Privacy policy

Who we are

Redacted is a service operated by TechMedics Ltd, New Zealand ("we", "us"). We're responsible for the personal information described in this policy under the Privacy Act 2020. You can contact our Privacy Officer at hello@redacted.co.nz.

What we collect

• Account details: your email address and sign-in information.
• Details used to find your records: your name, any middle or former names, email addresses, phone numbers, and the suburbs, cities and regions where you live or have lived. Your date of birth is optional. We never send it to brokers.
• Consent records: each authorisation you give us, with the date and time, the network (IP) address and the browser used.
• Service records: the brokers we contacted for you, when, what they replied, and the status of each request.
• Billing: your plan and subscription status. Card payments are handled by Stripe; we don't receive or store your card number.
• Activity logs: changes to your settings, and any access to your details by our staff.

Why we collect it

To provide the service you asked for: finding your records with data brokers, asking brokers to delete them, tracking the results, and showing them to you. We also use your email address to send you service emails, which you can switch off in Settings except for essential account and billing notices. We don't sell your information or use it for advertising.

Who we disclose it to

• Data brokers: to ask them to delete your details, we send each broker on our list the information it needs to find your record. Many of these brokers are overseas, mainly in the United States and Australia. You authorise this when you sign up. We send it only for the purpose of requesting deletion, and we ask the broker not to use it for anything else.
• Service providers who process information for us:
  • Clerk, for sign-in.
  • Stripe, for payments.
  • SMTP2GO, for sending email.
  • Microsoft 365, for the mailbox that receives broker replies.
  Some of these providers store information outside New Zealand.
• Family and Business plan owners: if someone else's plan covers you, the plan owner sees your first name (plus your last initial on Business plans) and your overall progress. They don't see which brokers listed you or what those brokers held.
• When the law requires it.

How we store and protect it

Our application servers are in New Zealand. The personal details you give us are encrypted before they're stored, and the encryption keys are held on a separate key-management server. Access to customer details is restricted to staff who need it, and each access is logged. The log entries about you appear in your consent and audit log.

How long we keep it

We keep your details while your account is active. If you delete your account, your subscription stops renewing straight away. Thirty days later your personal details are anonymised and your sign-in is removed. We keep the record of your consents and of the requests we sent for you, with the personal details removed, for as long as we need them to show we acted with your authority.

Your rights

You can ask for a copy of the personal information we hold about you and ask us to correct it. Most of your details can be viewed and updated in your account, and you can download your status report and consent log from Reports. You can withdraw your consent or delete your account from Settings. If you have a concern, please contact us first. You can also complain to the Office of the Privacy Commissioner.

Cookies

This website doesn't use advertising or analytics cookies, and it doesn't load third-party trackers. The customer app uses cookies needed for sign-in, plus one cookie that remembers your light or dark theme.

Changes

We'll post any changes here. If they're significant, we'll also let customers know by email.