Privacy Policy — NATC Limited

Last updated 22 September 2026

NATC Limited ("NATC", "we", "us") is a New Zealand company based in Christchurch. We provide IT managed services, cloud licensing, automation and integration services to businesses across New Zealand. This policy explains how we collect, use, store and protect personal information, in line with the New Zealand Privacy Act 2020.

Information we collect

We collect personal information when you contact us, become a client, use a system we build or manage, or interact with an online service, app or integration we operate. This may include your name, contact details (phone, email, postal address), business details, and the content of enquiries, forms or messages you send us.

Where we build or operate integrations between third-party platforms (for example social media, advertising, email, CRM, accounting or ticketing systems) on behalf of our clients, information submitted through those platforms may pass through systems we operate. In those cases we handle the information only for the purpose the client collected it, and the client remains responsible for how it is used.

How we use it

We use personal information to respond to enquiries, deliver and support the services we have agreed to provide, route enquiries and customer records to the right business, meet our legal and contractual obligations, and improve our services. We do not sell personal information.

Who we share it with

We share personal information only with the client the information was collected for, with service providers who host or process data on our behalf (for example cloud hosting, CRM, email and ticketing providers), and where the law requires it. Our own systems are hosted in New Zealand; some service providers store data in other countries, including Australia and the United States, and we take reasonable steps to ensure it is protected to a comparable standard.

Security

We protect personal information with access controls, encryption in transit, and monitoring appropriate to the sensitivity of the information. Access is limited to staff and contractors who need it to do their job.

How long we keep it

We keep personal information only as long as needed for the purpose it was collected, to meet legal and record-keeping obligations (generally up to seven years for business records), or until you ask us to delete it, whichever comes first. Operational logs are kept for shorter periods.

Your rights

You can ask to see the personal information we hold about you, ask us to correct it, or ask us to delete it. Email privacy@natc.co.nz and we will respond within 20 working days.

Deleting your data

To request deletion of personal information we hold, email privacy@natc.co.nz with the subject line "Data deletion request" and enough detail for us to identify your records (such as the name, phone number or email address you used). We will delete the information from systems we control within 10 working days and confirm by reply, unless we are legally required to keep it, in which case we will tell you.

If you have connected to one of our services through a third-party platform such as Facebook, Google or Microsoft, you can also revoke that access from your account settings on that platform. Revoking access stops further data being shared with us but does not delete information already received; use the email process above for that.

Changes to this policy

We may update this policy from time to time. The current version is always available at this page.

Contact

NATC Limited, Christchurch, New Zealand
privacy@natc.co.nz

If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.