Last Updated: 03 July 2026
1. Introduction
1.1 TRACKRTEK LIMITED (NZBN 9429053598820), trading as TrackrTek (“TrackrTek”, “we”, “us”, “our”), is committed to protecting the privacy of individuals whose personal information we handle.
1.2 This Privacy Policy explains how we collect, use, store, disclose, and protect personal information in connection with the TrackrTek GPS tracking platform, hardware, SIM cards, and related services (the “Service”).
1.3 We comply with the Privacy Act 2020 (NZ) and the Information Privacy Principles (IPPs) set out in that Act.
1.4 This Privacy Policy applies alongside our Terms and Conditions. Capitalised terms used but not defined here have the meanings given in the Terms and Conditions.
2. Scope — who this policy applies to
This Privacy Policy applies to:
- Account holders — individuals and authorised representatives of businesses that hold a TrackrTek account.
- Website visitors — anyone who visits trackrtek.co.nz or related sites.
- Tracked individuals — individuals whose location is tracked by a TrackrTek customer using our Devices (see section 6).
- Enquirers and prospective customers — anyone who contacts us, signs up for marketing, or otherwise provides us with information.
3. The information we collect
3.1 Account and customer information
When you register, purchase, or use the Service, we collect:
- name and contact details (email address, phone number, postal address);
- business name, role, and NZBN (where applicable);
- account credentials (username, hashed password, two-factor authentication details);
- billing and payment information (handled by our payment processor — see section 7);
- communications with us (support tickets, emails, chat transcripts); and
- preferences and settings within the Platform.
3.2 Device and tracking data
When you use Devices and the Service, we collect:
- Device identifiers (IMEI, serial number, firmware version);
- location data (GPS coordinates, speed, heading, altitude, timestamps);
- telemetry data (signal strength, battery level, sensor readings, motion events);
- connection metadata (cell tower information, connection timestamps, data volumes); and
3.3 Website and platform usage data
When you visit our website or use the Platform, we automatically collect technical and usage data, including your IP address and approximate location, browser and device details, pages viewed and actions taken, referring URLs and search terms, and diagnostic data such as crash reports and performance information. We also use cookies and similar technologies (see section 11).
3.4 Marketing and communications information
If you subscribe to communications or interact with us on social media, we may collect your subscription status, engagement data (such as email opens and clicks), responses to surveys, and public information from your social media interactions.
4. How we collect information
4.1 Directly from you — when you register an account, purchase hardware, configure Devices, contact support, respond to surveys, or otherwise interact with us.
4.2 Automatically — through your use of the Service, the Platform, and our website (including via Devices, browsers, and apps).
4.3 From third parties — including payment processors, fraud prevention services, business directories, and (with your consent) social media platforms.
4.4 From other users — for example, when an account administrator adds you as a sub-user.
Where we collect information about you from someone other than you, we will take reasonable steps to ensure that you are aware of the collection unless an exception under IPP 3 applies.
5. Why we use information
We use personal information for the following purposes:
5.1 To provide the Service
- create and manage accounts;
- activate and manage SIM Cards and Devices;
- deliver tracking, telemetry, and Platform functionality;
- process payments and manage subscriptions;
- provide customer support.
5.2 To operate and improve our business
- maintain, secure, and improve the Platform and Devices;
- diagnose and fix bugs, prevent abuse, and monitor for fraud;
- analyse usage trends in aggregated, de-identified form;
- develop new features and services.
5.3 To communicate with you
- respond to enquiries and provide support;
- send service announcements, security alerts, and billing notices;
- send marketing communications where you have consented or where permitted by law (see section 12).
5.4 To comply with legal obligations
- meet our obligations under New Zealand law and the requirements of competent authorities;
- enforce our Terms and Conditions;
- protect our rights, property, and the safety of others;
- respond to lawful requests from regulators, law enforcement, or courts.
6. Tracking data — our role and yours
6.1 Your role. When you use TrackrTek to track individuals, you are the agency that determines the purposes and means of collecting their personal information under the Privacy Act 2020. You are responsible for:
- having a lawful basis for the tracking;
- notifying tracked individuals as required under IPP 3 (purpose, recipients, rights);
- obtaining any consents required by law (e.g., under employment, surveillance, or other legislation);
- responding to requests from tracked individuals for access to or correction of their information;
- ensuring tracking is fair, lawful, and not unreasonably intrusive (IPP 4); and
- complying with any other applicable laws (including overseas privacy laws if tracked individuals are based outside NZ).
6.2 Our role. We process tracking data on your behalf as part of providing the Service. We:
- act in accordance with your reasonable instructions as expressed through your use of the Platform;
- implement reasonable security measures (section 8);
- do not use tracking data for our own purposes, except to provide and improve the Service, comply with law, or in aggregated/de-identified form (section 5.2);
- will assist you (within reason) in responding to requests from tracked individuals.
6.3 Tracked individuals’ requests to us. If a tracked individual contacts us directly about their information, we will generally refer them to the relevant account holder (i.e., you), as you are best placed to respond. We may, however, take action where required by law.
7. Who we share information with
We share personal information only as described below.
7.1 Service providers and partners
We share information with trusted third parties who help us provide the Service. These include:
- Cloud hosting and infrastructure providers
- Payment processing providers
- Email and communications providers
- Analytics and monitoring providers
Each provider is bound by confidentiality and data protection obligations and is only permitted to use the information for the purposes for which we share it.
