PRIVACY POLICY

What type of information do we collect?

We receive, collect and store any information you enter on our website or provide us in any other way. In addition, we collect the Internet protocol (IP) address used to connect your computer to the Internet; login; e-mail address; password; computer and connection information and purchase history. We may use software tools to measure and collect session information, including page response times, length of visits to certain pages, page interaction information, and methods used to browse away from the page. We also collect personally identifiable information (including name, email, password, communications); payment details (including credit card information), comments, feedback, product reviews, recommendations, and personal profile.

Introduction

MyImprint (operating the brand myCarbon) is committed to protecting the privacy and security of the personal and organisational information that you share with us. This Privacy Policy explains how we collect, use, disclose, store and protect information, and your rights in relation to that information. Our services include the provision of emissions-management and sustainability software and support (“Services”). By using our website, platform, or engaging our Services, you agree to the terms of this Privacy Policy.

What type of information do we collect?
Personal Information

We may collect information about you (an identifiable individual) when you engage with our website, Services or otherwise interact with us. This information may include:

Your name, title, email address, telephone number, postal address, login credentials (username, password).
Payment or billing details required to purchase or access our Services.
Communications you send to us (such as via support, feedback or surveys).
Technical information such as your IP address, browser type and version, device identifiers, operating system, connection data, usage data, page response times and browsing actions on our website or platform.
Profile information such as your organisation’s name, industry sector, number of employees, role within the organisation.

Organisational Data

When you or your organisation uses our Services we may collect, process and store:

Organisational details (company registration, contact persons, billing contact).
Transaction-level data (for example purchase orders, energy/fuel/transport activity, invoices) and emissions-related data (for example activity statistics, usage data, emission factors) submitted by you or your organisation.
Aggregated or anonymised data derived from our Services that no longer identifies you or your organisation.

Cookies and Tracking Technologies

We use cookies, web beacons, pixels and similar technologies on our website and in our Services to support functionality, security, analytics, marketing and improvement of our Services. You will be informed of them via our cookie banner and can adjust your preferences.

How do we collect the information?

We collect information in the following ways:

Directly from you when you register for an account, request a quote, subscribe to communications, use our Services or complete forms on our website.
Automatically when you visit our website or use our Services (for example via cookies or device identifiers).
From third-party sources such as cloud platform providers, technical service providers, payment processors or publicly available records (where permitted).
From your organisation if you are acting on behalf of the organisation (for example we may obtain data submitted by your organisation that you then review or approve).

Why do we collect the information?

We collect and process information for the following purposes:

To provide, operate, improve and maintain our Services; to enable you or your organisation to access and use the features of our platform.
To process transactions, invoices and billing; to verify your identity, authenticate your access and prevent fraud.
To communicate with you, respond to requests, provide technical support, send service or account notices and updates.
To send you marketing communications (if you have consented or where otherwise permitted by law) about our Services, updates or relevant offers.
To generate aggregated or anonymised data and insights about usage, performance, trends, and to improve our Services, develop new features or support research.
To comply with our legal, regulatory or contractual obligations; to protect our legitimate interests (for example investigating abuse or misuse of our Services) or the rights, property or safety of others.

Legal Basis for Processing

We process information on the basis of your consent, contractual necessity (to provide you or your organisation our Services), or legitimate interests (for example to improve our Services, provide security, prevent fraud). You have the right to withdraw consent at any time (where processing is based on consent), though this will not affect processing based on other lawful bases.

Disclosure and sharing of information

We may share your personal or organisational information with:

Our subsidiaries, affiliates and service providers (processors) who perform functions on our behalf (for example hosting providers, payment gateways, analytics and marketing service providers). We ensure that these providers enter into contracts requiring them to protect your data and act only on our instructions.

Legal, regulatory, governmental or law-enforcement authorities if required by law or to protect our rights or property.

Other parties where you have consented, instructed us, or your organisation has authorised such sharing.

We do not sell your personal information to third parties for their marketing or other purposes.

International transfers of information

Your data may be transferred to, stored or processed in countries outside New Zealand (for example through our cloud-storage or hosting arrangements). Where we do so, we implement appropriate safeguards such as standard contractual clauses, data-transfer agreements, or use of providers in jurisdictions with data-protection adequacy decisions to ensure your rights are protected. If you would like details, please contact admin@myimprint.nz

Data retention

We retain personal and organisational information for as long as is necessary to fulfil the purposes for which it was collected, comply with applicable laws, resolve disputes or enforce our agreements. When the information is no longer required, we securely delete or anonymise it. If you’d like further detail about our retention schedule for specific data you provided, please contact us.

Security of information

We maintain organisational, technical and physical safeguards designed to protect your information from unauthorised access, disclosure, alteration or destruction (for example encryption in transit and at rest, secure access controls, regular security assessments, logging of access). Despite our efforts, no internet or IT system is 100% secure; you engage with us at your own risk.

Breach notification

In the event of a privacy-relevant data breach (i.e., a breach likely to result in serious harm to individuals or organisations), we will act to contain the breach, assess risk, notify affected individuals and/or regulatory authorities (such as the New Zealand Privacy Commissioner) as required by applicable law.

Your rights and choices

Depending on your jurisdiction and the nature of the data we hold, you may have rights including:

The right to access a copy of the personal information we hold about you.
The right to request correction of your personal information if it is inaccurate, incomplete or out-of-date.
The right to request deletion or anonymisation of your personal information (to the extent permitted by applicable law and provided it is no longer needed for legitimate purposes).
The right to restrict or object to certain types of processing (for example direct marketing or profiling).
The right to data portability (to obtain your personal data in a structured format and transmit it to another controller, where technically feasible).
The right to lodge a complaint with a supervisory authority in your jurisdiction.

To exercise any of these rights, you may contact us at admin@myimprint.nz . We will respond to your request in accordance with applicable laws and within statutory timeframes.

Cookies and tracking tools

Our website uses cookies and similar tracking technologies to enable core functionality, analytics, security and marketing. When you visit our website you will be shown a cookie banner; by clicking “Accept” you consent to our use of these technologies as described. You can withdraw consent or manage cookie preferences at any time via your browser settings or by contacting our privacy-team. Please note that disabling cookies may affect certain functionality of the website or Services.

Children’s data

Our Services are not directed at children under the age of 16 (or minimum local legal age). We do not knowingly collect personal information from children without verifiable parental or guardian consent. If you believe we may have collected information from a child without consent, please contact us and we will delete that information.

Changes to this policy

We reserve the right to update or modify this Privacy Policy at any time. When we make material changes we will notify you (for example via email or a notice on our website) and indicate the date of revision. We encourage you to revisit this page regularly.

Contact us

If you have any questions, requests or complaints regarding this Privacy Policy or our handling of your data, please contact us using the contact details on this website.

Last updated 20 November 2025