Truestock is committed to respecting the privacy and security of information received from User(s) of our website and services.
We have prepared this Privacy and Data Policy to inform Users how we comply with legal requirements relating to privacy, how we collect, use, disclose or transfer Personal Information supplied by Users or collected by us and the ways in which Users can protect their privacy. Our Privacy and Data Policy also specifies other requirements, such as how Users may access, correct and delete information held about them.
By using our services, or accessing our website, Users agree to comply with the terms and conditions of this Privacy and Data Policy and agree that Truestock may process (i.e. collect, use, store, transfer, disclose or otherwise process) User's Personal Information in accordance with this Privacy and Data Policy (as well as for any other use authorised by the User).
Our Privacy and Data Policy explains:
- What information we collect and how;
- How we use Personal Information;
- Who we share Personal Information with and why;
- The steps taken to protect Personal Information under our control;
- Users' data protection rights;
- Links and connections to third party services;
- International data transfers;
- How Truestock retains and deletes Personal Information;
- How to access and update Personal Information; and
- How to contact us.
1. USER CONSENT
Truestock provides an online image licensing service, and related services, including products and services supplied by third party providers (together, “our services”). We collect Personal Information in order to be able to provide and improve our services, and for the other uses described below.
By using our services or providing Personal Information to us, Users consent to our collection, storage, use and disclosure of Personal Information (including any sensitive information provided) in accordance with this Privacy and Data Policy.
2. INFORMATION WE COLLECT
There are three ways we collect information:
- Information Users give us.
- Information we collect when Users use our services.
- Information we collect from third parties.
(a) Information Users Give Us
In order to purchase or use our services, a User must provide us with certain contact, billing and Personal Information including (but not limited to) name, address, phone number, email address and other User information. Users may also at times provide financial information.
Users may also provide us with information when they:
- Register with us;
- Create User accounts and logins;
- Participate in surveys or promotions we organise or promote;
- Communicate with us about image licensing and related matters;
- Subscribe to receive the latest news on our services, and the goods and services of our partners and third party service providers; or
- Contact our support team.
(b) Information We Collect from Use of Our Services
We may automatically collect information (which may include Personal Information) when Users interact with our website, use our services or communicate with us or our partners. This information may include:
- System information: We may collect information about User system(s) including, but not limited to, the User operating system, applications, IP address(es) and other User system environment information.
- Usage information: We collect information about how Users and their system environment interact with our services. Information that may be collected includes:
- Information relating to the features Users use;
- The performance of the services and any problems experienced by Users;
- The pages that Users visit on our website;
- Website content accessed by Users;
- Length of the Users' stay on a specific page; and
- Browser information.
- Location: When Users use our services (including our website), we may collect and process information about the User's location. We use various technologies to determine location, including IP addresses and web analytics.
- Device information: When Users use some of our services, we may receive information about the User's device, such as the hardware model, operating system version, unique device identifier and mobile network information (including phone number).
For example, when Users visit our website, we collect information about the pages visited, the User's browser and the User's device. A cookie is a small element of data that a website can send to the User's browser, which may then be stored on the hard drive (session ID cookies will terminate once Users simply close the browser, persistent cookies may however be stored on the User's hard drive for an extended period of time). A cookie does not identify a User personally, but it does identify the User's computer. Cookies allow us, among other things, to monitor traffic patterns, store User preferences and settings, analyse how our services are performing and enable Users to login. Users should be aware that most web browsers are set to accept cookies by default, but allow settings to be adjusted to remove or block cookies. Please note however that rejecting or removing cookies could affect the availability and functionality of our website features, or our services.
- Interest-based advertising (IBA): IBA allows us to deliver targeted advertising to Users of our services. IBA works by showing you advertisements that are based on the type of content you access or read. For example, as you browse our website, one of the cookies placed on your device will be an advertising cookie so we can better understand what sort of pages or content you are interested in. The information collected about Users' devices enable us to group Users with other devices that have shown similar interests. We can then display advertising to categories of Users that is based on common interests.
