Privacy Notice

This Privacy Policy outlines how Paymark Limited trading as Worldline NZ (“Worldline NZ” or “us”or “our”or “we”)will collect, store, use and disclose any personal information provided to us in respect of our products and services including use of our apps, merchant portals, website and other associated services.

By providing us with your personal information or your continued use of our products, services, our apps, websites or associated services you provide unconditional consent to us collecting, storing, using and disclosing your personal information in the manner set out in this Privacy Policy.

Worldline NZ recognises the importance of safeguarding your personal information. We are bound by, and comply with, the Privacy Act 2020 (the “PrivacyAct”). If you are located in the European Union (“EU”), you may have rights under the EU General Data Protection Regulation (“GDPR”).

This Privacy Policy must be read in conjunction with our website terms and product terms and conditions.

Collection of information

The types of information we collect may include but not be limited to:

• Information you give us when you register for our products or services or to receive communications from us or otherwise interact with us including:  name, email address and other contact details, identity information, usernames and passwords, payment card details and any other personal information or items provided via our merchant portals, apps or websites.
• Information we receive from another person or organisation linked to your Worldline NZ accounts as part of the registration process or during use or maintenance of your Worldline NZ accounts.
• Information, including verification information, we obtain from trusted third parties about you, your personnel or your company to enable us to provide a product or service to you (e.g., banks or credit bureaus).
• Information collected using automated technologies which track visits to and use of our websites which we aggregate and does not identify individuals.
• Information collected using automated technologies which may identify an individual including information about a customer’s device or computer, use of our website, merchant portals and apps such as:
  • Information about computer or device: IP address and domain name, device type, operating system and browser information, device screen size and geographic location.
  • Information about use of our website: referring domain, pages visited on our website, date and time when website pages were accessed.
  • Cookies and similar technologies: information we obtain from cookies in the administration of our website and to improve the usability of our website. You may be able to configure your browser to notify you when you are offered a cookie and decide whether or not to accept it. However this may have a negative impact on use of our website.
  • Information about use of our products and services via our websites, merchant portals and apps: including date and time of use, payment cards registered, transaction data and expense information.

If you provide information (including personal information) of other individuals or third parties to us, you must have the express consent of such individual or third party to provide such information to us and for us to use such information for the purposes disclosed in this Privacy Policy.

You may decide not to provide your personal information to us. However, if you do not provide it we may not be able to provide you with full access to our products and services, merchant portals, apps, websites or associated services.

Use & disclosure of information

The information we collect will be retained by us for our business purposes including but not limited to:

• verifying your identity;
• communicating with you;
• providing our products and services and information about our products and services to you including but not limited to account administration and technical support;
• providing you with further information about us or other goods or services offered by us;
• providing you with news, reports or information that we consider may be of interest to you;
• marketing, promotional and publicity purposes (including direct marketing), market research and surveys;
• analysing use of our website, merchant portals and apps and associated services;
• reporting in aggregate form (with identifiable characteristics removed so that you will remain anonymous);
• monitoring the effectiveness of email campaigns; and
• improving the content of our website, merchant portals, apps and other products and services.

Your personal information will be made available internally at Worldline NZ for the above purposes and may be accessed by selected staff (such as customer service representatives).

We may also disclose your information to selected third party service providers who hold or process information on our behalf to help us provide our products and services or operate our apps, merchant portals and website. Third party service providers are subject to contractual restrictions to ensure that information held or processed on our behalf is protected.

We may disclose your information to Centrix who will verify the accuracy of that information for the purposes of our customer due diligence and credit checking requirements. Centrix may use the information to update its credit information bureau and provide the information as part of its credit reporting services to other subscribers.

