.png)
Effective Date: February 23, 2026
Last Updated: February 23, 2026
1. Introduction
1.1 Our Commitment to Privacy
NZBlockchain ("Company", "we", "us", or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, store, and protect your personal data when you access or use our Learning Management System, including our website at nzblockchain.nz and all related services, features, content, and applications (collectively, the "Platform" or "Service").
1.2 Scope of This Policy
This Privacy Policy applies to all users of the Platform, including visitors, registered users, course participants, and anyone who interacts with our services. By accessing or using the Platform, you acknowledge that you have read, understood, and agree to the data practices described in this Privacy Policy.
1.3 Changes to This Privacy Policy
We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated Privacy Policy on the Platform and updating the "Last Updated" date. Your continued use of the Platform after such changes constitutes your acceptance of the revised Privacy Policy.
We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal information.
1.4 Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
NZBlockchain
Website: nzblockchain.nz
Email: [Insert contact email]
Location: New Zealand
2. Information We Collect
2.1 Personal Information You Provide
We collect personal information that you voluntarily provide to us when you:
A. Account Registration
Full name
Email address
Date of birth
Country of residence
Username and password
Phone number (optional)
Professional background or education level (optional)
B. Course Enrollment and Payment
Billing name and address
Payment card information (processed securely through third-party payment processors)
Transaction history
Purchase records
Subscription details
C. Profile and Preferences
Profile information (photo, bio, interests)
Learning preferences and goals
Communication preferences
Language and timezone settings
Accessibility requirements
D. User-Generated Content
Course submissions, assignments, and projects
Forum posts and comments
Reviews and ratings
Messages and correspondence with instructors or support
Feedback and survey responses
E. Identity Verification (if required)
Government-issued identification documents
Proof of address documents
Selfie or photograph for identity verification
Information required for Anti-Money Laundering (AML) and Know Your Customer (KYC) compliance
2.2 Information Collected Automatically
When you access or use the Platform, we automatically collect certain information about your device and usage:
A. Device Information
IP address
Device type, model, and operating system
Browser type and version
Unique device identifiers
Mobile network information
B. Usage and Analytics Data
Pages viewed and content accessed
Course progress and completion data
Time spent on pages and in courses
Assessment results and quiz scores
Search queries within the Platform
Features and functions used
Date and time of access
Referral source (how you found our Platform)
Clickstream data and navigation patterns
C. Cookies and Similar Technologies
Session cookies and persistent cookies
Web beacons and pixel tags
Local storage
Analytics and tracking technologies
See Section 8 for detailed information about cookies and how to manage them.
2.3 Information from Third-Party Sources
We may receive information about you from third-party sources, including:
A. Social Media Platforms
If you register or log in using social media accounts (e.g., Google, LinkedIn, Facebook), we may receive profile information such as name, email address, profile picture, and other information you authorize the social media platform to share
B. Payment Processors
Transaction confirmation and payment status information from payment service providers
C. Marketing and Analytics Partners
Aggregated demographic and interest data
Marketing campaign performance data
Website analytics and visitor behavior data
D. Public Sources
Publicly available information used for identity verification or fraud prevention
2.4 Sensitive Personal Information
In certain circumstances, we may collect sensitive personal information, such as:
Financial information related to cryptocurrency holdings (only if voluntarily provided by users for educational case studies or examples)
Identity verification documents containing sensitive data
We take additional precautions to protect sensitive personal information and only collect it when necessary and with your explicit consent.
