• the Payment Card Industry Data Security Standards (PCI DSS)
• the Health Insurance Portability and Accountability Act of 1996 (HIPAA).

• the NZPA, see www.privacy.org.nz
• GDPR, see https://ec.europa.eu/info/law/law-topic/data-protection_en
• UK GDPR, see https://ico.org.uk/for-organisations/dp-at-the-end-of-the-transition-period/data-protection-and-the-eu-in-detail/the-uk-gdpr/
• CCPA, see https://oag.ca.gov/privacy/ccpa

Changes to this policy

Numerik may change this policy by uploading a revised policy onto Numerik's website. The change will apply from the date that Numerik uploads that revised policy. This policy was last updated on 25/03/2025.

When does this privacy policy apply?

This privacy policy applies to personal information that Numerik collects from visitors to Numerik’s website, Numerik’s customers, and other persons with whom Numerik deals directly.

Numerik, on behalf of its customers, may collect personal information from individuals (e.g. individuals inputting details into Numerik’s sales performance app) and upload, store or process that information on or through Numerik systems.  That information is described in this policy as User Data.

For the purposes of GDPR and UK Data Protection Laws, Numerik customers are the data controller when storing or other wise processing User Data and Numerik is the data processor.  Numerik customers determine what and how User Data is collected, used, disclosed and transferred.  This means that Numerik customers’ collection and use of User Data are governed by their privacy policy and practices, not Numerik’s.

Numerik only processes User Data as authorised by Numerik’s customers in Numerik’s Terms of Use [KP1] or separate agreements with those customers.  Unless required otherwise under applicable privacy laws, if Numerik receives any request or enquiry relating to User Data, Numerik will forward this request to the relevant customer.

The remainder of this privacy policy does not apply to User Data.

Children

Numerik does not intend to collect personal information from or about children aged under 16.  If you have reason to believe that Numerik has collected personal information from or about a child under the age of 16, please contact Numerik at support@numerik.ly.

What personal information does Numerik collect?

Directly from you:

Numerik collects the following information directly from you.

When you contact Numerik, or register with Numerik, subscribe to Numerik’s newsletter, or complete a website form, Numerik collects your name, email address, phone number, role, organisation name, location, and any other information Numerik requires or asks for to fully respond to you.  Numerik may collect some of this information using third-party authentication services.

When you purchase services and products from Numerik,Numerik collects your name, email address, nationality, and professional details (your work email, jobtitle/position, work name, industry, and work country, city, and region), and any other information you submit to Numerik for service fulfilment purposes.

When Numerik bills you, Numerik collects your invoicing/billing address, email address, service/product description, purchase order number (if applicable), and any other information you submit to Numerik for billing purposes.

Some of the personal information that Numerik collects directly from you may be mandatory and some may be optional.  Numerik will let you know which of these applies at the time Numerik collects the relevant personal information.  While you do not have to provide Numerik with any of the information that Numerik may request, this might mean that Numerik cannot provide all or part of its services and products to you, or they may not perform as well as they should.  If you require further information about the consequences of not providing Numerik with any personal information, please contact Numerik at support@numerik.ly.

If possible, Numerik will collect personal information directly from you.

Automatically:

When you access and use Numerik’s website or related services and products, Numerik may automatically collect information about your device and usage of Numerik’s website and services and products including your IP address and/or other device identifying data, time spent on certain pages of the website, pages visited, and links clicked.

Some of this data is collected through third party tools and/or the use of cookies, web beacons and similar storage technologies.  Please refer to Numerik’s cookie policy set out in Appendix A for more information on Numerik’s use of cookies, including information on how you can disable these technologies.

From public sources and other third parties

Numerik may collect personal information about you that is publicly available, including using third parties sources (e.g. data brokers and providers of natural language processing and artificial intelligence services (AI Providers) to collect and supply to Numerik that publicly available personal information.  The types of public available personal information include business contact details, business descriptions and details, and job titles from social media and professional networking profiles.

Numerik may otherwise collect personal information about you from third parties where you have consented to, or authorised, this.

