Privacy Policy

Privacy Policy

Carparks NZ

Last updated: 3/06/2026

Website: Carparks.nz



1. Introduction

Carparks NZ ("we", "us", "our") is committed to protecting the privacy of our customers and website users in accordance with the New Zealand Privacy Act 2020 and the Information Privacy Principles (IPPs) contained within it.

This Privacy Policy explains how we collect, use, store and disclose personal information in connection with our website, platform and car-park licensing services. It also explains your rights under the Privacy Act 2020.


2. Who We Are

Carparks NZ operates an online platform that connects customers with available carpark spaces for license. We are an agency under the Privacy Act 2020 in relation to personal information we collect or hold in connection with our platform and provision of our services.

For privacy enquiries, you can contact us at:

Privacy Officer Carparks NZ

  1. Email: info@carparks.nz
  2. Website: Carparks.nz


3. What Personal Information We Collect

We collect the following categories of personal information:

Identity & Contact Information

  1. Full name
  2. Email address
  3. Phone number
  4. Mailing or billing address

License & Vehicle Information

  1. Vehicle details and registration plate number(s) associated with your license and in connection with parking allocation, access management, enforcement, and compliance with car-park rules.

Payment & Billing Information

  1. Billing address
  2. Payment method details (e.g. credit or debit card details)
  3. GST/tax invoice details.

Carpark

  1. access cards, gate codes or access-device identifiers;
  2. car-park entry and exit logs;
  3. CCTV, ANPR, images or video footage;
  4. incident, towing, enforcement or unauthorised-parking records;
  5. landlord/property-owner details;
  6. business contact details for commercial tenants or owners.

Note: Full payment card details are processed and stored securely by our third-party payment processor and are not stored on our systems. See Section 6 for details.

Account & Usage Information

  1. Username and password (stored in encrypted form)
  2. Login activity and session data
  3. Communications between you and us through the platform


4. How We Collect Personal Information

Direct Collection

We collect personal information directly from you when you:

  1. Create an account on our website
  2. Submit an application to license a carpark
  3. Enter into a license agreement through our platform
  4. Make or manage payments via the platform
  5. Contact us with an enquiry or complaint
  6. Update your account details

We may also collect certain technical information automatically when you visit our website (such as IP address and browser type) for security and platform administration purposes.

Property owners, managers and body corporates may also be agencies in their own right. Where they independently collect or use personal information, their own privacy obligations and notices may apply.

Right not to provide information

You are not required by law to provide most of the information requested by us, but if you do not provide information marked as required, we may not be able to license a car park to you, create or maintain your account, process payments, allocate or manage parking access, verify authorised vehicles, manage incidents, or enforce parking terms.

You have the right to restrict provision of vehicle identification information under the Land Transport Act (Motor Vehicle Register Authorised Access) Regulations 2010 by notification to the Registrar NZ Transport Agency Waka Kotahi through the NZTA Personal Info Access Portal.

Indirect Collection

We collect personal information indirectly from you when we collect your personal information from any source other than directly from you.


We may collect personal information from third parties where it is lawful and reasonably necessary for the purposes in this policy, including from property owners, managers, body corporates, access-control providers, gate applications, CCTV/ANPR providers, payment providers, enforcement providers, towing operators, debt collectors, insurers, professional advisers, vehicle licensing or registration sources, government or law enforcement agencies, public registers, and publicly available sources relevant to identity, authority, access, enforcement, safety, fraud prevention, legal compliance or dispute resolution.


Where we rely on your authorisation to collect information from another source, that authorisation applies only to information that is reasonably necessary for the purposes described in this policy. We will also take reasonable steps to notify you of indirect collection where IPP3A requires us to do so, unless an exception applies.


If we collect personal information about you from another source, we will take reasonable steps, as soon as reasonably practicable after collection, to make you aware of the fact of collection, the purpose of collection, intended recipients, the name and address of the agency collecting and holding the information, any law authorising or requiring collection, and your access and correction rights, unless an exception under the Privacy Act applies.


If we indirectly collect your Personal Information, we will notify you as soon as reasonably practical after the information has been collected:

- that we have collected your Personal Information;

- the name and address of the agency that we collected your Personal Information from;

- the purpose of collecting your Personal Information;

- if the collection is authorised or required by law, which particular law;

- who we intend to share the collection with; and

- of your right to access and correct your Personal Information.


