Privacy Policy

This Privacy Policy describes how Purelayer Ltd (we, us, our) collects, uses, and protects personal information in connection with the AiReady NZ platform, operated at aireadynz.co.nz. We are bound by the New Zealand Privacy Act 2020 and its Information Privacy Principles.

1. Who we are

Purelayer Ltd is a New Zealand registered company. Our contact for privacy matters is Lee Fleming at lee@purelayer.co.nz.

2. What information we collect

We collect the following information when organisations and their staff use AiReady NZ:

• Organisation name and access code (provided when an organisation subscribes)
• Staff member first name (entered voluntarily at login, used for progress tracking)
• Module completion status and quiz scores (stored against the staff member name and organisation code)
• Manager email address (provided when an organisation subscribes, used for billing and support)
• Usage analytics data including pages visited, module completion events, and quiz interactions (collected via PostHog analytics, no personally identifiable information is required for this)

We do not collect email addresses from individual staff members. We do not require individual accounts with passwords for staff access. We do not collect payment card information directly (payments are processed by Stripe under their privacy policy).

3. How we use the information

• To provide the AiReady NZ training platform to your organisation
• To track module completion progress for individual staff members within your organisation
• To generate completion reports accessible to your organisation's manager
• To issue completion certificates for individual staff members
• To improve the platform based on aggregated usage analytics
• To contact the organisation manager about their account, billing, and support

4. Information sharing

We do not sell personal information to any third party. We share information only in the following circumstances:

• With Supabase (our database provider, data stored in South Korea) for platform operation
• With PostHog (our analytics provider) for usage analytics, with no personally identifiable staff information included
• With Stripe (our payment processor) for billing, under their own privacy policy
• With Netlify (our hosting provider) for platform delivery
• If required by NZ law or a lawful request from a NZ authority

5. Data storage and security

Organisation and staff progress data is stored in Supabase, which uses servers in South Korea. Module completion data is also stored in your browser's local storage. We use industry standard security measures appropriate to the sensitivity of the information we hold. Staff first names and module progress scores are low-sensitivity data. Manager email addresses are kept confidential.

6. Access and correction

Under the Privacy Act 2020, you have the right to access and correct personal information we hold about you. To request access to or correction of your information, contact us at lee@purelayer.co.nz. We will respond within 20 working days as required by the Act.

7. Retention

We retain organisation and staff progress data for the duration of the organisation's active subscription plus 12 months. After this period, data is deleted. Organisations can request earlier deletion by contacting us.

8. Complaints

If you have a complaint about how we have handled your personal information, please contact us first at lee@purelayer.co.nz. If you are not satisfied with our response, you can contact the Office of the Privacy Commissioner at privacy.org.nz or 0800 803 909.

9. Changes to this policy

We may update this policy from time to time. The current version will always be available at aireadynz.co.nz/privacy/. Material changes will be communicated to organisation managers by email.