MEGAPLUS Privacy Policy

Who we are

MEGABIT TECHNOLOGY LTD (NZBN 9429049224641) operates this website and related products under the MEGAPLUS brand. Our website is https://www.megaplus.co.nz/. Our designated Privacy Officer is responsible for privacy and data protection matters and can be contacted at info@megabit.co.nz; our office address is 2A/215 Rosedale Road, Rosedale, Auckland, New Zealand 0632.

Scope

This policy applies to the MEGAPLUS website, POS systems, online and self-service ordering, cloud services, merchant operations services, APIs, third-party ordering integrations (including platforms such as HungryPanda), and our enquiry, implementation, training and support services. If a project contract, quotation or data-processing terms differ from this policy, the applicable written terms govern.

Information we collect

During enquiries, sales, implementation or support, we may collect the name, email address, phone number, business details, requirements and communications you choose to provide.

For website security and prevention of automated abuse, our contact form uses Cloudflare Turnstile. A browser-generated verification token and necessary technical request information, including the IP address, are sent to Cloudflare for validation. Form content is sent to our business mailbox only after validation passes.

Where provided, applicable and necessary to process an order, MEGAPLUS may receive order-related information from a merchant, third-party ordering platform or its API, such as a customer name, contact details, delivery or pick-up information, order contents and fulfilment status. If we receive identifiable personal information indirectly from a referrer, merchant or another source, we take reasonable steps to notify the individual where required by applicable law.

Order data roles and boundaries

For orders and customer information received or managed for a merchant, the relevant merchant usually determines the business purposes for collection and use. MEGAPLUS generally acts as a processor or service provider and handles that information only to provide, maintain and support the merchant service. The merchant is responsible for its customer-facing notices and fulfilment arrangements; any applicable contract or data-processing agreement takes priority over this policy.

How we use personal information

We use personal information to receive, process, manage and fulfil orders; support merchants; operate and maintain POS, ordering, cloud and API services; monitor security; troubleshoot faults; improve reliability; and meet applicable legal obligations.

We do not use customer data from third-party platforms or merchant orders for unrelated marketing, advertising, lead generation, sale, rental, licensing, monetisation or unrelated data enrichment, and we do not use it for purposes unrelated to the merchant service. We process only what is reasonably needed for these purposes.

Third-party platforms and order flow

When a merchant enables a third-party ordering platform, order data generally follows this flow: third-party platform → API → MEGAPLUS → relevant merchant → order fulfilment. MEGAPLUS processes data only as needed to receive, synchronise, manage and support orders, and in accordance with the merchant’s authorisation and applicable law.

Sharing and disclosure

We may disclose or permit access to personal information, within the service-required scope, to the relevant merchant, authorised personnel, and necessary cloud, hosting, email, monitoring, security-verification or technical-support providers. Those providers must be subject to appropriate confidentiality and security obligations.

We do not disclose personal information to unrelated third parties unless you consent, it is necessary to provide or support a requested service, or applicable law permits or requires it. We do not sell or rent personal information.

Overseas disclosure

If a service requires disclosure of personal information to a provider outside New Zealand, we do so only where permitted by applicable New Zealand privacy law and take reasonable steps to ensure the recipient provides protection comparable to that law.

Data security and backups

We use reasonable technical and organisational measures appropriate to the nature and risk of personal information, including access controls, secure communications, backups, monitoring and privacy-incident management, to protect information from loss, unauthorised access, use, modification or disclosure. Personal information in routine backups is protected with appropriate security controls and removed in accordance with applicable backup retention cycles. We do not publish internal architecture or control details that could weaken security.

Retention and deletion

We retain personal information only for as long as needed to fulfil the purposes for which it was collected, provide and support services, keep reasonable business records or meet legal obligations. When it is no longer needed, we securely delete or de-identify it in accordance with applicable law and business processes; we do not promise a fixed deletion period.

Access and correction

You can request access to or correction of personal information we hold by contacting info@megabit.co.nz. We may verify your identity and will respond within the timeframe required by applicable law; if law permits us to refuse or limit a request, we will explain why. For order data, you may first contact the relevant merchant, and MEGAPLUS will assist the merchant where appropriate.

Privacy complaints and incidents

If you believe we have not handled personal information properly, please contact our designated Privacy Officer at info@megabit.co.nz first. If a privacy incident is likely to cause serious harm, we will take steps to contain and remedy the risk and notify affected people and the Office of the Privacy Commissioner in New Zealand where required by applicable law.

Contact and updates

MEGABIT TECHNOLOGY LTD operates under the MEGAPLUS brand. For privacy questions, contact info@megabit.co.nz; address: 2A/215 Rosedale Road, Rosedale, Auckland, New Zealand 0632.

Selecting “Book a consultation” may take you to another website. Read that website’s privacy information before submitting information. Information we receive and process will be handled under this policy.

We may update this policy to reflect changes to our business, technology or legal requirements. The current version will be published on this page with its latest update date.