Privacy Policy

1. Introduction

Orderlink NZ Limited ("Orderlink", "we", "us", or "our") is committed to protecting the privacy and security of the information entrusted to us.

This Privacy Policy explains how we collect, use, store, disclose, and protect personal information when you visit our website, use our software platform, connect third-party services, or otherwise interact with us.

Orderlink provides software and services that help businesses manage inventory, purchasing, demand planning, shipments, and other supply chain operations.

This Privacy Policy applies to our websites, applications, software, and related services (collectively referred to as the "Services").

By accessing or using our Services, you acknowledge the information practices described in this Privacy Policy.

2. Information We Collect

We collect information necessary to provide, maintain, and improve our Services.

Account and Business Information

When you register for an account, contact us, or use our Services, we may collect:

• Your name, email address, and contact information.
• Business name, address, and contact details.
• Account credentials and authentication information.
• Billing and subscription information.
• Communications with our team, including support requests and enquiries.

Business Operations Information

When using our platform, you may provide or authorise us to access information relating to your business operations, including:

• Products, SKUs, and inventory records.
• Suppliers, customers, and business contacts.
• Purchase orders and sales orders.
• Warehouse and fulfilment information.
• Shipment and logistics information.
• Manufacturing and production records.
• Sales history and demand forecasts.
• Financial and accounting information.

Some of this information may contain personal information, such as customer names, email addresses, telephone numbers, and delivery addresses.

Information From Third-Party Integrations

Our Services allow you to connect external applications and platforms, including ecommerce, accounting, and logistics systems.

When you authorise these connections, we may collect and process information made available through those services, depending on the permissions granted and the functionality enabled.

We only seek access to information reasonably necessary to provide the relevant functionality.

Website and Usage Information

When you visit our website or use our platform, we may automatically collect certain technical information, including:

• IP addresses and approximate geographic location.
• Browser type, operating system, and device information.
• Pages visited and interactions with our website.
• Application activity and usage information.
• Cookies and similar tracking technologies.
• Technical logs, error reports, and diagnostic information.

We use this information to maintain our Services, understand how they are used, and improve their performance.

3. How We Use Information

We use the information we collect to operate our business and provide our Services.

This includes:

• Creating and managing user accounts.
• Providing inventory, purchasing, shipment, and supply chain management functionality.
• Synchronising information between connected applications.
• Processing and managing business transactions and operational records.
• Generating forecasts, reports, and planning recommendations.
• Providing technical support and responding to enquiries.
• Managing subscriptions, billing, and payments.
• Improving the functionality, reliability, and usability of our Services.
• Monitoring security and preventing unauthorised access or misuse.
• Communicating important updates about our Services.
• Complying with applicable legal and regulatory obligations.

We may also use your business contact information to communicate relevant information about our products and services, subject to applicable marketing laws and your communication preferences.

We do not sell personal information to third parties.

4. How We Share Information

We may share information with trusted third parties where necessary to operate our business and deliver our Services.

Service Providers

We may engage third-party providers to support our operations, including cloud hosting, data storage, payment processing, email communications, analytics, and technical infrastructure.

These providers may process information on our behalf to deliver their services.

Third-Party Integrations

Where you authorise Orderlink to connect with external applications, we may exchange relevant information with those applications to provide the requested functionality.

This may include integrations with ecommerce platforms such as Shopify, accounting systems, logistics providers, and other business software.

Legal and Regulatory Requirements

We may disclose information where required by law, regulation, court order, or other lawful request.

We may also disclose information where reasonably necessary to protect our rights, investigate suspected fraud, or maintain the security of our Services.

Business Transfers

If Orderlink undergoes a merger, acquisition, restructuring, or sale of assets, information may be transferred as part of that transaction, subject to applicable privacy laws.

We do not share personal information with third parties for their independent marketing purposes without an appropriate legal basis.

5. Data Storage and Security

We take reasonable technical and organisational measures to protect information against unauthorised access, loss, misuse, alteration, and disclosure.

These measures may include:

• Secure cloud hosting and infrastructure.
• Access controls and authentication systems.
• Encryption of information where appropriate.
• Restricted access to sensitive information.
• Security monitoring and system maintenance.
• Regular software updates and security improvements.

Access to customer information is limited to authorised personnel and service providers who require it to perform their responsibilities.

While we take reasonable precautions to protect information, no method of electronic transmission or storage can guarantee absolute security.

Users are responsible for maintaining the confidentiality of their account credentials and ensuring that their accounts are accessed only by authorised individuals.

6. Data Retention

We retain information for as long as reasonably necessary to provide our Services, fulfil legitimate business purposes, and comply with applicable legal obligations.

Retention periods may vary depending on the nature of the information, how it is used, and any applicable legal requirements.

When an account is closed or a third-party integration is disconnected, we will handle the associated information in accordance with our data retention procedures and applicable legal requirements.

Certain information may be retained where necessary for legal compliance, financial recordkeeping, security, dispute resolution, or other lawful purposes.

When information is no longer required, we take reasonable steps to securely delete or de-identify it.

7. Your Privacy Rights

Depending on your location and applicable privacy laws, you may have certain rights regarding your personal information.

These may include the right to:

• Request access to personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of personal information where applicable.
• Withdraw consent where processing is based on consent.
• Object to or restrict certain uses of personal information where applicable.
• Lodge a complaint with a relevant privacy authority.

To exercise these rights, please contact us using the details provided at the end of this Privacy Policy.

Where we process personal information on behalf of a business customer, we may direct relevant requests to that business or assist them in responding.

We will respond to requests in accordance with applicable privacy laws.

8. International Data Transfers

Orderlink is based in New Zealand and provides Services to businesses operating internationally.

As part of delivering our Services, information may be stored, accessed, or processed in countries outside New Zealand.

This may occur where our hosting providers, technology partners, or other service providers operate internationally.

Where required by applicable privacy laws, we take reasonable steps to ensure that personal information transferred internationally is subject to appropriate safeguards. These safeguards may include contractual protections and other measures designed to maintain an appropriate level of privacy and security.

9. Cookies and Analytics

Our website and Services may use cookies and similar technologies to support functionality, analyse usage, and improve the user experience.

Cookies are small files stored on your device that help websites recognise browsers and remember certain information.

We may use cookies and analytics technologies to:

• Maintain website and application functionality.
• Understand how visitors interact with our website.
• Analyse website traffic and usage patterns.
• Identify technical issues and improve performance.
• Remember user preferences where applicable.

We may use third-party analytics services to better understand website interactions and improve our Services.

You can manage or disable certain cookies through your browser settings.

Disabling cookies may affect the functionality of some parts of our website or Services.

Where required by applicable law, we will obtain consent before using non-essential cookies or tracking technologies.

10. Third-Party Websites and Services

Our website and platform may contain links to, or integrate with, third-party websites, applications, and services.

These third parties operate independently and may have their own privacy policies and data handling practices.

We encourage users to review the privacy policies of any third-party services they choose to access or connect.

Orderlink is not responsible for the independent privacy practices of third-party websites or services.

11. Children's Privacy

Our Services are intended for business use and are not directed towards children.

We do not knowingly collect personal information directly from children for the purpose of creating or operating Orderlink accounts. If we become aware that personal information has been collected from a child in circumstances that require its removal, we will take appropriate steps in accordance with applicable law.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our Services, business practices, technology, or legal obligations.

Any updates will be published on this page, together with a revised "Last updated" date.

Where required by law, we will provide additional notice of material changes.

We encourage users to review this Privacy Policy periodically to stay informed about how we handle information.