- Analytics and advertising: Our website may use the following analytics and advertising services to assist our marketing and promotional activities:
Google Analytics: For the purpose of customising and continually optimising our website, we use Google Analytics, a web analytics service provided by Google Inc ("Google"). In this service, pseudonymised usage profiles are created and cookies are used to generate information about your use of this website such as browser type / version, operating system, referrer URL (the previously visited page), IP address for your computer or device, date and time. This information is transmitted to a Google server in the US and stored there. The information is used to evaluate the use of our website, to compile reports on website activity and to provide other services related to website activity and internet usage for the purposes of market research and our website design. This information may also be transferred to third parties if required by law or if third parties process this data. Under no circumstances will your IP address be merged with any other data provided by Google. The IP addresses are anonymised. You can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=en). For more information about privacy related to Google Analytics, see the Google Analytics information at https://support.google.com/analytics/answer/6004245?hl=en.
- Social Media Plug-ins: We may use social media plug-ins to make our company better known, and personalise usage, and to assist with registration and sign in for User accounts.
- Other Third Party Service Providers: We may use other third party service providers for the following reasons:
- To assist our communications and other interactions with people at Truestock and Users;
- Network monitoring,
- Website hosting;
- Data processing, storage and management;
- Data collaboration;
- Data analysis and report automation;
- To conduct audits;
- To create, manage and send emails and surveys to Users for advertising and marketing;
- User account and password management, storage and security;
- Domain name, VPN and proxy software, service and support; and
- Mobile and wireless connectivity.
Consent to Disclosure/Collection: By using our website or otherwise interacting with us, you:
- Acknowledge that, for information transmitted to Google (through use of Google Analytics, AdWords, cookies or similar technology), to the Social Media Plug-Ins described above, and to the Other Third Party Service Providers described above, those third parties may not be required to protect the information in a way that, overall, provides comparable safeguards to those in the Privacy Act 2020; and
- Authorise the disclosure of your Personal Information to those third parties, or collection of your Personal Information by those third parties.
(c) Information We Collect from Third Parties
We work closely with third parties (for example, our suppliers and service providers) in order to be able to develop and supply our services, and provide them to Users.
We may receive the same kinds of information described in (a) and (b) above from third parties.
Personal Information Received from Users about Others
When using our website or services, Users may disclose, and we may collect, Personal Information about someone else. For example, data supplied by Users may contain Personal Information relating to the customers or employees of Users.
Before disclosing Personal Information to us about someone else, Users must ensure that they have obtained sufficient consent to disclose that information to us, and that, without taking any further steps required by applicable data protection or privacy laws, we may collect, use, transfer and disclose such information for the purposes described in this Policy.
Users shall remain responsible for all Personal Information collected and processed by the User, and for compliance with applicable privacy and data protection laws.
3. HOW WE USE PERSONAL INFORMATION
We collect and use Personal Information in order to be able to provide and improve our services.
We also use Personal Information to:
- Communicate, interact and build our relationship with Users, including to better understand User needs and interests, and ensure a quality experience for Users;
- Monitor, develop or optimise the performance of our services;
- Protect and enhance the safety and security of our services and Users;
- Provide information and technical support;
- Carry out billing and licence administration;
- Market and make recommendations on our services;
- Allow our partners and third party providers to provide their services and support to Users;
- Conduct, manage, develop and protect our business;
- Enforce our licensing terms and contributor agreements;
- Comply with laws and regulations in applicable jurisdictions;
- Verify Users' identities and prevent fraud or other unauthorised or illegal activity; and
- Enable third parties to provide services to us.
4. WHO WE SHARE INFORMATION WITH
We share information, including Personal Information, as necessary to provide Users the service requested or authorised. For example, we may share information with:
- Banks and other entities which process payment transactions when a payment is made;
- Affiliates, subsidiaries and related companies;
- Our partners and third party providers to provide products and services to the User, to communicate with Users (for example, information shared with communication service providers), to provide Users with information on the performance of our services or the services supplied by our partners and third party providers, or to provide Users with remote access or to provide notifications;
- To our partners and advertisers to provide tailored product information and advertising that we believe may be relevant to the User;
- Our service providers or suppliers acting and working on our behalf. For example, companies we have hired to assist in protecting and securing our systems and services may need access to Personal Information to provide those services. In such cases, we will require these entities to abide by our data privacy and security requirements, and restrict use of any Personal Information received from us;
Other third parties, when we have a good faith belief that doing so is necessary to:
- Comply with any applicable law, regulation, legal process or enforceable governmental request;
- Protect our Users;
- Operate and maintain the security of our services, including to prevent or stop an attack on our computer systems or networks;
- Detect, prevent or otherwise address fraud; or
- Protect our rights and property, including enforcing our licensing terms and contributor agreements.
