Last Updated: January 1, 2025
Effective Date: January 1, 2025
GDPR Rights and Data Protection
At yardstickgo.com, we are committed to protecting your personal data and respecting your privacy rights. This page explains your rights under the General Data Protection Regulation (GDPR) and the New Zealand Privacy Act 2020.
We believe in transparency and giving you control over your personal information. This document provides detailed information about how to exercise your data protection rights.
1. Data Controller Information
The data controller responsible for your personal information is:
Company Name: yardstickgo.com
Registered Address:
90 Oxford StreetInvercargill 9810
New Zealand
Contact Information:
- Email: support@yardstickgo.com
- Data Protection: contact@yardstickgo.com
- General Inquiries: info@yardstickgo.com
2. Your Data Protection Rights
Under GDPR and the New Zealand Privacy Act, you have the following rights regarding your personal data:
2.1 Right to Access (Right to Know)
You have the right to request access to the personal data we hold about you. This includes:
- Confirmation of whether we process your personal data
- Access to your personal data
- Information about how we use your data
- Information about who we share your data with
- How long we keep your data
- Information about your other rights
How to Exercise: Submit a request to support@yardstickgo.com with "Data Access Request" in the subject line. We will provide the information within 30 days.
2.2 Right to Rectification (Right to Correction)
You have the right to request correction of inaccurate or incomplete personal data we hold about you.
What You Can Correct:
- Incorrect contact information
- Outdated personal details
- Incomplete information
- Any other inaccurate data
How to Exercise: Email support@yardstickgo.com with details of the information you want corrected. We will update your information within 30 days.
2.3 Right to Erasure (Right to be Forgotten)
You have the right to request deletion of your personal data in certain circumstances:
- The data is no longer necessary for its original purpose
- You withdraw consent (where consent was the legal basis)
- You object to processing and there are no overriding legitimate grounds
- The data has been unlawfully processed
- The data must be erased to comply with a legal obligation
Exceptions: We may not be able to delete your data if we need it for:
- Compliance with legal obligations
- Establishment, exercise, or defense of legal claims
- Archiving purposes in the public interest
How to Exercise: Email support@yardstickgo.com with "Data Deletion Request" in the subject line. We will process your request within 30 days.
2.4 Right to Restriction of Processing
You have the right to request that we restrict how we use your personal data in certain situations:
- You contest the accuracy of the data (restriction applies while we verify accuracy)
- Processing is unlawful, but you prefer restriction over deletion
- We no longer need the data, but you need it for legal claims
- You have objected to processing (restriction applies while we verify our legitimate grounds)
How to Exercise: Contact support@yardstickgo.com explaining why you want to restrict processing.
2.5 Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
This Right Applies When:
- Processing is based on your consent or a contract
- Processing is carried out by automated means
Data Format: We can provide your data in CSV, JSON, or XML format.
How to Exercise: Email support@yardstickgo.com with "Data Portability Request" in the subject line, specifying your preferred format.
2.6 Right to Object
You have the right to object to processing of your personal data in certain circumstances:
Direct Marketing: You can object to processing for direct marketing purposes at any time. We will stop processing your data for this purpose immediately.
Legitimate Interests: You can object to processing based on legitimate interests. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests.
How to Exercise: Click "unsubscribe" in marketing emails or contact support@yardstickgo.com.
2.7 Rights Related to Automated Decision-Making
You have the right not to be subject to decisions based solely on automated processing, including profiling, which produces legal effects or similarly significant effects.
Our Practice: We do not currently use automated decision-making or profiling that produces legal or similarly significant effects.
2.8 Right to Withdraw Consent
Where we process your data based on consent, you have the right to withdraw that consent at any time.
How to Exercise:
- Use the unsubscribe link in emails
- Adjust cookie settings in your browser
- Contact us at support@yardstickgo.com
Note: Withdrawing consent does not affect the lawfulness of processing before withdrawal.
3. How to Exercise Your Rights
3.1 Making a Request
To exercise any of your rights, please:
- Send an email to support@yardstickgo.com
- Include "Data Rights Request" in the subject line
- Clearly state which right you wish to exercise
- Provide sufficient information to identify you
- Specify any preferences (e.g., data format for portability requests)
3.2 Verification Process
To protect your privacy, we need to verify your identity before processing your request. We may ask for:
- Email address associated with your account
- Additional identifying information
- Answers to security questions
3.3 Response Time
We will respond to your request within:
- Standard Requests: 30 days
- Complex Requests: Up to 60 days (we will inform you if we need extra time)
- Marketing Opt-Out: Immediately
3.4 No Fee
We do not charge a fee for processing your data rights requests unless:
- Your request is clearly unfounded or excessive
- You request multiple copies of the same information
If a fee applies, we will inform you before processing your request.
4. Cookie Management and Consent
4.1 Types of Cookies We Use
Essential Cookies: Required for the website to function. Cannot be disabled.
- Session management
- Security features
- Cookie consent preferences
Analytics Cookies: Help us understand website usage.
- Page view tracking
- User behavior analysis
- Traffic source information
Functional Cookies: Enable enhanced features.