3. How We Use Your Personal Information
3.1 Primary Purposes
We use your personal information for the following purposes:
A. Providing and Managing Services
Create and manage user accounts
Process course enrollments and subscriptions
Deliver Educational Content and course materials
Track course progress and issue certificates of completion
Facilitate communication between users, instructors, and support staff
Process payments and manage billing
Provide customer support and respond to inquiries
B. Platform Improvement and Personalization
Personalize your learning experience based on preferences and progress
Recommend relevant courses and content
Analyze usage patterns to improve Platform functionality
Develop new features, services, and Educational Content
Conduct research and analytics to enhance user experience
Test and optimize Platform performance
C. Communication and Marketing
Send transactional emails (account notifications, course updates, payment confirmations)
Send promotional emails about new courses, features, and special offers (with your consent)
Respond to your questions, feedback, and support requests
Conduct surveys and request feedback
Send administrative information about policy changes or Platform updates
D. Security and Fraud Prevention
Verify user identity and prevent fraudulent accounts
Detect, prevent, and investigate security incidents, fraud, and abuse
Monitor compliance with our Terms of Service and policies
Protect the rights, property, and safety of NZBlockchain, users, and others
Enforce our legal rights and obligations
E. Legal and Regulatory Compliance
Comply with applicable laws, regulations, and legal processes
Respond to lawful requests from public authorities (e.g., law enforcement, regulatory agencies)
Meet Anti-Money Laundering (AML) and Know Your Customer (KYC) requirements where applicable
Maintain records for audit and compliance purposes
Establish, exercise, or defend legal claims
3.2 Legal Bases for Processing (GDPR)
For users in the European Economic Area (EEA), United Kingdom, and other jurisdictions with similar data protection laws, we process your personal information based on the following legal grounds:
A. Contractual Necessity
Processing is necessary to perform our contract with you (i.e., providing the Platform and services you've enrolled in)
B. Legitimate Interests
Processing is necessary for our legitimate business interests, such as:
Improving and optimizing the Platform
Fraud prevention and security
Direct marketing (where permitted)
Analytics and research
C. Legal Obligation
Processing is necessary to comply with legal obligations, such as tax, accounting, and regulatory requirements
D. Consent
Processing is based on your explicit consent, which you can withdraw at any time (e.g., for marketing communications, cookies, or sensitive personal data processing)
3.3 Automated Decision-Making and Profiling
We may use automated systems to analyze user data for purposes such as:
Recommending courses based on your interests and learning history
Personalizing content and Platform experience
Detecting fraudulent or suspicious activity
These automated processes do not produce legal effects concerning you or similarly significantly affect you without human review. You have the right to request human intervention and challenge automated decisions where they have significant effects.
4. How We Share Your Personal Information
4.1 Sharing Principles
We do not sell, rent, or trade your personal information to third parties for their marketing purposes. We only share your personal information in the limited circumstances described below.
4.2 Service Providers and Business Partners
We share personal information with trusted third-party service providers who perform services on our behalf, including:
A. Technology and Infrastructure Providers
Cloud hosting and data storage services (e.g., Amazon Web Services, Google Cloud Platform)
Content delivery networks (CDNs)
Database management services
B. Payment Processing
Payment processors and payment gateway providers
Fraud detection and prevention services
Billing and invoicing services
C. Communication Services
Email service providers
SMS and notification services
Customer support platforms
D. Analytics and Marketing
Web analytics providers (e.g., Google Analytics)
Marketing automation platforms
Advertising networks and partners
E. Security and Compliance
Identity verification and KYC/AML service providers
Security monitoring and threat detection services
Legal and compliance consultants
All service providers are contractually obligated to:
Use personal information only for the purposes we specify
Implement appropriate security measures
Comply with applicable data protection laws
Not disclose personal information to unauthorized parties
4.3 Legal Requirements and Protection of Rights
We may disclose personal information when required or permitted by law, including:
In response to lawful requests from public authorities, courts, law enforcement, or regulatory agencies
To comply with legal obligations, court orders, subpoenas, or legal processes
To investigate, prevent, or take action regarding suspected or actual illegal activities, fraud, or security threats
To protect the rights, property, and safety of NZBlockchain, our users, or the public
To enforce our Terms of Service, policies, or agreements
In connection with the investigation of Terms of Service violations
4.4 Business Transfers
In the event of a merger, acquisition, reorganization, sale of assets, bankruptcy, or other business transaction, your personal information may be transferred to the successor organization. We will notify you via email or prominent notice on the Platform before your personal information is transferred and becomes subject to a different privacy policy.