Numerik may link personal information collected from public sources and other third parties with personal information supplied by you or supplied automatically.

How Numerik uses your personal information

Numerik may use your personal information (including personal information collected from public sources and other third parties) for our legitimate interests to:

• provide Numerik’s website, and services and products, to you or to a business that you work in
• market Numerik’s services and products to you, including contacting you electronically (e.g. by text or email for this purpose)
• improve Numerik’s website, and services and products, and to improve the user experience related to that, including to enable Numerik users to identify new customers
• bill you and collect money that you owe Numerik, including authorising and processing credit card transactions
• respond to communications from you, including orders,enquiries and complaints
• conduct research and statistical analysis (on an anonymised basis)
• protect and/or enforce Numerik’s legal rights and interests, including defending any claim
• respond to lawful requests by public authorities, including to comply with law enforcement requirements,

or for any other purpose authorised by you or applicable law (including applicable privacy laws).

Numerik may transfer your information in the case of a sale, merger, consolidation, liquidation, reorganisation or acquisition.

Disclosing your personal information

Numerik may disclose your personal information to:

• another company within the Numerik group
• any business that supports Numerik’s website, and services and products, including AI Providers (subject to any restrictions or opt outs described in Numerik’s Terms of Use), any person that hosts or maintains any underlying IT system or data centre that Numerik uses to provide its website, or services and products, or that Numerik uses to process payments.
• third parties (for anonymized statistical information)
• professional advisers e.g. accountants, lawyers or auditors
• a person who can require Numerik to supply your personal information (e.g. a law enforcement agency or regulatory authority)
• any other person with your consent
• any other company in the case of a sale, merger, consolidation, liquidation, reorganization or acquisition
• any other person authorised by applicable law.

International transfers of personal information

A business that supports Numerik’s website, and services and products, may be located outside of New Zealand (the country where Numerik is incorporated) and also outside of the country where you are located, e.g. we currently store data in secure servers in Australia and the United States of America.  This means that the personal information Numerik collects may be transferred to, and stored in, a country outside of New Zealand and the country where you are located.

If you are located in the European Union (EU),your personal information may be transferred outside of the European Economic Area (EEA).  Under GDPR, the transfer of personal information to a country outside the EEA may take place where the European Commission has decided that the country ensures an adequate level of protection.  In the absence of an adequacy decision, Numerik may transfer personal information if other appropriate safeguards are in place.

If you are located in the United Kingdom (UK), your personal information may be transferred outside of the UK.  Under the UK Data Protection Laws, the transfer of personal information to a country outside the UK may take place where the UK government has decided that the country ensures an adequate level of protection.  In the absence of an adequacy decision, Numerik may transfer personal information if other appropriate safeguards are in place.

Where Numerik transfers personal information outside the EEA or UK (as the case maybe), it will only be transferred to countries that have been identified as providing adequate protection for EU/UK data (and, if a sub-processor is relying on a country-specific adequacy decision, to a sub-processor who meets any applicable condition or requirement set out in that decision), or to a third party where approved transfer mechanisms are in place to protect your personal information. For further information, please contact Numerik at support@numerik.ly.

Some of the personal information Numerik collects is processed in New Zealand.  New Zealand is recognised by the European Commission and the UK adequacy regulations as a country that has an adequate level of data protection and Numerik relies on this decision in transferring personal information to New Zealand.

Protecting your personal information

As required by applicable law, Numerik will take steps to keep your personal information safe from loss, unauthorised activity, or other misuse.  Numerik implements appropriate technical and organisational measures to ensure a level of security appropriate to the risks inherent in processing personal information.  These measures include:

• Numerik app user authentication through a login and password
• data encryption during transfer between you and Numerik using field-standard TLS (transport layer security)
• physically secure data centres, including perimeter fencing, video cameras, security personnel, secure entrances, and real-time communications networks
• security monitoring using multi-pronged threat-management using intrusion detection, distributed denial-of-service (DDoS) attack prevention, penetration testing, behavioural analytics, anomaly detection, and machine learning.

If you would like further information on those measures, please contact Numerik at support@numerik.ly.