Privacy Policy

    Last updated: 19 June 2026

    1. Who we are

    This website is operated by Youtap Technology Limited ("Youtap", "we", "us", "our"), Level 7, 2 Emily Place, Auckland Central, Auckland 1010, New Zealand, NZBN 9429049918526. This policy explains how we collect, use, and protect personal information when you visit this website or contact us through it.

    We are the data controller for the personal information described here. Our Privacy Officer can be reached at [email protected] — see Section 12.

    2. Information we collect

    Information you give us. When you submit our contact form, we collect your first and last name, work email address, company name, job title (optional), phone number (optional), region, the products you express interest in, and the message you send us. If you apply for a role through our Careers page, your application is submitted to and handled by our recruitment provider (see Section 6).

    Information collected automatically. When you browse the site we collect your IP address, browser and device information (user agent), the pages you view, referring URLs, and any campaign parameters (such as UTM tags). We also record limited technical metadata with contact-form submissions (IP address, user agent, and the page you submitted from) to prevent spam and abuse.

    Company identification from third parties. We use a visitor-intelligence service (Dealfront / Leadfeeder) that uses your IP address to identify the organisation a visit is likely associated with, along with related business information such as industry, size, and location. This identifies companies, not individuals.

    Cookies and similar technologies. See our separate Cookie Policy for details of what we set and why.

    3. How we use your information

    We use personal information to: respond to your enquiries and provide the information or contact you request; manage our sales pipeline and customer relationships in our CRM; operate, secure, and improve the website; detect and prevent spam, fraud, and abuse; understand which organisations are interested in our products; and send you service or marketing communications where we are permitted to do so. You can opt out of marketing emails at any time using the unsubscribe link in those emails.

    4. Our legal bases (EEA / UK visitors)

    Where the GDPR or UK GDPR applies, we rely on: legitimate interests (operating and securing the site, B2B marketing, and identifying interested organisations, balanced against your rights); performance of a contract or steps taken at your request (responding to your enquiry); consent (where required, for example certain cookies — which you can withdraw at any time); and legal obligation where applicable.

    5. Cookies and tracking

    We and our providers use cookies and similar technologies for essential site functions, analytics, and visitor identification. Full detail, including categories, providers, and how to control them, is in our Cookie Policy.

    6. How we share your information

    We do not sell your personal information. We share it with service providers who process it on our behalf, including:

    • Supabase — database and backend hosting (stores contact submissions and CRM records)
    • Cloudflare — content delivery, edge security, and bot protection
    • Resend — sending transactional and notification emails
    • Dealfront / Leadfeeder — visitor (company) identification
    • Workable — careers / job-application processing
    • Analytics and performance providers where enabled, which may include Google Analytics, Google Tag Manager, Microsoft Clarity, and LinkedIn — see the Cookie Policy

    We may also disclose information where required by law, to protect our rights, or in connection with a corporate transaction. [Confirm and list any others — e.g. error monitoring (Sentry), bot protection (reCAPTCHA).]

    7. International transfers

    We are based in New Zealand and several of our providers are located outside New Zealand and outside the EEA/UK. Where personal information is transferred internationally, we take steps to ensure it remains protected to a comparable standard, including using providers that offer appropriate safeguards (such as standard contractual clauses where relevant).

    8. How long we keep it

    We keep personal information only as long as necessary for the purposes above — for example, to respond to and follow up on your enquiry, maintain our business records, and meet legal requirements — after which it is deleted or anonymised. [Confirm specific retention periods with the business.]

    9. Security and compliance

    We use technical and organisational measures to protect personal information, including access controls, encryption of data in transit, and restricted administrative access to our systems. No method of transmission or storage is completely secure, but we work to protect your information and review our controls regularly.

    Youtap is certified to ISO/IEC 27001, holds a current SOC 2 [Type I / Type II] report, and is PCI DSS compliant (Level [n]) for the processing of payment card data within its product platforms. This website is an informational site: it does not collect, store, or process payment card data. Any cardholder data is handled solely within Youtap's secured product platforms under those controls, not through this website.

    10. Your rights

    Under the NZ Privacy Act 2020, you have the right to access the personal information we hold about you and to request correction of it.

    If the GDPR or UK GDPR applies to you, you also have the right to erasure, restriction of processing, objection to processing (including direct marketing), data portability, and to withdraw consent where we rely on it. You may also lodge a complaint with a supervisory authority.

    To exercise any of these rights, contact us using Section 12. We will respond within the timeframes required by applicable law.

    11. Children

    This is a business-to-business website and is not directed at children. We do not knowingly collect personal information from children.

    12. Contact us

    Questions, requests, or complaints about this policy or your personal information can be sent to our Privacy Officer:

    VP of Commercial Youtap Technology Limited Level 7, 2 Emily Place, Auckland Central, Auckland 1010, New Zealand Email: [email protected]

    In New Zealand you may also contact the Office of the Privacy Commissioner (privacy.org.nz).

    13. Changes to this policy

    We may update this policy from time to time. The "Last updated" date above shows when it last changed. Material changes will be made clear on this page.