8ai has a firm commitment to maintaining the privacy of web site users and customers.

In this policy we explain how we handle information about you that we gather, store and use. 

In this policy, “Personal Information” means the same as it does in the Privacy Act 1993 (which is: information about an identifiable individual). Other terms that have capital letters in this Privacy Policy but aren't defined here carry the same meaning as in the Terms of Service. 

1. Use of your information

1. 8ai does not sell or rent your Personal Information to third parties. Personal Information is information about an identifiable individual, as defined by the New Zealand Privacy Act 1993.

2. This privacy policy applies to Personal Information we collect from visitors to our Website or Service, our customers and other people with whom we deal directly.

3. 8ai uses the information we collect to help us enforce or apply our terms and conditions, to protect the rights, property, or safety of 8ai, our users, or others, for internal research purposes, for promoting and marketing our services to you, and for any other use that you authorise.

4. 8ai uses information we hold about you to provide you with a more personalised experience, such as providing personal customer support, and suggesting content to you based on your queries.

5. We release Personal Information only when we believe release is appropriate for legal compliance and law enforcement (including to government agencies with statutory law enforcement responsibilities); to facilitate court proceedings; enforce or apply our terms and conditions; or protect the rights, property, or safety of 8ai, our users, or others. Government agencies with statutory roles enabling them to request data from us include but are not restricted to the Police, Inland Revenue and the Ministry of Business, Innovation and Employment.

6. You can contact 8ai to ask whether your information has been provided, or with any other privacy-related question.

7. Where 8ai uses third parties to provide services, we may provide those third parties with some of your information if it is required to fulfil those services. For example, we use third parties to provide. We also use third party software (such as customer relationship management, marketing automation and accounting software) that holds your information, sometimes overseas.

2. What personal information do we collect

1. We collect the following types of personal data:

1. Names

2. Email addresses

3. Phone numbers

4. Any other data you voluntarily provide

2. When you register for, or login to, an account on our website or service, we collect your name and email address and any other information we require or ask for to set you up with an account.

3. When you update your user profile, we collect any information that you provide us.

4. When you fill in a contact or enquiry form on our website, call us, meet us in person or otherwise contact us, we collect your name, email address, and/or phone number and any other information you choose to provide to us.

5. We use a third party service provider to process credit card transactions and other payment information. We do not have access to your credit card information. The name of this third party provider will generally be displayed when you are requested to enter your credit card information. You can see further information about how they process your credit card information in their privacy policy.

6. When you access and use our website or related services we may automatically collect information about your device and usage of our website, products and services, including your operating system, browser type, time spent on certain pages of the website, pages visited, links clicked, and/or language preferences.

7. Some of this data is collected through third party tools and/or the use of cookies, web beacons and similar storage technologies. Please refer to our cookie policy below for further information, including information on how you can disable these technologies.

8. We do not intend to collect Personal Information from or about children aged under 16. If you have reason to believe that we have collected Personal Information from or about a child under the age of 16, please contact us at privacy@8ai.com.

3. GDPR

1. For the purposes of the GDPR and the UK GDPR, our customers are the data controller when storing or otherwise processing User Data that we hold solely for the purpose of providing our Service and we are the data processor.

2. We are the data controller when storing or otherwise processing User Data that we use for our own purposes.

3. We only process User Data as authorised by our customers in our agreements with our customers that govern the processing of User Data (as applicable).

4. Unless required otherwise under applicable law, if we receive any request or enquiry relating to User Data that we hold solely for the purpose of providing our SaaS service, we will forward this request to our relevant customer. If we receive any requests or enquiries relating to User Data that we use for our own purposes, we will deal with these requests or enquiries as set out in this privacy policy.

5. A business that supports our website, products and services may be located outside of New Zealand (the country where we are incorporated) and also outside of the country where you are located. This means that the Personal Information we collect may be transferred to, and stored in, a country outside of New Zealand and the country where you are located.

