Privacy Policy

Effective: 6 June 2023

Introduction

Thanks for choosing MyRUC as a Road User Charge management service provided by Picobyte as an approved agent on behalf of the New Zealand Transport Agency. To provide you with the MyRUC Services (or “Application”, “Service”, “Platform”), MyRUC (“RUC Monkey”, “we”, “us”, “our”) needs to collect some information about you and/or the company for which you are acting on behalf, and this Privacy Policy is where we describe the information we collect, what we do with it, and how you can manage and control the use of your information. By using or interacting with myRUC, you are entering into a binding contract with us and consenting to the use of your information as explained in this Privacy Policy.

The information we collect

Registration data

When you sign up (“signup”, “register”, “create an account”, “join”) to be a User of the Service, we ask you for information, like your full legal name, e-mail address, and mobile phone number. We may store this information so that it can be used for the purposes explained throughout this policy document. We collect this information so that you are able to use our Services via the Platform. If you do not provide us with all information requested, we may not be able to provide you with the Services you have requested.

Usage & Odometer data

When you use the Services, we automatically collect certain information, including:

To assist you in making odometer entries in the MyRUC app we also enable image recognition, and the date/time value using standard time protocols and information provided directly from your device. This helps us ensure the accuracy of your odometer entries.

Information we get from third parties

You may integrate your myRUC account with third party services (“Other Integrated Services”). If you do, we may receive, use and share the categories of information described above, including information made publicly available on or through your account of such Other Integrated Services, in accordance with this Privacy Policy.

Payment data

By using MyRUC app, you may opt to pay via the POLi Payments System, entering into a Merchant Agreement with us, providing us with information, authorising someone to provide us with information on your behalf, or when you accept services from us, you agree to the collection, use and disclosure of Personal Information in accordance with this Privacy Policy.

Terminology

Customer is a reference to a customer of a Merchant who uses the POLi Payments System;

Merchant means Picobyte Solutions Ltd. that has entered into a Merchant Agreement with Merco that offers POLi as a form of payment to its customers;

POLi Payments System (or POLi) means the online debit payment system known as POLi which mediates in the payments process as a supporting system for the transfer of funds from a Customer’s bank account to a Merchant’s bank account. POLi is a trade mark of SecurePay which is owned by Australia Post;

“you” and “your” means any Customer, Merchant or other person who uses our Website, the Poli Payments System, any other services we offer or who gives us Personal Information about themselves, as the case may be.

Personal Information POLi may collect during Payment transactions

(a) your name, title, phone number, email address and other contact information;

(b) in respect of a Merchant, your name, website and address and other contact information;

(d) a Customer’s payer bank account number and payer bank account name. In both cases this information is stored in an encrypted format;

(e) a Merchant settlement bank account number and bank account name and proof of the same; and

(f) records of our interactions with you.

How we use the information we collect

We may use the information we collect, including your personal information:

To use the Platform: We use your information to allow you to access and use the Platform.

To communicate with you by:

Providing you with information you’ve requested from us (training/educational materials) or information we are required to send you.
Delivering copies of your RUC purchases and invoices. Operational communications: like changes to our website, services, policies, or security updates.
Marketing communications in accordance with your marketing preferences.
Asking you for feedback, to take part in research we are conducting or engage with our beta testing program.

To support you: This may include assisting with the resolution of a technical support issue or other issues relating to our website or services, whether by email, in-app or otherwise.

To assist you in meeting your legal requirements: This includes the delivery and retention of RUC licence records, RUC related invoices, etc.

To protect: So we can detect and prevent any fraudulent or malicious activity, and make sure that everyone is using our website and services fairly and in accordance with our Terms of Use.

To analyse, aggregate and report: We may use the personal data we collect from you and other users of our services to produce aggregated and anonymised analytics and reports, which we may share publicly or with third parties.

To comply: So that we can comply with our legal obligations, resolve any disputes that we may have with any of our users, and enforce our agreements with third parties.

How we share the information we collect

There will be times when we need to share your personal data with related parties, other MyRUC users and/or third parties. We will only disclose your personal data to:

Other companies in the MyRUC group of brands (including RUC Monkey and the New Zealand Transport Agency). These related entities comply with the same obligations that we have to protect your personal information under this Privacy Policy.
Third party service providers and partners, some of which may be located outside of New Zealand who assist and enable us to use the personal data to support delivery of functionality of the website or services, or to market or promote our goods and services to you, for example for storing your information. Where we transfer, store and process your personal information outside of New Zealand, we have ensured that appropriate safeguards are in place to ensure an adequate level of data protection.
Regulators, law enforcements bodies, government agencies, courts or other third parties where we think it is necessary to comply with applicable laws or regulators, or to exercise, establish and defend our legal rights. Where possible and appropriate, we will notify you of this type of disclosure.
Other integrated services you use that you may want to connect to our services. We may store certain credentials from the integrated service, so you are able to share particular items of content without entering your access credentials again.
An actual or potential buyer (and its agents and advisors) in connection with an actual or proposed purchase, merger, or acquisition of any part of our business.
Other individuals where we have your consent.

Security

We are committed to protecting your personal information. Your password protects your user profile (and access to your accounts), so we recommend you use a unique and strong password, limit access to your mobile device, computer and browser, and sign off after having used MyRUC Services. While we take reasonable data protection precautions, no security measures are completely secure, and we do not guarantee the security of user information at any time.

We have employed a number of steps to ensure that all ‘sensitive data’ is encrypted when stored, so that in the event of a breach, your identity is not jeopardised.

Retention of information

The length of time we keep your personal information depends on what it is and whether we have an ongoing business need to retain it (for example, to provide you with a service you have requested or to comply with applicable New Zealand legal requirements which stipulates a period of 7 years for such data).

We will retain your personal data for as long as necessary to fulfil our obligations to your, to protect our legal interests, to comply with a law or as otherwise stated when we collect your information. Following that period, we will make sure it is deleted or anonymized.

Your rights and accessing and updating user information

At the end of the day, it is your personal data, and you have certain rights relating to it. You have the right to:

Know what personal information we hold about you and make sure it is correct and up to date Request a copy of your personal information, ask us to restrict processing your personal information, or delete it. Object to our continued processing of your personal information. When it comes to marketing communications, you have the right to ask us to not send you them anymore, simply follow the unsubscribe instructions in any marketing communication.

If you have any queries about your personal information, or you are not happy with how we are processing your personal information, please let us know by emailing support@rucmonkey.co.nz with the subject “My Personal Information”. We will review and investigate your complaint and try to get back to you within a reasonable time frame. You can also complain to your local data protection authority. They will be able to advise you on how to submit a complaint.

Changes to the Privacy Policy We may make changes to this Privacy Policy from time to time, so please visit this Privacy Policy regularly. If we make changes which we believe are material, we will inform you through the Service. Your continued use of the Service thereafter constitutes acceptance of the changes.