Privacy Policy

Effective Date: 06 May 2025
Last Updated: 05 May 2026

IEAS Service Limited (“IEAS”, “we”, “our”, or “us”) respects the privacy and security of personal information entrusted to us.

This Privacy Policy explains how IEAS collects, uses, stores, protects, and discloses personal information when individuals interact with our website, services, personnel, systems, or business operations.

IEAS is based in New Zealand and handles personal information in accordance with applicable privacy and data protection requirements, including the New Zealand Privacy Act 2020.

1. About IEAS

IEAS Service Limited provides business support, technology consulting, software and systems development, enterprise applications, process automation, integration, digital solutions, and AI-enabled business capabilities.

Organisation: IEAS Service Limited
Website: https://ieasserviceltd.com
Head Office: Auckland, New Zealand

2. Information We May Collect

Depending on how you interact with IEAS, we may collect information such as:

• name and contact details;

• company name, job title, and business contact information;

• information submitted through website forms, enquiries, or correspondence;

• information provided during consulting, project, support, or service engagements;

• account, access, or system information required to deliver contracted services;

• technical information such as browser type, device information, IP address, and website usage data;

• supplier, contractor, customer, and business relationship information; and

• other information reasonably necessary to provide our services or meet contractual, legal, security, or operational requirements.

We aim to collect only information that is reasonably necessary for the purpose for which it is required.

3. How We Use Information

IEAS may use personal information to:

• respond to enquiries and requests;

• provide consulting, technology, development, support, and managed services;

• establish and manage client, contractor, supplier, and business relationships;

• administer contracts, projects, invoicing, and service delivery;

• communicate service, project, security, or operational updates;

• improve our website, systems, processes, and services;

• protect our systems, users, clients, and information assets;

• detect, investigate, and respond to security incidents;

• meet contractual, regulatory, legal, and compliance requirements; and

• maintain appropriate business and security records.

IEAS does not sell personal information to third parties.

4. Client and Business Information

During client engagements, IEAS may have access to business, technical, operational, or personal information belonging to our clients.

Such information is handled in accordance with:

• applicable contractual obligations;

• confidentiality agreements;

• authorised access requirements;

• client security requirements; and

• IEAS information security and privacy procedures.

Access to client information is limited to personnel who require it to perform authorised work.

5. Information Sharing

IEAS may disclose information where reasonably required to:

• authorised employees, contractors, or service providers supporting service delivery;

• technology or cloud providers used to operate our business;

• professional advisers such as accountants, auditors, legal advisers, or insurers;

• government, regulatory, or law-enforcement authorities where required by law; or

• another party where disclosure has been authorised by the relevant individual or organisation.

Where third-party service providers process personal information on behalf of IEAS, IEAS takes reasonable steps to ensure that appropriate confidentiality, privacy, and security protections are maintained.

6. International Processing

Some technology platforms, cloud services, contractors, or service providers used by IEAS may process or store information outside New Zealand.

Where personal information is disclosed outside New Zealand, IEAS takes reasonable steps to ensure that the disclosure is handled in accordance with the New Zealand Privacy Act 2020 and that appropriate privacy protections are maintained.

7. Information Security

IEAS applies reasonable and proportionate technical and organisational measures designed to protect information against unauthorised access, disclosure, loss, misuse, alteration, or destruction.

These measures may include access controls, authentication, confidentiality obligations, appropriate cloud and technology security controls, secure handling practices, and incident-response procedures appropriate to the nature of the information and services involved.

8. Data Retention

IEAS retains personal and business information only for as long as reasonably required for:

• the purpose for which it was collected;

• contractual obligations;

• legal and regulatory requirements;

• security and audit requirements; or

• legitimate business record-keeping purposes.

Information that is no longer required may be securely deleted, anonymised, or otherwise disposed of where appropriate.

9. Cookies and Website Analytics

The IEAS website may use cookies or similar technologies to support website functionality, security, analytics, and user experience.

Where applicable, users may manage cookies through their browser settings or through cookie controls provided on the website.

10. Your Privacy Rights

Subject to applicable law, individuals may request:

• access to personal information IEAS holds about them;

• correction of inaccurate or incomplete personal information; or

• further information about how their personal information is handled.

Requests may be submitted to the privacy contact listed below.

IEAS may need to verify identity before processing certain requests.

11. Privacy Breaches

IEAS maintains processes for identifying, assessing, containing, investigating, and responding to privacy and information-security incidents.

Where a privacy breach has caused, or is likely to cause, serious harm, IEAS will notify the New Zealand Privacy Commissioner and affected individuals as required by the Privacy Act 2020, subject to any applicable exceptions.

IEAS will take reasonable steps to contain the incident, reduce potential harm, investigate its cause, and implement appropriate remediation.

12. Privacy and Security Contact

Questions concerning this Privacy Policy, privacy matters, or the handling of personal information may be directed to:

Privacy Contact / Privacy Officer: privacy@ieasltd.co.nz

13. Information Security Contact

For information-security enquiries, security questionnaires, vulnerability notifications, or related matters:

Information Security Contact: security@ieasltd.co.nz

14. Security Incident Escalation

Suspected or confirmed security incidents involving IEAS services, systems, or information should be reported as soon as reasonably possible to:

Security Incident Response: incident@ieasltd.co.nz

Urgent client-specific escalation details may be provided through the applicable contract, service agreement, or established client communication channel.

Reports should include, where available, the reporting organisation and contact details, affected service or system, date and time identified, description of the suspected incident, information potentially affected, and any immediate actions already taken.

IEAS will assess reported incidents according to their nature, severity, scope, and potential impact.

For urgent client-specific incidents, additional escalation details may be provided through the applicable contract, service agreement, or established client communication channel.

15. Third-Party Websites

The IEAS website may contain links to external websites or services.

IEAS is not responsible for the privacy or security practices of third-party websites. Users should review the applicable privacy notices of those organisations before providing personal information.

16. Changes to This Policy

IEAS may update this Privacy Policy periodically to reflect changes in legal requirements, services, technology, or business practices.

The latest version will be published on the IEAS website together with the date of the most recent update.