6. If you are located in the European Union (EU), your Personal Information may be transferred outside of the European Economic Area (EEA). Under the GDPR, the transfer of Personal Information to a country outside the EEA may take place where the European Commission has decided that the country ensures an adequate level of protection. In the absence of an adequacy decision, we may transfer Personal Information if other appropriate safeguards are in place.

7. If you are located in the United Kingdom (UK) your Personal Information may be transferred outside of the UK. Under the UK GDPR, the transfer of Personal Information to a country outside the UK may take place where the European Commission (as at 31 December 2020) or the UK government has decided that the country ensures an adequate level of protection. In the absence of an adequacy decision, we may transfer Personal Information if other appropriate safeguards are in place.

8. Where we transfer Personal Information outside the EEA or UK, it will only be transferred to countries that have been identified as providing adequate protection for EU/UK data, or to a third party where approved transfer mechanisms are in place to protect your Personal Information (e.g. by entering into the European Commission’s Standard Contractual Clauses). For further information, please contact at privacy@8ai.com.

9. Some of the Personal Information we collect is processed in New Zealand. New Zealand is recognised by the European Commission as a country that has an adequate level of data protection and we rely on this decision in transferring Personal Information to New Zealand.

10. Our lawful basis for processing (as that term is defined in the GDPR and UK GDPR) Personal Information that we collect, use and disclose depends on the Personal Information collected and the context in which we collect it. Generally, we collect Personal Information from you where we have your consent, where processing is necessary for the performance of a contract to which you are party or in order to take steps at your request prior to entering into a contract, or where processing is necessary for the purposes of our legitimate interests (except where such interests are overridden by your interests or fundamental rights and freedoms). Where we process Personal Information based on your consent, you may withdraw your consent at any time.

11. Our lawful basis for processing Sensitive Information is your consent. If you have any question about the legal basis on which we process Personal Information or need further information, please contact us at support@8ai.com.

12. If you are located in the European Union or the United Kingdom, your rights in relation to your Personal Information include: right of access, right to rectification, right to erasure, right to withdraw consent, right to restrict processing, right to object to processing, rights related to automated decision-making, including profiling, right to data portability, the right to complain to a supervisory authority

13. If you would like to exercise any of your rights, please contact us at support@8ai.com. If you are not satisfied by the way we deal with your query, you may refer your query to your local data protection authority.

4. Cookies and local storage

1. 8ai uses various technologies, including cookies and local storage, to collect and store information about you when you visit 8ai.

2. Cookies and local storage allow us to store information (including your Personal Information) in a file on the device you use to access 8ai. We use cookies and local storage to deliver information and fresh content specific to your interests and to improve the experience of using 8ai. Cookies and local storage are widely used.

3. 8ai uses "session" cookies to temporarily store information to help you use 8ai. This information is used to deliver the right content to you as you use 8ai. Session cookies expire immediately when you close your browser or are deleted after 30 minutes of no activity on 8ai.

4. 8ai also uses "persistent" cookies and local storage to personalise the user experience, to help protect our members and to provide us with research information (such as how often members visit 8ai each month). Persistent cookies allow us to track users on 8ai and help us identify users abusing the Service.

5. Third party links

1. 8ai contains non-advertising links to a variety of third party sites to enhance the member experience. 8ai has no control of either the content or privacy policies of such sites, nor should such links be considered an endorsement of these sites except where otherwise noted.

6. Internet statistics and analytics

1. 8ai uses Google Analytics to better understand the behaviour of visitors to our Website or Service, and to improve our Website and Service. For more information, view Google Analytics' information on safeguarding your data.

2. 8ai uses Google Analytics Demographics and Interest reporting to give us insight into users behaviour, and to serve you with more relevant content. Information we collect through this reporting service is in aggregate form, and anonymous. You can opt out of Google Analytics Display Advertiser Features here.

7. Updates to our information practices

1. From time to time, we make changes to our information practices or alter the functionality of our Website or Service.

2. We update this statement from time to time, so we encourage you to periodically review this page for the latest information on privacy practices at 8ai.

3. If you have any questions about our privacy policies or any other matter, please contact us at support@8ai.com.

This policy was last updated on the 27th May 2024