This Privacy Policy contains types of information that is collected and recorded by Mercenta and how we use it.
Revised: 2021-05-28
Original: 2020-04-16
This notice applies across all websites that we own and operate, including our Marketing Site and Portal, which may be deployed to your web browser, mobile device or desktop computer. For the purpose of this notice, we refer to them as our ‘services’. This policy is not applicable to any information collected offline or via channels other than our services.
By using our services, you hereby consent to our Privacy Policy and agree to its terms.
Your ‘personal data’ means mean identifiable information about you, like your name, email, address, telephone number, bank account details, payment information, support queries, etc. This notice does not cover any other data that cannot identify you.
We may need to update this notice from time to time. Where a change is significant, we will contact you via email.
When we refer to ‘we’ (or ‘our’ or ‘us’), that means Mercenta Limited headquartered in New Zealand. Address details can be found on on the company section of our marketing website located at www.mercenta.com. Mercenta helps businesses maximise the value of their supply base by equipping sourcing teams with integrated solutions covering everything from supplier selection, to Smart Agreements and insightful analytics. More about our service can be found on our marketing site located at www.mercenta.com
When you visit our websites or use our services, we may collect personal data. The ways we collect it can be broadly categorised into the following:
Explicitly provided personal information: To use parts of our websites and/or services we might ask you to provide personal data to us. For example, we ask for your contact information when you sign up for a subscription, respond to a job application or an email offer, join us on social media, take part in training and events, contact us with questions or request support. If you do not want to provide us with personal data, you don’t have to, but it might mean you can’t use some parts of our websites or services.
Automatically provided personal information: We collect some information about you automatically when you visit our websites or use our services, like your IP address and browser type on our marketing site. We do not use tracking cookies.
If you don't have a relationship with us, but believe that a Mercenta subscriber such as your Organisation Administrator has provided your personal data to us in order to create a user account, you’ll need to contact that Mercenta subscriber for any questions you have about your personal data (including where you want to access, correct, amend, or request that the user delete, your personal data).
We do not knowingly collect any Personal Identifiable Information from children under the age of 13. If you think that your child provided this kind of information on our website, we strongly encourage you to contact us immediately and we will do our best efforts to promptly remove such information from our records.
Where we collect personal data, we will only process it to perform a contract with you, or where we have legitimate interests to process the personal data and they are not overridden by your rights, or in accordance with a legal obligation, or where we have your consent.
We will only use your personal data to operate our websites and provide you with any services you’ve requested, or to communicate with you and to manage our relationship with you. This may include:
Providing you with information you’ve requested from us or to support you such as assisting with the resolution of technical support issues or other issues relating to the websites or services, or information we are required to send to you for operational communications, like changes to our websites and services, security updates, or assistance with using our websites and services marketing communications where you have asked to be kept informed.
If you sign up and use our Portal then we log your interactions with the Portal so that we can detect and prevent any fraudulent or malicious activity, ensure that users are using our services fairly and in accordance with our terms of use, for security auditing purposes and technical analysis to assist with debugging and performance optimisation.
We will only share your personal information with third parties where it is necessary to comply with applicable laws or regulations, or to exercise, establish or defend our legal rights such as regulators, law enforcement bodies, government agencies, or courts. Where possible and appropriate, we will notify you of this type of disclosure.
In order to provide our services we may perform processing of your personal information on servers outside your country of residence. For example, we may operate our cloud services in Singapore or the United States where these hosting provider’s servers are located. In these cases we will comply with the laws applicable in those countries. Rest assured, we put safeguards in place to ensure your personal data remains protected.
For individuals in the European Economic Area (EEA), this means that your data may be transferred outside of the EEA. Where your personal data is transferred outside the EEA, it will only be transferred to countries that have been identified as providing adequate protection for EEA data (like New Zealand), or to a third party where we have approved transfer mechanisms in place to protect your personal data – i.e., by entering into the European Commission’s Standard Contractual Clauses. For further information, please contact us using the details set out in the Contact us section below.
Security is a priority for us when it comes to your personal data. We are committed to protecting your personal data and have appropriate technical and organisational measures in place to make sure that happens.
We will only retain your personal data if we have an ongoing business need to retain it in accordance with our data retention policies and practices. Following that period, your data will be deleted or anonymised.
It is your personal information and you have certain rights relating to it. You have rights to know what personal data we hold about you, and to make sure it is correct and up to date. You may request a copy of your personal data, or ask us to restrict or prohibit processing your personal data or delete it. You can exercise these rights at any time by making a request in the contact section below.
We’re always happy to hear from you. If you have any comments or suggestions or if you’re not happy with how we are processing your personal data, please let us know by getting in touch with us at support@mercenta.com