We may use the services hosted by third parties to understand how our customers use our apps, merchant portals and websites and associated products and services, including but not limited to, Google Analytics, Mixpanel, Silverstripe, Klipfolio, Salesforce and Hotjar which may collect information for their own business purposes. For information on how these third parties collect and use your information, please refer to their privacy policies. By using our apps, portals or our website you consent to the processing of data by these third parties in accordance with their privacy policies. Users can opt-out of use of analytics tools as follows:

• to opt out of Mixpanel the user must visit https://mixpanel.com/optout/ and confirm opt out
• to opt out of Google, the user must download the extension on to their browser: https://tools.google.com/dlpage/gaoptout
• to opt out of HotJar, you can change the settings in your browser https://www.hotjar.com/opt-out

The functionality of some of our apps, merchant portals and website will allow users to send information electronically to and from third-party applications). We have no control over these applications and you are responsible for checking the privacy policy of those applications.

We may use or disclose personal information that you have provided to us, or which we have obtained about you:

• for the above-mentioned purposes;
• if we have given you notification of the intended use or disclosure and you have not objected to that use or disclosure;
• to comply with a legitimate request by a law enforcement or government agency pursuant to a statutory or regulatory requirement or as part of court proceedings or to protect our rights; and
• if we are authorised, required or permitted by law to use or disclose the information.

Storage & security

Information we collect in relation to use of our products and services, merchant portals, apps and websites and associated services is stored by Paymark Limited trading as Worldline NZ.

The security of your information is important to us and we have invested significant efforts to follow best industry practice to protect information. While we protect information to the best of our ability we cannot guarantee the security of factors beyond our control such as vulnerabilities that may be identified in Internet protocols.

Customers can be assured that as an entity that handles cardholder data we operate in accordance with strict requirements for protecting your cardholder data set out in the Payment Card Industry Data Security Standard (“PCI DSS”). Evidence of our PCI DSS compliance is available on request.

General Data Protection Regulation (EU) 2016/679 (GDPR)

Worldline NZ's access to EU personal data is very limited. EU personal data means any personal information of an individual who is in the EU (whether the individual is a citizen of an EU country or otherwise). Worldline NZ is a company that provides transaction processing services for New Zealand merchants and not to individuals in a personal capacity.  Worldline NZ is a wholly-owned subsidiary of Ingenico Group S.A. which is based in France, Ingenico’s privacy policy can be accessed here: https://www.ingenico.com/privacy-policy.

This section only applies to the collection and processing of EU personal data by Worldline NZ. This section will apply to you and the processing of your EU personal data if you are in an EU country. This section does not apply with respect to your personal information if you are located outside of the EU countries, even though you may be a citizen of an EU country. 

For the purposes of this section, the term ‘process’ has the meaning given to it under the GDPR and may include any operation or a series of operations performed on EU personal data, including collection, recording, organisation, structuring, storage, adaptation, retrieval, consultation, use, disclosure, by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

EU personal data that is collected by us may have been sourced directly from you, a third party (e.g., our European associates) or implied from your use of our services.

We process EU personal data in accordance with this section and our Privacy Policy. To the extent of any inconsistencies between other sections of our Privacy Policy and this section in relation to the processing of EU personal data, this section prevails.

We will only collect and process EU personal data where we have the legal grounds to do so. The principal legal grounds that justify our use of your EU personal data include where:

• you have consented to our use of your EU personal data;
• your EU personal data is necessary for us to perform our contracts with you;
• we need your EU personal data to comply with a legal obligation;
• we use your EU personal data to achieve a legitimate interest; and
• your EU personal data is necessary for us in respect of any legal claims by us, you or a third party.

Any EU personal data will be:

• processed lawfully, transparently and in a fair manner;
• collected only for the purposes identified in this Privacy Policy or any other agreed specified purposes and not further processed in a manner incompatible with those purposes;
• collected in an adequate and relevant manner and limited to what is necessary in relation to the purposes for which the EU personal data is processed;
• kept current and up-to-date in accordance with the ‘Right to Access’ section of this Privacy Policy;
• stored in a form which permits us to identify you, but only for the period necessary in relation to the relevant purposes identified in this Privacy Policy; and
• stored and processed securely to protect EU personal data against unlawful or unauthorized access and accidental loss, damage or disclosure in accordance with the ‘Storage & Security’ section of this Privacy Policy.