- A purchaser, as part of a corporate transaction such as an acquisition, merger or sale of assets.
- Not share Users' Personal Information with any organisation apart from us; and
- Hold Users' Personal Information securely and retain it for the period we instruct.
We may also share or use non-Personal Information (i.e. information that is related to a Person but does not personally identify that individual, such as aggregated, anonymised or de-identified data) publically or with third parties, such as our partners or third party suppliers. For example, we may share or use information publically to show trends about the general use of our services. This data or information will in no way identify Users or any other individual.
5. STEPS TAKEN TO PROTECT PERSONAL INFORMATION
Protecting the security of User Personal Information is of the utmost importance to Truestock. We maintain a variety of safeguards and procedures in order to protect Personal Information from unauthorised access, use, interference, modification or disclosure.
For example, we store Personal Information on computer systems that have password-controlled access and use encryption techniques. We also use intrusion detection technologies to monitor and prevent unauthorised access.
Users' Personal Information will only be accessed by people at Truestock who need to use the information for the purposes discussed above.
We use a SSL VPN (Secure Sockets Layer Virtual Private Network) to ensure that only authorised personnel at Truestock are given remote access to our computer systems.
Some of our services do however require use of the internet, and the internet is not itself a secure environment. We therefore cannot give an absolute assurance or guarantee that User information will be secure at all times. Transmission of information over the internet or third-party networks is at the User's own risk. We will notify Users at the first reasonable opportunity if we discover or are advised of a material security breach which has resulted in unauthorised access, disclosure or loss of User Personal Information.
To help maintain the security of information, Users agree to keep their passwords and account details private and confidential.
6. USERS' DATA PROTECTION RIGHTS
Under data protection and privacy laws, Users have rights regarding the Personal Information that we hold/collect. The rights available to Users depend on our reason for processing Users' Personal Information. These rights include:
- Right of access: Users have the right to ask us for copies of their Personal Information. This right always applies.
- Right to correction: Users have the right to ask us to update or correct information they think is inaccurate. Users also have the right to ask us to complete information that the User thinks is incomplete. Users are responsible for ensuring that Personal Information provided to us is accurate, complete and up-to-date. We will take reasonable steps to ensure that any further Personal Information that we collect (i.e. information obtained from other sources) is accurate, up-to-date, complete and not misleading.
- Right to erasure: Users have the right to ask us to erase their Personal Information in certain circumstances.
- Right to restriction of processing: Users have the right to ask us to restrict or cease the processing of their information in certain circumstances. This may (depending upon the circumstances) include the collection of Personal Information from third parties, collection of sensitive information, disclosure of Personal Information to third parties, transfer of Personal Information overseas, or processing of Personal Information in a particular way, or for a particular purpose, including direct marketing.
- Right to data portability: This only applies to information Users have given us. Users have the right to ask that we transfer the information Users have given us from one organisation to another, or give it to the User. This right only applies if we are processing information based on Users' consent, or under (or in talks about entering into) a contract and the processing is automated.
We are committed to full compliance with the Unsolicited Electronic Messages Act 2007.
By subscribing to email communications, or otherwise providing an email address, Users consent to receiving emails which promote and market our website and services, or the products and services of others, from time to time.
Users can unsubscribe from our email communications at any time by clicking the "Unsubscribe" link in any promotional or marketing email, or by emailing firstname.lastname@example.org, and include the words 'Attention: The Privacy Officer'.
Once a User has unsubscribed from the email communications, the User will be removed from the corresponding email/distribution list as soon as is reasonably practicable.
8. LINKS AND CONNECTIONS TO THIRD PARTY SERVICES
Disclosure of Personal Information by Users to third party service providers is at the User's own risk, and we encourage Users to read the privacy policies applicable to these third-party services. We are not responsible for the security or privacy of any information collected by these third-parties.
9. INTERNATIONAL DATA TRANSFERS
When we disclose, use or store data, it may be transferred to, and processed in, countries other than New Zealand. In those countries, there may be differences with New Zealand's privacy laws.
- Other Third Party Service Providers: We also use the other Third Party Service Providers described in part 2(b) of this Policy.
