, exercise, or defence of legal claims; or
(iv) you have objected to the processing of your personal information and pending the verification of whether the legitimate grounds of Shift72 override your own by a supervisory authority.
d) Right of access and portability: You have the right to request certain copies of your personal information held by us. You may also been titled to request copies of personal information that you have provided to us in a structured, commonly used, and machine-readable format and/or request us to transmit this information to another service provider nominated by you (where technically feasible).
e) Right to be forgotten: You have the right to obtain from Shift72 the erasure of your personal information without undue delay where one of the grounds set out in Article 17(1) of the GDPR apply. Please note that:
(i) we may retain some of your personal information as necessary for our legitimate business interests, such as fraud detection and prevention and enhancing safety;
(ii) we may retain and use your personal information to the extent necessary to comply with our legal obligations. For example, we may keep some of your information for tax, legal reporting, auditing, and regulatory compliance obligations; and
(iii) because we maintain our website and products to protect from accidental or malicious loss and destruction, residual copies of your personal information may not be able to be removed from our backup systems.
This notice applies to all information collected or submitted on the Shift72.com website. On some pages, you can fill out personal information, make requests, register, or create a public VOD platform for your videos. The types of personal information collected at these pages are:
a) Name and contact data: Your first and last name, email address, postal address, phone number and other similar contact information;
b) Your sensitive information;
c) Credentials: passwords, password hints, and similar security information used for authentication and account access and any information necessary to complete or fulfil our interactions with you;
d) Demographic information: Information such as your age, gender, country, preferred language, and device’s location, either precise or imprecise;
e) Subscription and licensing: Information about your subscriptions, licenses, and other entitlements;
f) Interests and favourites: Information about your interests and favourites, such as the movies and languages you prefer. In addition to those you explicitly provide, your interests and favourites can also be inferred or derived from other information we collect;
g) Content consumption: Information about media content (e.g. TV, video, music, audio, textbooks, apps, and games) you access through our products or services;
h) Searches and commands: Search queries and commands when you use Shift72 products or services with search or related productivity functionality;
i) Contacts and relationships: Information about your contacts and relationships if you use a Product or Service to share information with others, manage contacts, communicate with others, or improve your productivity;
j) Content: Content of your files and communications you input, upload, receive, create, and control through your use of our products or services;
k) Feedback and ratings: Information you provide to us and the content of messages you send to us, such as feedback, survey data, and product reviews you write;
l) Your company and work-related information including job title and work location; and
m) Any information you choose to give us.
When you disclose your personal information to us it must be accurate, complete, up-to-date, and not misleading. If you give us personal information about someone else, then you must be authorised to do so and you must tell that person about this Privacy Policy.
We use the information you provide about yourself when joining Shift72 to complete your profile. We do not share this information with outside parties except to the extent necessary to set up your promotion page and profile. Your email, date of birth (DOB) and credit card details are not shown publicly. We use return email addresses to answer the email we receive. Such addresses are not used for any other purpose and are not shared with outside parties. We use non-identifying and aggregate information to better design our website and to share with advertisers.
For example, we may tell an advertiser that X number of individuals visited a certain area on our website, or that Y number of men and Z number of women filled out our registration form, but we would not disclose anything that could be used to identify those individuals.
Finally, we never use or share the personally identifiable information provided to us online in ways unrelated to the ones described above without also providing you an opportunity to opt-out or otherwise prohibit such unrelated uses
All customer personal information collected by Shift72 is used for our business functions and activities. These include:
We may also collect from its customers personal information relating to employees and customers; for example, payroll information. This personal information is used so that we can facilitate provision of the services our customers have requested.
Occasionally, Shift72 uses aggregated personal information derived from use of our products and services to provide us with anonymous demographic and customer usage information. This information does not identify individuals. This anonymous, aggregated information is used to improve our services and products.
From time to time, we may disclose your personal information to third party service providers, in both New Zealand and overseas, whom we engage to assist us in its business functions and activities (for example providing customer services, sending marketing communications, and providing maintenance services for our website, products and services). We will require our third-party service providers to comply with the terms of our Privacy Policy.
Shift72 is a New Zealand based company. Under Articles 44-50 of the GDPR, personal data cannot be transferred to third countries unless the country ensures an adequate level of protection. New Zealand is on the ‘approved list’. If a country is on this approved list, then data controllers may transfer personal data to such countries, in the same way as if the transfer were being made within the European Economic Area (EEA).
To prevent unauthorized access, maintain data accuracy, and ensure the correct use of information, we have put in place appropriate physical, electronic, and managerial procedures to safeguard and secure the information we collect online.
The “data controller” (for the purpose of the GDPR) and the “agency” (for the purpose of the Privacy Act) that will be collecting, using, disclosing, storing, and processing your personal information is Shift72 Ltd.
