MadLabz Privacy Policy
This Privacy Policy applies to the MadLabz website and MadLabz products and services unless a product presents a more specific privacy notice. A product-specific notice may supplement this policy for information processed by that particular product.
MadLabz is based in Christchurch, New Zealand, and provides software products and services to customers and organisations internationally.
Our primary privacy framework is the New Zealand Privacy Act 2020. Depending on where a person is located and the circumstances in which MadLabz provides services there, additional privacy laws may also apply.
01
About this policy
Personal information is information about an identifiable individual. This can include obvious information such as a name or email address, but it can also include other information that can reasonably be linked to a person.
We aim to collect personal information only where it is reasonably necessary for a lawful purpose connected with the operation of MadLabz, our website or our products.
The information collected will depend on how you interact with MadLabz. Simply visiting the website generally requires much less personal information than creating an account, purchasing a product or submitting information to a MadLabz service.
02
Information we collect
Depending on the product or service you use, MadLabz may collect information you provide directly, including your name, email address, organisation, account information, support messages, form submissions and information you choose to provide while using a product.
Some MadLabz products may also process business information that you submit, connect or ask the product to analyse. This can include website content, URLs, product information, business descriptions, technical information and other material relevant to the service being provided.
When you use our website or products, technical information may also be generated automatically. This can include IP address, browser or device information, timestamps, request information, diagnostic data, security logs and general usage information.
If payments are offered, payment information may be processed by a payment provider. MadLabz does not need to receive or store every piece of payment-card information processed by that provider.
03
Information collected from other sources
Some MadLabz products are designed to analyse information that already exists publicly or that is made available through a connected service. For example, a product may examine information published on a business website in order to perform an SEO, visibility, publishing or business-intelligence task.
Where MadLabz collects personal information about an identifiable person from another source, we will consider the requirements applying to indirect collection, including whether notification to the individual is required and whether an exception applies.
New Zealand indirect-collection rules
Information Privacy Principle 3A came into force on 1 May 2026. It can require an organisation that collects personal information indirectly to take reasonable steps to inform the individual about that collection, subject to the exceptions provided by law.
04
How we use information
MadLabz may use information to provide, operate, maintain and improve our website and products; respond to enquiries and support requests; create and manage accounts; provide requested analyses or outputs; process transactions; maintain security; investigate faults or misuse; and meet legal obligations.
We may also use aggregated or de-identified information to understand product performance, improve reliability and learn how our systems are being used where the information is no longer reasonably capable of identifying an individual.
We do not intend to use personal information for a materially different purpose without considering whether that further use is permitted and whether additional notice or permission is appropriate.
05
AI and automated processing
Some MadLabz products use artificial intelligence, machine-learning models or other automated systems as part of the service they provide.
Information submitted to those products may be processed in order to analyse content, generate recommendations, classify information, create outputs, identify patterns or complete other requested product functions.
Where third-party infrastructure or model providers are used to process information on our behalf, we aim to provide only the information reasonably required for the relevant function and to use providers under appropriate service and privacy arrangements.
AI-generated recommendations and outputs can be imperfect. Where a decision has important legal, financial, employment, health or similarly significant consequences, users should not rely solely on an automated output without appropriate human review.
07
Service providers
MadLabz relies on service providers to operate parts of our infrastructure. Depending on the product, these may provide services such as cloud hosting, databases, authentication, email delivery, security, monitoring, payments, analytics or AI processing.
These providers may process information on our behalf where this is necessary to provide their service. We aim to select providers and arrangements appropriate to the nature of the information and the service being delivered.
We may also disclose information where required or permitted by law, where necessary to protect rights, security or safety, or in connection with a legitimate corporate transaction subject to applicable privacy obligations.
08
International processing
MadLabz operates from New Zealand and provides digital products and services internationally. Customers, users, service providers and infrastructure involved in providing those services may therefore be located in different countries.
Personal information may be processed or stored in New Zealand or in other countries where MadLabz service providers, infrastructure providers or other authorised processors operate.