This means that Users' Personal Information may be transferred outside of New Zealand. However, where we disclose Personal Information to a third party in another country, we place or obtain safeguards to ensure Users' Personal Information is protected (except as expressly disclosed in this Policy). Where Users' Personal Information is transferred outside New Zealand, it will (except as expressly disclosed in this Policy) only be transferred to:
- Countries that have been identified as being subject to privacy laws that, overall, provide comparable safeguards to those under privacy laws in New Zealand); or
- A foreign Person or entity where we have transfer mechanisms in place to protect Users' Personal Information; or
- A foreign Person or entity that we believe on reasonable grounds is subject to the Privacy Act 2020 (NZ), or is a participant in a prescribed Binding Scheme, or is subject to privacy laws of a Prescribed Country; or
- A recipient that has agreed to data protection and privacy commitments that, overall, provide comparable safeguards to those under privacy laws in New Zealand. For further information, please contact us using the details set out in the contact section below.
10. RETENTION AND DELETION OF PERSONAL INFORMATION
The period of time for which we hold Personal Information that we have collected varies according to what the Personal Information is used or required for, and whether we have an ongoing need to retain it (for example, to provide Users with a service they have requested or to comply with applicable legal requirements such as financial record-keeping legislation).
Unless there is a legal requirement or justification for us to keep the Personal Information, we will retain it for no longer than is necessary:
- To provide the services requested by the User;
- As part of our usual business record-keeping practices;
- To fulfil the purpose(s) for which the Personal Information was originally collected;
- In accordance with our internal retention policies and practices; or
- For any other purpose(s) authorised by the User.
11. ACCESSING AND UPDATING USER PERSONAL INFORMATION
Users are responsible for ensuring that Personal Information provided to us is accurate, complete and up-to-date. This includes personal or sensitive information contained in their User content. We will also take reasonable steps to ensure that any Personal Information that we collect (i.e. information obtained from other sources) is accurate, up-to-date, complete and not misleading.
We endeavour to provide Users with reasonable access to Personal Information we hold about Users, and Users may request that we update, correct or delete any Personal Information that is inaccurate or inappropriate for the purposes for which it was collected.
Requests for access to, or the correction of, Personal Information should be emailed to email@example.com, and include the words 'Attention: The Privacy Officer'.
We will process requests as soon as reasonably practicable, provided we are not otherwise prevented from doing so by law. If we are unable to meet a User's request, we will explain the reasons why when we respond to the User's request. For example, the information may not be readily retrievable and it may not be reasonable or practicable for us to process the request in the manner requested.
12. HOW TO CONTACT US
Please contact us if you have any questions or complaints about this Privacy and Data Policy, if you wish to access, update, erase and/or correct Personal Information, or if you otherwise have a question or complaint about the manner in which we, our service providers or our partners treat Personal Information.
Users may write to Truestock's Privacy Officer by email, including any supporting documentation, at firstname.lastname@example.org, and include the words 'Attention: The Privacy Officer'.
Alternatively, you can write to us at:
Attention: Privacy Officer
21a Capilano Place
Attention: Privacy Officer
21a Capilano Place
We will endeavour to respond within 30 days.
Application of this Privacy and Data Policy
Our Privacy and Data Policy applies to all of the services offered by us. Our Privacy and Data Policy does not cover the information practices of other companies and organisations (such as our partners or third party service providers) that supply, contract and advertise using our website.
Changes to this Privacy and Data Policy
We recommend that Users regularly review this Policy to learn how we protect Personal Information.
DefinitionsIn this Policy, unless the context requires otherwise:
|Binding Scheme||means a binding scheme specified in regulations made under section 213 of the Privacy Act 2020 (NZ);|
|Person||means and includes any natural person, company, corporation, firm, partnership, joint venture, society, organisation or other group or association of persons (whether incorporated or not), trust, state or agency of state, statutory or regulatory body, local authority, government or governmental or semi-governmental body or agency (in each case whether or not having separate legal personality);|
|Personal Information||means information about an identifiable individual and includes, without limitation, names, addresses, phone numbers, email addresses, IP addresses and photography work history and experience;|
|Prescribed Country||means a country specified in regulations made under section 214 of the Privacy Act 2020 (NZ);|
|User(s)||means all Persons accessing our website and/or using our services (including any part of the services) including Persons that load and/or manage content on our website, or that receive or subscribe for any paid content or services, and/or any Persons providing Personal Information to us;|
|User account||means any User's account with us; we, us, our, Truestock means Truestock Limited and TSHC Limited.|
This policy was last updated on 17 September 2021.