PaySauce Limited, trading as PaySauce, and any company in its group (together, PaySauce) complies with the New Zealand Privacy Act 2020 (the Act) when dealing with personal information. Personal information is information about an identifiable individual (a natural person).
This policy sets out how PaySauce will collect, use, disclose and protect your personal information. This policy does not limit or exclude any of your rights under the Act. If you wish to seek further information on the Act, see www.privacy.org.nz.
In addition to reading this policy, you should also read the PaySauce Terms and Conditions which govern the provision, and your use, of PaySauce's services. Where words and phrases are defined in those Terms and Conditions, they have the same meaning in this policy unless stated otherwise.
Changes to this policy
PaySauce may change this policy by updating it on the App and the Website. The change will apply from the date that PaySauce updates the revised policy.
This Policy was last updated on 24 February 2021.
Who does PaySauce collect your personal information from
PaySauce collects personal information about you from:
- you, when you provide that personal information to PaySauce, including when you use the Services, through any registration or subscription process, and through any contact with PaySauce (e.g. a telephone call or email); and
- third parties where you have authorised this (e.g. from your employer in order to provide payroll related services) or where the information is publicly available.
If possible, PaySauce will collect personal information from you directly.
If you supply PaySauce with personal information about another individual (e.g. if you are an employer supplying employee information so that you can use the Services), you must ensure you have that individual's agreement:
- to the supply of the personal information; and
- for PaySauce to use, collect, and disclose that individual's personal information to provide the Services and otherwise in accordance with this policy. You must ensure that the individual knows how to contact PaySauce.
What personal information does PaySauce collect?
Depending on the Services PaySauce is providing, PaySauce may collect the following information:
- bank account details;
- IRD number;
- salary and wage details, including related deductions (e.g. child support payments, payroll giving donations, and KiwiSaver employee deductions);
- name, address, email address, and telephone numbers; and
- other information required to provide the Services and related administration and support tasks.
If you do not provide the information, PaySauce may not be able to provide Services to you.
How PaySauce uses your personal information
PaySauce will use your personal information:
- to verify your identity;
- to provide the Services and any related service or product to you, including support services;
- to ensure that we maintain an accurate record of your instructions;
- to market the Services and new services and products to you, including contacting you electronically (e.g. by text or email) for this purpose;
- to improve the Services and for staff training purposes;
- to undertake credit checks of you (if necessary);
- to invoice you and to collect money that you owe PaySauce;
- to contact you and to respond to communications from you, including a complaint;
- to conduct research and statistical analysis (on an anonymised basis);
- to protect and/or enforce our legal rights and interests, including defending any claim;
- for PaySauce's administration purposes;
- in accordance with the PaySauce Terms and Conditions; and
- for any other purpose directly related or incidental to the above, and for any other purpose authorised by you, permitted or required by law or the Act.
We record most of the phone calls made to us and some of the outbound calls we make. We record calls to ensure we have an accurate record of the call (which may be needed to support any transactions that take place over the phone and/or if there is a dispute), for quality assurance and for staff training purposes.
Disclosing your personal information
PaySauce may disclose your personal information to third parties for the purpose for which it was collected, any directly related purpose or as otherwise required by law. Accordingly, PaySauce may disclose your personal information to:
- another company within the PaySauce group or a subcontractor for the purpose of providing the Services;
- any business that supports PaySauce's Services, including any person that hosts or maintains Underlying Systems or a data centre that PaySauce uses to provide the Services;
- a credit reference agency for the purpose of credit checking you;
- a debt collection agency for the purpose of collecting overdue amounts from you;
- other third parties (as anonymised statistical information, i.e. you will not be identifiable);
- a person who can require PaySauce to supply your personal information (e.g. a regulatory authority);
- any other person authorised by the Act or another law (e.g. a law enforcement agency); and
- any other person authorised by you.
Where we disclose personal information about you to someone else for any of the above reasons, we require them to adhere to our privacy, security and confidentiality standards.
Storing and protecting your personal information
PaySauce may store your personal information electronically and in paper form. Once in PaySauce's control, PaySauce will take reasonable steps to keep your personal information safe from loss and unauthorised access, use, modification, copying and disclosure.
While PaySauce takes reasonable steps to maintain secure internet connections, if you provide PaySauce with personal information over the internet, the provision of that information is at your own risk. You must ensure you have in place systems and protections to ensure your personal information is secure when you transmit it to PaySauce.
PaySauce will keep your personal information for as long as PaySauce requires it for the purposes described under the heading "How PaySauce Uses Your Personal Information" or for the fulfilment of any legal obligation on PaySauce (e.g. if PaySauce provides certain payroll related Services, it is required to hold certain data for 7 years after the last processed Payrun).
Accessing and correcting your personal information
Subject to certain grounds for refusal set out in the Act, you have the right to check whether PaySauce holds your personal information, access your readily retrievable personal information that PaySauce holds and to request a correction to your personal information. Before you exercise this right, PaySauce will need evidence to confirm that you are the individual to whom the personal information relates. In respect of a request for correction, if PaySauce thinks the correction is reasonable and it is reasonably able to change the personal information, PaySauce will make the correction. If PaySauce does not make the correction, it will take reasonable steps to note on the personal information that you requested the correction.
If you want to exercise either of the above rights, email PaySauce at email@example.com. Your email should provide evidence of who you are and set out the details of your request (e.g. the personal information, or the correction, that you are requesting).
PaySauce may charge you its reasonable costs of providing to you copies of your personal information or correcting that information.
If you have any query about this policy or PaySauce's collection of your personal information, please email PaySauce at firstname.lastname@example.org.