We do not have to notify you of our indirect collection of your Personal Information if one or more of the following exceptions apply:

- you have already been made aware of the indirect collection;

- your information will not be used in an identifiable form;

- your information will be used for research and statistics and publishing will not identify you;

- non-compliance would not prejudice the interests of you;

- your personal information is already publicly available;

- telling you would prejudice the purposes of the collection;

- telling you is not reasonably practical in the circumstances;

- compliance would prejudice the security or defence of New Zealand (or the Cook Islands, Niue, Tokelau, or Ross Dependency), or the international relations of the Government of New Zealand;

- compliance would reveal a trade secret;

- telling you would cause a serious threat to public health or safety, or to the health and safety of another individual; or

- non-compliance is necessary for

o maintenance of the law;

o enforcement of the law that imposes a pecuniary penalty;

o protection of public revenue; or

o conduct of court/tribunal proceedings.


By agreeing to this privacy policy, you authorise that we may indirectly collect your Personal Information in accordance with Information Privacy Principle 2(2) (IPP2(2)) and IPP3A of the Privacy Act 2020.


5. Why We Collect Personal Information (Purpose of Collection)

We collect and use your personal information for the following purposes:


To verify your identity and create your account:

  1. Name, contact details


To process and manage your carpark license including access to carparks and verify authorised vehicles

  1. Name, contact details, vehicle registration access logs, access device details, access logs, gate operators, CCTV or ANPR providers


To prevent, investigate and respond to unauthorised parking, misuse, safety incidents or disputes

  1. Account details, license details, vehicle registration, access logs, CCTV/ANPR or incident information where used. Photographs, access logs, ANPR, CCTV, communications and payment records may be used as evidence for breach, towing/clamping, dispute resolution, debt recovery and legal proceedings


To process payments and manage billing

  1. Payment details, billing address


To communicate with you about your license

  1. Name, contact details


To send operational notices (e.g. license renewals, payment receipts, platform updates) including to improve and secure our website and platform

  1. Email, phone number, technical data, IP address, browser/device data, login/session data


To share relevant details with property owners/managers

  1. Name, contact details, vehicle registration (see Section 6)


To comply with legal, tax, accounting, reporting and record-keeping obligations, including obligations to Inland Revenue where applicable.

  1. All relevant information


To investigate complaints or disputes

  1. Relevant account and license information


We will only use your personal information for the purposes for which it was collected, or for a directly related purpose, unless we have your consent or are otherwise permitted by law.


6. Disclosure of Personal Information

We may disclose personal information where we believe on reasonable grounds that disclosure is permitted by the Privacy Act 2020, including because it is one of the purposes for which the information was collected, is directly related to those purposes, is authorised by you, is required or authorised by law, is necessary for legal proceedings or enforcement of a law, or is necessary to prevent or lessen a serious threat to health or safety.

To provide our services and business, we may share your personal information with the following parties:

Property Owners and Landlords

We share relevant tenant information — including your name, contact details, and vehicle registration — with the property owner or manager of the carpark you license. This is necessary to facilitate your license arrangement and to enable access management and compliance at the property.

Payment Processor

We use a third-party payment processor to handle payment transactions securely. Your payment card details are transmitted directly to and stored by our payment processor. We do not store full card details on our systems. Our payment processor is contractually required to handle your information securely and in accordance with applicable standards (including PCI-DSS).

Email and SMS Communication Provider

We use a third-party provider to send you transactional and operational communications (such as license confirmations, payment receipts, and important notices about your account). This provider is only permitted to use your contact details for this purpose on our behalf.

Legal and Regulatory Disclosure

We may disclose your personal information if required to do so by law, court order, or lawful request by a government or regulatory authority, or where we believe disclosure is necessary to protect the rights, property, or safety of Carparks NZ, our users, or others.

Business Transfer

If Caraparks NZ is involved in a merger, acquisition, or sale of assets, your personal information may be transferred as part of that transaction. We will notify you of any such change via email or a prominent notice on our website.

We do not sell your personal information to third parties.

Operation of our business

We may provide information to the following to provide our business:

  1. cloud hosting and IT infrastructure providers;
  2. website analytics providers;
  3. accountants, auditors, insurers and legal advisers;
  4. debt collection or parking enforcement providers;
  5. access-control, Eledes Gates, CCTV or ANPR providers;
  6. property managers and building managers;
  7. government agencies where required or authorised by law;
  8. overseas service providers.