4.5 With Your Consent
We may share personal information with third parties when you provide explicit consent or direct us to do so, such as:
Sharing your profile information publicly (if you choose)
Connecting your account with third-party applications or services
Participating in third-party promotions or surveys
4.6 Aggregated and De-identified Data
We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you with third parties for research, marketing, analytics, or other purposes. This information is not considered personal information under this Privacy Policy.
5. International Data Transfers
5.1 Global Operations
NZBlockchain operates from New Zealand, and our Platform infrastructure and service providers may be located in various countries around the world. By using the Platform, you acknowledge and consent to the transfer of your personal information to countries outside your country of residence, including New Zealand and other jurisdictions where our service providers operate.
5.2 Data Protection Standards
When we transfer personal information internationally, we implement appropriate safeguards to ensure your data receives adequate protection, including:
A. Standard Contractual Clauses
We use Standard Contractual Clauses (SCCs) approved by the European Commission or other relevant authorities when transferring personal data from the EEA or UK to countries without adequate data protection laws
B. Adequacy Decisions
We transfer data to countries recognized by the European Commission or other authorities as providing adequate data protection
C. Binding Corporate Rules
Where applicable, we implement binding corporate rules ensuring consistent data protection across our organization
D. Consent
We may obtain your explicit consent for specific international data transfers where required
5.3 EEA, UK, and Swiss Users
For users in the European Economic Area (EEA), United Kingdom, and Switzerland, we comply with the General Data Protection Regulation (GDPR), UK GDPR, and Swiss Federal Act on Data Protection (FADP) respectively. International data transfers are conducted in accordance with Chapter V of the GDPR and equivalent provisions in other applicable laws.
6. Data Security and Protection
6.1 Our Security Commitment
We take the security of your personal information seriously and implement reasonable administrative, technical, and physical safeguards designed to protect your data from unauthorized access, disclosure, alteration, and destruction.
6.2 Security Measures
Our security measures include:
A. Technical Safeguards
Encryption of data in transit using SSL/TLS protocols (HTTPS)
Encryption of sensitive data at rest
Secure authentication mechanisms and password hashing
Regular security updates and patch management
Firewall protection and intrusion detection systems
Secure backup and disaster recovery procedures
B. Administrative Safeguards
Access controls limiting data access to authorized personnel only
Role-based permissions ensuring least-privilege access
Confidentiality agreements for employees and contractors
Security awareness training for staff
Incident response procedures and protocols
Regular security audits and risk assessments
C. Physical Safeguards
Secure data center facilities with restricted access
Environmental controls and monitoring
Physical access logs and surveillance
D. Third-Party Security
Due diligence assessments of service providers
Contractual security requirements for vendors
Regular review of third-party security practices
6.3 Security Limitations
While we implement industry-standard security measures, no system is completely secure. We cannot guarantee absolute security of your personal information. You acknowledge and accept the inherent risks of transmitting information over the internet and storing data electronically.
6.4 Your Security Responsibilities
You are responsible for:
Maintaining the confidentiality of your account credentials
Using strong, unique passwords
Enabling two-factor authentication where available
Promptly notifying us of any unauthorized account access or security breaches
Keeping your devices and software secure and up-to-date
6.5 Security Breach Notification
In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected users and relevant regulatory authorities in accordance with applicable data protection laws. Notification will be provided without undue delay and will include information about the nature of the breach, potential consequences, and measures taken to address it.
7. Data Retention
7.1 Retention Principles
We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, enforce agreements, and protect our legitimate interests.
7.2 Retention Periods
A. Account and Profile Information
Retained for the duration of your active account
Retained for up to 7 years after account closure for legal, tax, and audit purposes
Longer retention if required by law or for legitimate business purposes (e.g., ongoing legal proceedings)
B. Course Enrollment and Progress Data
Retained for the duration of your active account
Retained for up to 5 years after course completion to maintain academic records and issue certificates
Historical course completion records may be retained indefinitely for verification purposes
C. Payment and Transaction Information
Retained for up to 7 years after transaction for accounting, tax, and regulatory compliance purposes
Payment card information is not stored by us; it is handled by PCI DSS-compliant payment processors
D. Communications and Support Records
Retained for up to 3 years after the last interaction for customer service quality and dispute resolution
E. Marketing Communications
Retained until you withdraw consent or unsubscribe
Unsubscribe records retained indefinitely to honor your opt-out preference
F. KYC/AML Verification Documents
Retained for 5 years following account closure or last transaction as required by anti-money laundering regulations
G. Usage and Analytics Data
Aggregated and anonymized data may be retained indefinitely for research and analytics
Raw usage logs typically retained for up to 2 years
7.3 Deletion and Anonymization
After the applicable retention period expires, we will:
Securely delete or destroy personal information
Anonymize or aggregate data so that it can no longer identify you
Retain data only if required by law or for legitimate archival purposes
8. Cookies and Tracking Technologies
8.1 What Are Cookies?
Cookies are small text files stored on your device when you visit websites. They help websites remember your preferences, recognize you on return visits, and provide a better user experience.
8.2 Types of Cookies We Use
A. Essential Cookies
Purpose: Necessary for the Platform to function properly
Examples: Session management, authentication, security
Duration: Session-based or short-term persistent
Can be disabled: No (Platform will not work without them)
B. Functional Cookies
Purpose: Enable enhanced functionality and personalization
Examples: Language preference, timezone settings, accessibility features
Duration: Persistent (typically 1-12 months)
Can be disabled: Yes, but some features may not work properly
C. Analytics and Performance Cookies
Purpose: Help us understand how users interact with the Platform
Examples: Google Analytics, usage statistics, error reporting
Duration: Persistent (typically 1-24 months)
Can be disabled: Yes
D. Marketing and Advertising Cookies
Purpose: Track user behavior across websites for targeted advertising
Examples: Retargeting pixels, conversion tracking, ad network cookies
Duration: Persistent (typically 1-24 months)
Can be disabled: Yes
8.3 Other Tracking Technologies
In addition to cookies, we may use:
A. Web Beacons (Pixel Tags)
Small invisible images embedded in web pages or emails to track opens, clicks, and engagement
B. Local Storage
Browser-based storage for saving preferences and application data
C. Session Storage
Temporary storage that clears when you close your browser
D. Device Fingerprinting
Collecting device characteristics to identify unique devices for security and fraud prevention
8.4 Third-Party Cookies
The Platform may contain cookies set by third-party services, including:
Google Analytics (analytics)
Payment processors (transaction processing)
Social media platforms (social sharing features)
Advertising networks (targeted advertising)
These third parties have their own privacy policies governing their use of cookies and data collection.
8.5 Managing Cookie Preferences
A. Browser Controls
You can control and delete cookies through your browser settings:
Chrome: Settings > Privacy and Security > Cookies and other site data
Firefox: Options > Privacy & Security > Cookies and Site Data
Safari: Preferences > Privacy > Cookies and website data
Edge: Settings > Privacy, search, and services > Cookies and site data
B. Opt-Out Tools
Google Analytics Opt-Out: https://tools.google.com/dlpage/gaoptout
Network Advertising Initiative: http://optout.networkadvertising.org/
Digital Advertising Alliance: http://optout.aboutads.info/
C. Do Not Track Signals
Some browsers support Do Not Track (DNT) signals. We currently do not respond to DNT signals, but you can control cookies through the methods described above.