All Shift72 ICT devices, storage and channels are subject to continuous monitoring, logging analysis, and audit. We may choose to contract a third party to perform these functions. All personal information is stored at secure premises using the latest quality security protocols. Our security systems are regularly reviewed and updated to maintain the integrity of the security protocols.
Protecting the privacy of the very young is especially important. For that reason, we do not knowingly collect or maintain information at our website from children (as defined by local laws), and no part of our website is targeted towards children.
Registered users can access all your personally identifiable information that we collect online and maintain by visiting your Account Settings page. We use this procedure to better safeguard your information. You can correct factual errors in your personally identifiable information by sending us a request that credibly shows error. To protect your privacy and security, we will also take reasonable steps to verify your identity before granting access or making corrections.
Shift72 adheres to The Video Privacy Protection Act of 1988.
It is quick and easy to cancel your account. Simply contact Shift72 and we will promptly cancel your account.
Should you have other questions or concerns about these privacy policies, please call us at +64 7 838 1114 or send us an email to shift72-support@shift72.com. For more contact options, please visit our Contact page.
If you think that your privacy rights have been breached, you can make a written complaint to Shift72’s Privacy Officer by email at privacy@shift72.com, or otherwise contact the NZ Privacy Commissioner.
11.1 Cookies are small text files placed on your computer, mobile, tablet, or any other electronic device to store data that can be recalled by a web server in the domain that placed the cookie. This data often consists of a string of numbers and letters that uniquely identifies your computer, but it can contain other information as well. Some cookies are placed by third parties acting on our behalf. We may use cookies and similar technologies to store and honour your preferences and settings, enable you to sign-in, provide interest-based advertising, analyse how our products perform, and fulfil other legitimate commercial purposes.
11.2 Shift72 may use cookies and similar technologies for several purposes, depending on the context, product or service including:
a) to help us understand your preferences based on previous or current site activity, which enables us to tailor our product and service offerings to you;
b) to help us to understand and improve how our products and services perform;
c) to help us compile aggregate data about site traffic and site interaction so that we can offer you a better user experience;
d) to authenticate you when you use our products or services;
e) to process information that helps us secure our products, as well as detect fraud and abuse.
11.3 To enable some of the features and functionality of our website, products and services, you will need to permit Shift72 to place cookies on your device. If you choose not to, then those features and functionality will not be available to you. You can remove or block cookies by using the settings in your browser but it may affect your ability to use our website, products or services.
12.1 Google Analytics
We use Google Analytics to help us to understand how you use our site and tools, which allows us to know how to improve our products for your benefit. It follows your progress through the website, collecting anonymous data on where you have come from, which pages you visit, and how long you spend on the site. Google then stores this data in order to create reports. But don’t worry; they do not store your personal data. Google will track your IP address, and it may be transmitted to and stored by Google on servers in the United States. Google may use this information for the purpose of evaluating your use of the website, compiling reports on website activity for us, and providing other services relating to website activity and Internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. Google will not associate your IP address with any other data held by Google.
By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above. For more information see Google’s privacy policies.
Google Analytics services are governed by the Google Analytics Terms of Service
12.2 Intercom
We use third-party analytics services to help understand your usage of our services. In particular, we provide a limited amount of your information (such as sign-up date and some personal information like your email address) to Intercom, Inc. (“Intercom”) and utilise Intercom to collect data for analytics purposes when you visit our website or use our product. As a data processor acting on our behalf, Intercom analyses your use of our website and/or product and tracks our relationship by way of cookies and similar technologies so that we can improve our service to you. View more information on Intercom’s use of cookies.
We may also use Intercom as a medium for communications, either through email, or through messages within our product(s). View more information on the privacy practices of Intercom.
Intercom’s services are governed by Intercom’s terms of use.
12.3 Mandrill
We use Mandrill to send transactional emails, such as a welcome email, purchase receipt, or forgot password email. We provide a limited amount of your information, such as your email address, to The Rocket Science Group LLC, who operate Mailchimp and Mandrill. We utilise Mandrill to collect data for analytics purposes when you view the email. View more information on the privacy practices of Mandrill.
Mandrill’s services are governed by Mailchimp’s terms of use.
12.4 Amazon Web Services
We use Amazon Web Services (AWS) who provide us with cloud storage solution. AWS has demonstrated compliance with a range of internationally recognised standards for content, data and infrastructure security, such as information security management system- ISO-27001, System and Organization Controls Report- SOC1/2, and The Payment Card Industry Data Security Standard; in addition, AWS has demonstrated alignment with the Motion Picture Association of America (MPAA) Content Security Best Practices and the AWS infrastructure is compliant with all applicable MPAA controls. View more information on AWS’ privacy policy.
12.5 Stripe
We use a third party payment processor, Stripe, to process payments made to us. In connection with the processing of such payments, we do not retain any personally identifiable information or any financial information such as credit card numbers. Rather, all such information is provided directly to our third party processor, Stripe, whose use of your personal information is governed by their privacy policy.
Stripe is certified to PCI Service Provider Level 1, the most stringent level of certification.