Overseas storage and disclosure Some of our service providers may store or process personal information outside New Zealand. Where IPP12 applies, we will take reasonable steps to ensure the overseas recipient is required to protect the information in a way that, overall, provides comparable safeguards to the Privacy Act 2020, unless another permitted basis applies.

Where an overseas service provider stores or processes information solely for us and not for its own purposes, the information may be treated as held by us under section 11 of the Privacy Act. We remain responsible for taking reasonable steps to protect it

CCTV

Where CCTV, ANPR or similar monitoring is used at a car park we control, we or the relevant property operator will use reasonable signage or notices to tell people that monitoring is occurring, the purpose of monitoring, who operates the system, and how to contact the relevant agency. We do not record audio unless expressly notified.


7. Storage and Security of Personal Information

Your personal information is stored on secure servers. We take reasonable steps to protect your information from loss, misuse, unauthorised access, disclosure, alteration, or destruction. These measures include:

  1. Encrypted storage of passwords and sensitive data
  2. Secure HTTPS connections for all data transmission
  3. Restricted access to personal information on a need-to-know basis
  4. Use of reputable, security-certified third-party service providers

While we take all reasonable precautions, no method of internet transmission or electronic storage is completely secure. We encourage you to use a strong, unique password for your account and to notify us immediately if you suspect any unauthorised access.

If we become aware of a privacy breach that is notifiable under the Privacy Act 2020, we will notify the Office of the Privacy Commissioner and affected individuals as required.


8. Retention of Personal Information

Retention of Personal Information Different retention periods may apply to different categories of information.

We may retain tax, accounting, invoice, payment and business records for at least 7 years where required for tax, accounting or company record-keeping purposes. We may also retain relevant information for longer where reasonably required for legal proceedings, dispute resolution, enforcement, audit, fraud prevention, insurance or compliance purposes.

Other account, licence and vehicle information will generally be retained for the duration of your account or licence and for a reasonable period afterwards, unless a longer period is required or permitted for one of the reasons above.

When personal information is no longer required, we will securely delete or anonymise it.


9. Your Rights Under the Privacy Act 2020

Under the Privacy Act 2020, you have the right to request access to the personal information we hold about you and to request correction of that information if you believe it is wrong, incomplete or misleading. You may also ask us to delete or anonymise information where we no longer have a lawful reason to retain it, although we may retain information where required or permitted by law.

Access requests may include requests for CCTV or ANPR information about you. We may need to verify identity and may withhold or redact information where permitted by the Privacy Act, including to protect other individuals’ privacy

To exercise any of these rights, please contact our Privacy Officer at info@carparks.nz. We will respond to your request within 20 working days, in accordance with the Privacy Act 2020.

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner:

  1. Website: www.privacy.org.nz
  2. Phone: 0800 803 909


10. Cookies and Tracking

Our website may use cookies (an alphanumeric identifier that we transfer to your computer’s hard drive so that we can recognise your browser) and similar tracking technologies to improve your experience and to analyse website usage.

Information collected in this manner may include (but is not limited to):

  1. page information including the URL of the page you are viewing;
  2. your browser information, including the name of the browser you are using to view the site;
  3. your IP address and your location derived from your IP address;
  4. technical information about your device (e.g., browser type, operating system, basic device information) the web page you visited or search query you entered before reaching our website, and your activities; and
  5. the date and time you accessed our site.

Where collected, the above information may be used to improve our website and/or services and to review how our website is being used. You can control or disable cookies through your browser settings. Disabling essential cookies may affect the functionality of the platform.


11. Third-Party Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those websites. We encourage you to read the privacy policies of any third-party sites you visit.


12. Electronic Communication With Us

Service, transactional and account-related messages are not marketing messages. We may send you service, transactional and account-related messages, including license confirmations, payment receipts, security notices, renewal reminders and important service updates.

We will send commercial electronic marketing messages only where we have consent or are otherwise permitted by the Unsolicited Electronic Messages Act 2007. Marketing messages will identify us as sender and include a functional unsubscribe facility.


13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for legal, operational, or regulatory reasons. When we make material changes, we will notify you by email or by posting a prominent notice on our website, and update the "Last updated" date at the top of this policy.

We encourage you to review this policy periodically.


14. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or how we handle your personal information, please contact us:

Privacy Officer Carparks NZ

Email: info@carparks.nz

Website: Carparks.nz


We take privacy complaints seriously and will respond promptly.