8.6 Consequences of Disabling Cookies
If you disable certain cookies:
Essential cookies: The Platform will not function properly
Functional cookies: You may lose personalization and preferences
Analytics cookies: We cannot improve the Platform based on usage data
Marketing cookies: You will still see ads, but they will be less relevant
9. Your Privacy Rights and Choices
9.1 Rights Available to All Users
Regardless of your location, you have the following rights:
A. Access Your Information
Request access to the personal information we hold about you
B. Update or Correct Information
Update or correct inaccurate or incomplete personal information through your account settings or by contacting us
C. Delete Your Account
Request deletion of your account and associated personal information, subject to legal retention requirements
D. Opt-Out of Marketing
Unsubscribe from marketing emails using the unsubscribe link in emails or by updating your communication preferences
E. Disable Cookies
Manage cookie preferences through your browser settings or opt-out tools
9.2 Additional Rights for EEA, UK, and Swiss Users (GDPR)
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the GDPR, UK GDPR, or Swiss FADP:
A. Right of Access (Article 15 GDPR)
Obtain confirmation of whether we process your personal data and request a copy of the data
B. Right to Rectification (Article 16 GDPR)
Correct inaccurate or incomplete personal data
C. Right to Erasure / "Right to be Forgotten" (Article 17 GDPR)
Request deletion of your personal data in certain circumstances, including:
Data no longer necessary for original purpose
You withdraw consent
You object to processing
Data processed unlawfully
Legal obligation requires erasure
D. Right to Restriction of Processing (Article 18 GDPR)
Request that we limit how we use your personal data in certain circumstances
E. Right to Data Portability (Article 20 GDPR)
Receive your personal data in a structured, commonly used, machine-readable format and transmit it to another controller
F. Right to Object (Article 21 GDPR)
Object to processing based on legitimate interests or for direct marketing purposes
G. Right Not to Be Subject to Automated Decision-Making (Article 22 GDPR)
Not be subject to decisions based solely on automated processing that produce legal or similarly significant effects
H. Right to Withdraw Consent
Where processing is based on consent, you can withdraw consent at any time without affecting the lawfulness of processing before withdrawal
I. Right to Lodge a Complaint
File a complaint with your local data protection authority if you believe your rights have been violated
9.3 Additional Rights for California Residents (CCPA/CPRA)
If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
A. Right to Know
Request disclosure of the categories and specific pieces of personal information we've collected about you
B. Right to Delete
Request deletion of personal information we've collected, subject to exceptions
C. Right to Correct
Request correction of inaccurate personal information
D. Right to Opt-Out of Sale or Sharing
We do not sell personal information. If we did, you would have the right to opt-out
E. Right to Limit Use of Sensitive Personal Information
Request limitation on use of sensitive personal information
F. Right to Non-Discrimination
Not be discriminated against for exercising your privacy rights
9.4 Additional Rights for New Zealand Users (Privacy Act 2020)
New Zealand users have rights under the Privacy Act 2020, including:
A. Right to Access (Privacy Principle 6)
Request access to personal information we hold about you
B. Right to Correction (Privacy Principle 7)
Request correction of inaccurate, incomplete, or outdated personal information
C. Right to Complain
Lodge a complaint with the Office of the New Zealand Privacy Commissioner if you believe your privacy has been breached
9.5 How to Exercise Your Rights
To exercise any of the rights described above, please contact us at:
Email: tehmus@ausnztech.com
Website: nzblockchain.nz
When submitting a request, please provide:
Your full name and email address associated with your account
Specific right you wish to exercise
Sufficient detail to locate your information
Proof of identity (if required for security purposes)
We will respond to your request within the timeframes required by applicable law:
GDPR: Within 1 month (extendable to 3 months for complex requests)
CCPA: Within 45 days (extendable to 90 days)
Privacy Act 2020: Within 20 working days
9.6 Verification of Requests
To protect your privacy and security, we may need to verify your identity before fulfilling your request. We may ask for additional information or documentation to confirm you are the person about whom we hold data.
9.7 Limitations on Rights
In certain circumstances, we may be unable to fully comply with your request due to:
Legal obligations or requirements
Ongoing legal proceedings or investigations
Protection of the rights and freedoms of others
Technical limitations
Legitimate business interests
We will explain any limitations or denials in our response to your request.
10. Children's Privacy
10.1 Age Restrictions
The Platform is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13 without parental consent.
Users between the ages of 13 and 17 may only use the Platform under the supervision and with the express consent of a parent or legal guardian who agrees to be bound by our Terms of Service and this Privacy Policy.
10.2 Parental Consent
If you are a parent or legal guardian and believe your child under 13 has provided personal information to us without your consent, please contact us immediately at [Insert contact email]. We will take prompt steps to delete such information.
10.3 Educational Context
In certain educational contexts where the Platform is used by schools or educational institutions, parental consent may be obtained by the institution in accordance with applicable laws such as the Children's Online Privacy Protection Act (COPPA) in the United States or similar laws in other jurisdictions.
