Privacy Policy

NZXplorer ("we", "us", "our") is a governance and capital-markets transparency platform for NZX-listed issuers. This page explains how we handle personal information under the New Zealand Privacy Act 2020, both for the named individuals we publish profile information about (NZX directors, executives, substantial product holders) and for visitors to nzxplorer.co.nz and our associated platforms (charitydata.co.nz, iwidata.co.nz, publicdata.co.nz).

The full editorial floor — including our source authority, methodology disclosure for analytical labels, search-engine indexing rules, and right-of-reply pathways — is set out on our Data Principles page. This privacy policy is the legal companion to that document.

We publish profile information about named individuals who are directors, executives, substantial product holders, or earnings-call participants of NZX-listed issuers. This is personal information under the Privacy Act 2020, and our publication of it is subject to the Act. The information is sourced from statutory public registers and continuous-disclosure filings, and our republication relies on the "publicly available publication" exception in Privacy Act 2020 sections 7 and 22 (IPP 11(e)(iii) / IPP 12(d)). The information we publish includes:

• Name, role, issuer, appointment and resignation dates
• Biographical information voluntarily published in annual reports or board materials
• Director fees, executive remuneration (salary / STI / LTI / total) as disclosed under Companies Act §211 and NZX Listing Rule 3.6
• Shareholdings, insider trades and substantial product holder notices as disclosed under FMC Act §274–290
• Earnings-call Q&A turns where the individual is a named questioner or answerer (sourced from publicly broadcast webcasts)
• Cross-platform governance roles (Companies Office director records, charity board roles, iwi governance roles, MP/councillor records)
• Photographs published by the issuer as part of its annual-report or leadership materials

We also publish proprietary analytical labels and scores (Governance Risk Score, CEO Pay vs Returns pattern detector, dividend-cut probability, "Active shareholder voice" classification, etc.). These are analytical observations with disclosed methodologies, not statements of fact. Methodology pages are linked from every surface that uses a label. Any individual named in connection with one of these labels has a right of reply via the dispute form.

We do not publish home addresses (we honour Companies Act §367AA suppression), personal email addresses, personal phone numbers, dates of birth, or photographs of minors. The full list of categories we always remove on request is on the Data Principles page.

We do not sell, trade, or rent visitor or account-holder personal information to third parties. We may share information in the following situations:

• Service providers: Supabase (database hosting and authentication), Stripe (payment processing), Netlify (website hosting), Sentry (error tracking), and Anthropic (AI-powered data extraction). These providers process data only as necessary to perform their services and are bound by confidentiality obligations.
• Payment processing: When you subscribe to a paid plan, your payment information is processed directly by Stripe. We do not store your credit card details. We receive only your Stripe customer ID, subscription status, and billing history.
• Legal obligations: We may disclose information if required by law or in response to valid requests from public authorities (Office of the Privacy Commissioner, FMA, NZX, courts, etc.).
• Business transfers: We may share or transfer information in connection with a merger, sale of company assets, financing, or acquisition of all or a portion of our business.

Note:the published-subject information described in the section above (NZX director profiles etc.) is itself published to the public via nzxplorer.co.nz; that publication is the purpose for which the information was collected, and is the "disclosure" permitted by IPP 11(e)(iii).

Under the Privacy Act 2020 you have the right to:

• Access the personal information we hold about you (IPP 6)
• Correct inaccurate or incomplete personal information (IPP 7)
• Submit a right-of-reply for any data point or analytical observation we have published about you
• Request removal of personal data that is not statutorily-public-by-design (photos, personal contact details, home addresses, suppressed-identity information)
• Withdraw consent for processing based on consent (e.g. analytics cookies)
• Complain to the Office of the Privacy Commissioner if you believe we have breached your privacy

The fastest way to exercise these rights is the public dispute & right-of-reply form, which goes to our editorial review queue with a 5-business-day response target. Alternatively, email hello@nzxplorer.co.nz.