NZTE Privacy Policy

Last updated: May 2025

This Privacy Policy outlines how New Zealand Trade and Enterprise ('NZTE', 'we', 'our', or 'us') collects, stores, and processes your personal information. References to NZTE include our business units and subsidiaries where applicable. This Policy should be read together with our Terms of Use and Terms of Engagement.

Information we collect

We collect personal information for purposes related to our role as a New Zealand Crown entity, including:

  • Information you provide directly, such as data submitted via our websites, applications, or social media platforms. If you choose not to provide required information, some services or website features may not be available.
  • Aggregate information generated by our systems or those of our service providers, including data on website traffic and user interactions.
  • Data gathered through cookies and similar technologies, which may include device information (such as model, browser, IP address) and usage behavior.

For more details, please review our "Cookies and Tracking" section and Cookie Policy.

How we use your information

We use your personal information for the purposes it was collected, with your consent, or as permitted by law. This may include:

  • Identity verification and password recovery support,
  • Providing services or receiving services from you,
  • Sharing information about services we believe may interest you,
  • Sharing with non-profit third parties aligned with our mission,
  • Marketing, research, and promotional activities,
  • Service improvements and analytics,
  • Displaying relevant information based on your interests,
  • Protecting against unauthorized system access, and
  • Supporting NZTE-related entities and functions.

We take reasonable steps to ensure accuracy before using your information. See 'Cookies and Tracking' for further information.

Information disclosure

We may share information:

  • With third-party service providers to help deliver, manage, or improve our services, or assist with marketing and communications.
  • With third parties when legally required or when authorized by you.
  • With government agencies or law enforcement for security, fraud prevention, or legal compliance.
  • With analytics providers such as Google and Microsoft.

Some information may be processed on systems operated by trusted third parties and is subject to ongoing cybersecurity monitoring.

Data storage and correction

Your personal data is stored securely by NZTE and authorized agents. We implement appropriate measures to protect it from loss, misuse, or unauthorized access. Information is retained as long as required for lawful purposes.

Under New Zealand's Privacy Act 2020, you have the right to access and request correction of your personal information. Visit the Privacy Commissioner website for more information.

Use of generative AI

In 2025, NZTE continues to adopt generative AI tools to enhance services. Personal data may be processed by AI systems approved under NZTE's strict internal governance. All AI-generated outputs are carefully reviewed to ensure accuracy, ethics, and compliance.

Our AI governance framework ensures responsible use, security oversight, and continuous evaluation of AI technologies within NZTE.

Cookies and tracking

Our websites use both first-party and third-party cookies to improve user experience and site functionality.

Cookies are small text files stored on your device to recognize you, remember preferences, and collect usage data. Similar technologies include JavaScripts and web beacons.

Although cookies generally do not directly identify individuals, they may be linked to personal data under applicable data protection laws.

For full details, please refer to our Cookie Policy.

Third-party sites and partners

Our websites may contain links to third-party websites with separate privacy policies. While we carefully select partners, we are not responsible for external content or privacy practices.

Microsoft may collect and process personal data received from our websites in accordance with the Microsoft Privacy Statement, for purposes including product development, analytics, and advertising.

EEA residents

If you are located in the European Economic Area (EEA), the following additional terms apply under the General Data Protection Regulation (GDPR):

Data controller

New Zealand Trade and Enterprise, Level 15, 100 Willis Street, Wellington, New Zealand. Contact: [email protected]

Legal basis for processing

We process your data under one or more lawful grounds, including contractual necessity, legitimate interest, legal obligation, public task, or consent where applicable.

Your rights under GDPR

EEA residents may:

  • Access their personal data;
  • Request corrections;
  • Request erasure under specific conditions;
  • Restrict processing;
  • Request data portability;
  • Object to processing, including for direct marketing.

You may also lodge complaints with a relevant data protection authority in the EEA.

International transfers

Your data may be transferred outside the EEA. We implement safeguards to ensure equivalent protection of your data wherever it is processed.

Data retention

Personal information is retained only as long as necessary to fulfill the purposes for which it was collected.

Policy updates

We reserve the right to update this Privacy Policy. Continued use of our services following any updates indicates your acceptance of the revised Policy.

Contact information

For privacy inquiries: [email protected]

For service inquiries: [email protected]