11. Specific Considerations for Blockchain and Cryptocurrency Education
11.1 Nature of Educational Content
Our Platform provides educational content about blockchain technology and cryptocurrency. This educational content may include:
Technical explanations of blockchain protocols
Cryptocurrency market analysis and trends
Case studies and real-world examples
Discussion of investment strategies (for educational purposes only)
Important: We do not provide financial advice, investment recommendations, or trading tips. Please refer to our Disclaimer for full details.
11.2 Voluntary Disclosure of Financial Information
Users may voluntarily share information about their cryptocurrency holdings, trading experiences, or investment portfolios in forum discussions, case studies, or course assignments. We advise users to:
Exercise caution when sharing financial information publicly
Avoid disclosing specific wallet addresses or private keys
Be aware that public posts may be viewed by other users
Understand that we cannot control how other users use information you share publicly
11.3 KYC/AML Compliance
In certain circumstances where required by law or for specific advanced courses, we may conduct identity verification using KYC (Know Your Customer) and AML (Anti-Money Laundering) procedures. This may involve:
Collection of government-issued identification documents
Verification of identity through third-party services
Retention of verification records as required by law
KYC/AML data is processed with enhanced security measures and retained for the periods required by applicable financial regulations (typically 5 years after account closure or last transaction).
11.4 Cryptocurrency Transaction Data
The Platform itself does not process cryptocurrency transactions or manage cryptocurrency wallets. If Educational Content includes practical exercises involving cryptocurrency transactions, users are responsible for:
Managing their own wallets and private keys
Understanding the risks of cryptocurrency transactions
Complying with applicable tax and regulatory requirements
We do not collect or store cryptocurrency wallet private keys or transaction credentials.
11.5 Security Best Practices Education
Part of our Educational Content includes teaching security best practices for cryptocurrency and blockchain technology. Users should:
Apply security principles learned on the Platform to protect their personal digital assets
Use strong passwords and two-factor authentication
Be cautious of phishing attempts and scams
Never share private keys or wallet credentials with anyone, including NZBlockchain staff
12. Third-Party Services and Links
12.1 Third-Party Links
The Platform may contain links to third-party websites, applications, or services that are not operated or controlled by NZBlockchain. This Privacy Policy does not apply to third-party services.
We recommend reviewing the privacy policies of any third-party services you access through our Platform. We are not responsible for the privacy practices or content of third-party services.
12.2 Social Media Features
The Platform may include social media features such as sharing buttons or widgets. These features may collect your IP address, track which page you are visiting, and set cookies to enable functionality. Social media features are governed by the privacy policies of the companies providing them.
12.3 Third-Party Service Providers
We work with trusted third-party service providers who may collect or process your personal information on our behalf. These providers are contractually obligated to use your information only as necessary to provide services to us and to maintain appropriate security measures.
Key third-party categories include:
Cloud hosting providers (e.g., AWS, Google Cloud)
Payment processors (e.g., Stripe, PayPal)
Email service providers
Analytics providers (e.g., Google Analytics)
Customer support platforms
13. Compliance with Data Protection Laws
13.1 General Data Protection Regulation (GDPR)
For users in the European Economic Area (EEA) and United Kingdom, we comply with the GDPR and UK GDPR. We act as a data controller for personal information collected through the Platform.
Our GDPR compliance measures include:
Lawful bases for processing personal data
Data Protection Impact Assessments (DPIAs) for high-risk processing
Data Processing Agreements (DPAs) with service providers
Procedures for handling data subject rights requests
Security measures and breach notification procedures
Records of processing activities
Appointment of a Data Protection Officer (if required)
13.2 New Zealand Privacy Act 2020
As a New Zealand-based organization, we comply with the Privacy Act 2020, including:
Information Privacy Principles (IPPs)
Privacy breach notification requirements
Individual rights to access and correction
Appointment of a Privacy Officer
Privacy Officer Contact:
Email: tehmus@ausnztech.com
13.3 California Consumer Privacy Act (CCPA/CPRA)
For California residents, we comply with the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), including:
Notice of information collection and use
Consumer rights to access, delete, and correct
Opt-out mechanisms (though we do not sell personal information)
Non-discrimination for exercising privacy rights
13.4 Other Jurisdictions
We strive to comply with data protection laws in all jurisdictions where we operate or where our users are located. If you have questions about compliance with laws in your jurisdiction, please contact us.