- Language preferences
- User interface settings
- Personalization options
Marketing Cookies: Used for targeted advertising (only with consent).
4.2 Managing Cookie Preferences
Through Our Website:
- Use the cookie consent banner on your first visit
- Change settings at any time by clearing your browser cookies and revisiting the site
Through Your Browser:
- Chrome: Settings > Privacy and security > Cookies and other site data
- Firefox: Options > Privacy & Security > Cookies and Site Data
- Safari: Preferences > Privacy > Cookies and website data
- Edge: Settings > Privacy, search, and services > Cookies
4.3 Withdrawing Cookie Consent
To withdraw cookie consent:
- Clear your browser cookies
- Revisit our website
- Decline non-essential cookies in the consent banner
Or contact us at support@yardstickgo.com for assistance.
5. Data We Collect and Process
5.1 Personal Data Categories
Identity Data:
- Name
- Email address
- Account credentials (if applicable)
Contact Data:
- Email address
- Phone number (if provided)
- Mailing address (if provided)
Technical Data:
- IP address
- Browser type and version
- Device information
- Operating system
Usage Data:
- Pages visited
- Time spent on pages
- Click patterns
- Referring websites
Communication Data:
- Messages sent through contact forms
- Email correspondence
- Support ticket history
5.2 Legal Basis for Processing
We process your data based on:
- Consent: Newsletter subscriptions, marketing communications, optional cookies
- Contract: Providing services you request
- Legal Obligation: Compliance with laws and regulations
- Legitimate Interests: Website analytics, fraud prevention, service improvement
6. Data Sharing and Third Parties
6.1 Third-Party Service Providers
We share data with trusted service providers who assist us with:
- Web hosting and infrastructure
- Email delivery services
- Analytics and performance monitoring
- Customer support tools
All service providers are contractually required to:
- Protect your data
- Use data only for specified purposes
- Comply with data protection laws
- Delete or return data when no longer needed
6.2 International Transfers
Some of our service providers may be located outside New Zealand or the EEA. When we transfer data internationally, we ensure:
- Adequate protection through standard contractual clauses
- Compliance with GDPR transfer requirements
- Use of providers in countries with adequacy decisions
6.3 No Data Sales
We do not sell, rent, or trade your personal data to third parties for their marketing purposes.
7. Data Security Measures
We implement comprehensive security measures to protect your data:
7.1 Technical Measures
- SSL/TLS encryption for data in transit
- Encrypted data storage
- Secure server infrastructure
- Regular security updates and patches
- Firewall protection
- Intrusion detection systems
7.2 Organizational Measures
- Access controls and authentication
- Employee training on data protection
- Confidentiality agreements
- Regular security audits
- Incident response procedures
- Data minimization practices
7.3 Data Breach Notification
In the event of a data breach that poses a risk to your rights and freedoms:
- We will notify relevant authorities within 72 hours
- We will notify affected individuals without undue delay
- We will provide information about the breach and recommended actions
8. Data Retention Periods
We retain personal data only as long as necessary:
Data Type | Retention Period |
---|---|
Contact Information | 3 years after last contact |
Newsletter Subscriptions | Until unsubscribe |
Website Analytics | 26 months (then anonymized) |
Support Inquiries | 2 years after resolution |
Legal Records | As required by law |
9. Children's Privacy
Our services are intended for users aged 18 and over. We do not knowingly collect data from children under 18.
If you are a parent or guardian and believe your child has provided us with personal data:
- Contact us immediately at support@yardstickgo.com
- We will delete the data from our systems
- We will take steps to prevent future collection
10. Complaints and Regulatory Authority
10.1 Making a Complaint to Us
If you have concerns about how we handle your data:
- Contact our data protection team at contact@yardstickgo.com
- Provide details of your concern
- We will investigate and respond within 30 days
10.2 Regulatory Authorities
New Zealand Privacy Commissioner:
Office of the Privacy CommissionerPO Box 10094, The Terrace
Wellington 6143
New Zealand
Phone: 0800 803 909
Email: enquiries@privacy.org.nz
Website: www.privacy.org.nz
For EU Residents:
You have the right to lodge a complaint with your local supervisory authority. Find your authority at: https://edpb.europa.eu/about-edpb/board/members_en
11. Updates to This Document
We may update this GDPR Rights page from time to time. Changes will be indicated by updating the "Last Updated" date at the top of this page.
Significant changes will be communicated through:
- Email notification (where we have your email address)
- Prominent notice on our website
- Cookie consent banner update
12. Additional Resources
For more information about data protection:
13. Contact Us About Your Data Rights
For any questions or to exercise your rights, contact us:
Data Protection Inquiries:
- Email: support@yardstickgo.com
- Subject Line: "Data Rights Request" or "GDPR Inquiry"
Postal Address:
Data Protection Officeryardstickgo.com
90 Oxford Street
Invercargill 9810
New Zealand
Response Time: We aim to respond to all data rights requests within 30 days.
Your Privacy Matters: We are committed to protecting your personal data and respecting your privacy rights. If you have any questions or concerns, please do not hesitate to contact us.