7.2 Within your organisation
If you are an account user belonging to a business customer, we may share your information with other authorised users in your organisation (such as administrators).
7.3 Legal and compliance
We may disclose information where:
- required by law, court order, or competent authority;
- necessary to investigate, prevent, or respond to fraud, security incidents, or violations of our Terms and Conditions;
- necessary to protect the rights, property, or safety of TrackrTek, our customers, or others; or
- in connection with a corporate transaction (e.g., merger, acquisition, sale of assets), in which case we will require recipients to protect the information.
7.4 With your consent
We may share information for other purposes with your express consent.
7.5 No sale of personal information
We do not sell personal information to third parties.
8. How we protect information
8.1 We use reasonable technical, organisational, and physical security measures to protect personal information against loss, misuse, and unauthorised access, use, modification, or disclosure. These include encryption of data in transit (TLS) and at rest where appropriate, role-based access controls and multi-factor authentication, network-level controls, regular security reviews and software updates, staff privacy and security training, and backup and disaster-recovery procedures.
8.2 No system is completely secure. While we work hard to protect personal information, we cannot guarantee absolute security, and you should also take steps to protect your account (such as using strong, unique passwords and enabling two-factor authentication).
8.3 If a privacy breach occurs that is likely to cause serious harm, we will notify affected individuals and the Office of the Privacy Commissioner as required by the Privacy Act 2020.
9. How long we keep information
9.1 We keep personal information only for as long as it is needed for the purposes described in this Privacy Policy, or as required by law.
9.2 General retention periods:
- Account information — for the duration of your account, plus 7 years after closure (to meet tax, contractual, and legal record-keeping obligations).
- Tracking data — at least 12 months from generation, then deleted or anonymised.
- Billing records — at least 7 years (to comply with the Tax Administration Act 1994).
- Support communications — 3 years from the last contact.
- Marketing data — until you unsubscribe, plus a short suppression record to honour your preference.
- Website analytics — 3 years.
9.3 When information is no longer needed, we delete or de-identify it in a secure manner.
10. Your rights
You have the following rights in relation to your personal information held by us.
10.1 Access (IPP 6). You may request a copy of the personal information we hold about you.
10.2 Correction (IPP 7). You may request that we correct personal information about you that is inaccurate, incomplete, out of date, or misleading.
10.3 Withdraw consent. Where we rely on your consent (such as for marketing), you may withdraw that consent at any time.
10.4 Unsubscribe. You may opt out of marketing communications at any time — see section 12.
10.5 Make a complaint. You may complain to us using the contact details in section 16. You may also complain to the Office of the Privacy Commissioner (see section 15).
10.6 How to make a request. Contact us at [email protected]. We may need to verify your identity before responding. We will respond within 20 working days, as required by the Privacy Act 2020. There is generally no charge, but we may charge a reasonable cost-recovery fee for complex requests.
10.7 Limitations. We may decline a request where the Privacy Act allows (for example, if the information relates to another individual, would breach legal privilege, or is subject to a statutory exception).
10.8 Tracked individuals. If you are an individual whose location is being tracked using TrackrTek by an account holder, please first contact that account holder. See section 6 for details.
11. Cookies and similar technologies
11.1 We use cookies and similar technologies on our website and Platform to:
- enable essential site and Platform functions (e.g., authentication, security);
- remember your preferences;
- understand how the site and Platform are used;
- measure marketing effectiveness.
11.2 Types of cookies we use:
- Strictly necessary — required for the site/Platform to function. Cannot be disabled.
- Functional — remember preferences and settings.
- Analytics — help us understand site usage.
- Marketing — used on our website to measure advertising performance and may be set by third parties.
11.3 You can control cookies through your browser settings. Disabling some cookies may affect site functionality.
12. Marketing
12.1 We may send you marketing communications about TrackrTek products and services where you have consented or where permitted by the Unsolicited Electronic Messages Act 2007.
12.2 Every marketing email includes an unsubscribe link. You can also opt out by contacting us at [email protected].
12.3 We do not share your contact details with third parties for their own marketing purposes.
13. Children
13.1 The Service is not directed at children under 16, and we do not knowingly collect personal information from children under 16 without parental or guardian consent.
13.2 If you believe we have collected information from a child without appropriate consent, please contact us so we can address the issue.
14. Changes to this Privacy Policy
14.1 We may update this Privacy Policy from time to time. The current version is always available at https://trackrtek.co.nz/privacy-policy/. It is your responsibility to review this Policy periodically. For minor changes, updates take effect once posted to the Platform. Where changes materially affect how we handle your personal information, we will take reasonable steps to notify you (e.g. by email or through the Platform) before they take effect. Continued use of the Service after changes are posted constitutes acceptance of the updated Policy.
14.2 The “Last Updated” date at the top of this Policy indicates when it was most recently revised.
15. Office of the Privacy Commissioner
15.1 If you are not satisfied with how we have handled your personal information or a privacy request, you may make a complaint to the Office of the Privacy Commissioner.
15.2 Contact details:
- Website: https://www.privacy.org.nz
- Phone: 0800 803 909
- Post: Office of the Privacy Commissioner, PO Box 10094, Wellington 6143, New Zealand
We encourage you to contact us first (see section 16) so we have the opportunity to resolve your concern.
16. Contact us
16.1 If you have questions about this Privacy Policy, or wish to exercise any of your rights, you can reach us at:
- Email: [email protected]
- Website: https://trackrtek.co.nz
16.2 TRACKRTEK LIMITED (NZBN 9429053598820).