14. Privacy by Design and Default
14.1 Privacy-First Approach
We implement privacy by design and by default principles in the development and operation of the Platform:
A. Data Minimization
We collect only personal information necessary for specified purposes
B. Purpose Limitation
We use personal information only for the purposes disclosed at the time of collection
C. Storage Limitation
We retain personal information only as long as necessary
D. Accuracy
We take reasonable steps to ensure personal information is accurate and up-to-date
E. Integrity and Confidentiality
We implement appropriate security measures to protect personal information
F. Accountability
We take responsibility for our data processing activities and can demonstrate compliance
14.2 Privacy-Enhancing Technologies
Where appropriate and feasible, we implement privacy-enhancing technologies such as:
Pseudonymization and anonymization
Encryption of sensitive data
Access controls and least-privilege principles
Secure data transmission protocols
Regular security audits and assessments
15. Contact Us and Data Protection Officer
15.1 General Privacy Inquiries
For questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
NZBlockchain
Website: nzblockchain.nz
Email: tehmus@ausnztech.com
Location: New Zealand
15.2 Privacy Officer (New Zealand Privacy Act 2020)
Our designated Privacy Officer is responsible for ensuring compliance with the Privacy Act 2020 and handling privacy-related inquiries:
Privacy Officer
Email: [Insert Privacy Officer email]
15.3 Data Protection Officer (GDPR)
If required under GDPR, our Data Protection Officer (DPO) can be contacted at:
Data Protection Officer
Email: [Insert DPO email]
15.4 Supervisory Authorities
You have the right to lodge a complaint with a supervisory authority if you believe your privacy rights have been violated:
New Zealand:
Office of the Privacy Commissioner
Website: https://www.privacy.org.nz
Email: enquiries@privacy.org.nz
Phone: 0800 803 909
European Union:
Your local data protection authority in your EU member state
List: https://edpb.europa.eu/about-edpb/board/members_en
United Kingdom:
Information Commissioner's Office (ICO)
Website: https://ico.org.uk
Phone: 0303 123 1113
16. Policy Updates and Version History
16.1 Notification of Changes
We will notify you of material changes to this Privacy Policy by:
Posting a notice on the Platform homepage
Sending an email to registered users (if changes significantly affect your rights)
Updating the "Last Updated" date at the top of this policy
16.2 Your Consent to Changes
Your continued use of the Platform after the effective date of any changes constitutes your acceptance of the revised Privacy Policy. If you do not agree with the changes, you must stop using the Platform and may request deletion of your account.
16.3 Version History
Version 1.0 - February 23, 2026
Initial publication of Privacy Policy
17. Acknowledgment and Acceptance
BY ACCESSING OR USING THE NZBLOCKCHAIN PLATFORM, YOU ACKNOWLEDGE THAT YOU HAVE READ, UNDERSTOOD, AND AGREE TO THIS PRIVACY POLICY IN ITS ENTIRETY.
You specifically acknowledge that:
✓ You understand how we collect, use, share, and protect your personal information
✓ You consent to the processing of your personal information as described in this Privacy Policy
✓ You understand your privacy rights and how to exercise them
✓ You understand that we may transfer your information internationally
✓ You understand our use of cookies and tracking technologies
✓ You are responsible for maintaining the security of your account credentials
✓ You will exercise caution when sharing financial information related to cryptocurrency
✓ You understand that this Privacy Policy may be updated from time to time
IF YOU DO NOT AGREE TO THIS PRIVACY POLICY, YOU MUST NOT ACCESS OR USE THE NZBLOCKCHAIN PLATFORM.
This Privacy Policy was last updated on February 23, 2026. Please check this page periodically for updates.
This document does not constitute legal advice. For legal advice specific to your situation, please consult a qualified attorney in your jurisdiction.
END OF PRIVACY POLICY