At Watchlist, we are committed to protecting the privacy of businesses, staff, and customers who interact with our platform. Our technology provides real-time security alerts, facial recognition, and license plate recognition (LPR) to help businesses identify persons and vehicles of interest.

We take privacy seriously and handle personal and biometric information in accordance with the New Zealand Privacy Act 2020, the upcoming Biometric Privacy Code (2025), and other applicable data protection laws.

1. Information We Collect

• Facial images and biometric templates (used for recognition and alerting).
• License plate data for vehicles tagged as "vehicles of interest."
• Incident data including photos, descriptions, timestamps, and staff notes.
• Business information such as venue/store location and authorised staff users.
• Technical data such as device logs, IP addresses, and usage analytics.

2. How We Use Information

• Detect persons or vehicles of interest in real time.
• Issue alerts to authorised staff when a match occurs.
• Maintain a trespass register and incident log for business security.
• Generate evidence packs for insurers or law enforcement, at the direction of the business.
• Improve system performance, analytics, and threat detection.
• Comply with legal and regulatory obligations.

3. How Information is Shared

• With law enforcement when businesses choose to provide incident evidence.
• With insurers when supporting claims.
• With service providers under strict contractual controls.
• As required by law or regulatory authorities.

We do not sell or trade biometric or personal information.

4. Data Retention

• Businesses control how long data is retained.
• Biometric and license plate data are stored only as needed for operational/legal purposes.
• Incident reports can be archived or deleted upon request.

5. Security Measures

• End-to-end encryption.
• Role-based access control and audit logs.
• Secure cloud hosting with regular security testing.
• Compliance with NZ and international data protection frameworks.

6. Individual Rights

Individuals may request:

• Access to their personal or biometric data.
• Correction or deletion where applicable.
• To lodge complaints with the NZ Privacy Commissioner.

Requests: privacy@watchlist.nz

7. Business Responsibilities

• Display notification signage where required.
• Use Watchlist only for lawful security purposes.
• Follow data retention and privacy settings responsibly.

8. International Transfers

Some data may be securely processed outside New Zealand using trusted cloud providers. We ensure compliance with cross-border transfer safeguards.

9. Updates to this Policy

We may update this Privacy Policy to reflect changes in law or technology. The latest version is always available at:
www.watchlist.nz/privacy

10. Contact Us

Privacy Officer – Watchlist
Email: privacy@watchlist.nz
Address: 1066G Great South Road, Mount Wellington, Auckland 1060, New Zealand