Privacy and data-protection laws can differ between countries. Where MadLabz makes a disclosure of personal information outside New Zealand that is subject to Information Privacy Principle 12, we will consider whether the overseas recipient is subject to appropriate privacy protections or whether another lawful basis for that disclosure applies.
Where a service provider processes information only on behalf of MadLabz, the legal treatment may differ from a disclosure to an independent overseas recipient. We assess the relevant arrangement according to its purpose and the way information is handled.
09
International users
MadLabz products may be accessed or purchased by individuals, businesses and organisations outside New Zealand.
Our primary privacy framework is New Zealand law. However, depending on where you are located, the services being provided and how MadLabz operates in your jurisdiction, local privacy or data-protection laws may provide additional rights or impose additional obligations.
Nothing in this Privacy Policy is intended to remove any privacy right that cannot lawfully be excluded under an applicable law.
If you are outside New Zealand and believe a privacy law in your jurisdiction gives you a particular right relating to information handled by MadLabz, you can contact us. We will assess the request in light of the circumstances and applicable law.
New Zealand-based. International by design.
Operating internationally does not mean every privacy law in every country automatically applies in the same way. Where regional requirements become applicable to a MadLabz product or market, we may provide additional notices, controls or contractual terms for that region.
10
Data retention
We aim to keep personal information only for as long as it is reasonably required for the purpose for which it was collected, for a legitimate operational requirement, or where a longer period is required or permitted by law.
Different information may have different retention periods. For example, account information, security records, transaction records and temporary product data may each need to be retained for different periods.
When information is no longer required, we may delete, anonymise or otherwise dispose of it in an appropriate manner.
11
Security and privacy breaches
MadLabz uses reasonable technical and organisational measures intended to protect information against loss, unauthorised access, misuse, alteration and disclosure.
No online service can guarantee absolute security. Security measures therefore need to evolve as systems, risks and products change.
If MadLabz becomes aware of a privacy breach that is required to be notified under New Zealand law, we will take the steps required by the Privacy Act, including notifying the Office of the Privacy Commissioner and affected individuals where required.
Where another applicable privacy law requires additional breach notification or response steps, MadLabz will assess those requirements in the circumstances.
12
Your privacy rights
Under the New Zealand Privacy Act, you may have the right to ask whether MadLabz holds personal information about you, request access to that information and ask for inaccurate information to be corrected.
We may need to verify your identity before providing access or making a correction. The law may also permit or require information to be withheld in some circumstances.
Users in some countries or regions may have additional rights under applicable privacy laws. Those rights may include, depending on the law and circumstances, rights relating to access, correction, deletion, restriction, objection, portability or complaints to a local privacy authority.
The existence and scope of those rights depends on the applicable law. MadLabz does not represent that every right listed above applies to every user in every jurisdiction.
If you have a privacy concern, we encourage you to contact MadLabz first so we can investigate it. New Zealand users may also raise a complaint with the New Zealand Office of the Privacy Commissioner.
Office of the Privacy Commissioner13
Children
MadLabz products are primarily designed for businesses, organisations and adult users unless a particular product clearly states otherwise.
We do not intentionally design general MadLabz business products for children to provide personal information independently. If a future product is intended for children or young people, we may provide additional privacy information and safeguards appropriate to that product and the countries in which it is offered.
14
Changes to this policy
MadLabz may update this Privacy Policy as our products, technology, service providers, markets or legal obligations change.
When we update the policy, we will change the "Last updated" date shown on this page. If a change materially affects how personal information is handled, we may provide additional notice where appropriate.
As MadLabz expands internationally, we may also introduce additional product-specific or regional privacy notices where they are appropriate or required.
15 · Contact
Contact MadLabz about privacy.
For privacy questions, access or correction requests, requests relating to rights available in your jurisdiction, or concerns about how personal information has been handled, contact MadLabz through our contact page.
MadLabz
Christchurch, New Zealand
Serving customers internationally