In addition to other rights you may have as set out in this Privacy Policy, you may exercise the data protection rights set out below in relation to your EU personal data:

• access and portability: a request can be made by you for a copy of your EU personal data and you may request to be provided with such EU personal data in a structured, commonly used and machine readable format (including for the purposes of transferring to another party).
• restrictions and objections: You may request that we limit our use of your EU personal data or processing by requesting that we no longer use your EU personal data or limit how we use your data, this may include where you believe it is not lawful for us to hold your EU personal data or instances where your EU personal data was provided for direct marketing purposes and now you no longer want us to contact you.

If you have any questions, comments or complaints about our handling of your EU personal data, or wish to contact us regarding your EU personal data, please use the contact details set out below in the ‘Contact’ section.

Right to access

Under the Privacy Act and the GDPR you are entitled to certain rights of access to your personal information held by us. You are also entitled to have any incorrect information corrected by us.

You may request access to, or correction of, any personal information we hold about you by sending an email to support@paymark.co.nz or Privacy Officer, Paymark Limited trading as Worldline NZ, Level 2, 162 Victoria Street, Auckland, 1010.

To ensure that the personal information we hold about you is accurate and current, please notify us of any changes to your personal information as soon as possible.

External websites

The website may contain links to a various third party website sources. Some of these links may request or record information from users or use cookies or other methods to collect information from you. We have no control over, and we are not responsible for, the content or privacy policy practices of such websites and/or the reliability of the information published on those websites, and encourage our users to review the privacy policies of such sites before engaging in any activity with them.

Communications

By registering to use our products and services or to receive communications from us, you agree that we can contact you by email and we may send you commercial electronic messages for the purposes of:

• providing our products and services and information about our products and services to you including but not limited to account administration and technical support;
• providing you with further information about us or other goods or services offered by us;
• providing you with news, reports or information that we consider may be of interest to you; and
• marketing, promotional and publicity purposes (including direct marketing), market research and surveys.

You will have the option to unsubscribe from any contact list that is not essential to provision of our products and services at any time using the “unsubscribe” link that appears in the email you receive from us.  

Official communication from us will be sent from the domains @paymark.co.nz or @paymarkclick.co.nz.

If you receive any other communication from a different domain this should be treated as spam and we take no responsibility for any such communication.  We sometimes uses third party tools to send out emails.  We seek to follow best practice where possible and make every effort to reduce the risk associated with email communications.   Due to the nature of email protocols, we are not able to guarantee the security of senders, receivers or email messages themselves.  If you receive anything from @paymark.co.nz or@paymarkclick.co.nz that looks suspicious in any way, please notify us via support@paymark.co.nz.

We would never ask you for your password or payment card information via email. 

We may also send push notifications to customers from our merchant portals and apps. A user can turn off functionality within the settings of our apps and merchant portals.

Changes to this policy

We reserve the right, at our discretion, to make changes to this Privacy Policy at any time. Changes to this Privacy Policy will take effect immediately once they are published on this website.  Please check this Privacy Policy regularly for modifications and updates.  If you continue to use our products and services, website and apps or associated services or if you provide any personal information after we post changes to this Privacy Policy, this will indicate your acceptance of any such changes.

Business transitions

In the event of a change in ownership of all or a portion of Paymark Limited trading as Worldline NZ, our products or services or the website, your personal information may be transferred to the new owner so that the website and/or product or service can continue operations.  In this event, your information would remain subject to this Privacy Policy.

Contact

If you have any questions about our Privacy Policy please feel free to contact us:

Privacy Officer, Paymark Limited trading as Worldline NZ, Level 2, 162 Victoria Street, Auckland, 1010.