Ctrack Privacy Policy New Zealand

Your privacy matters to us. This policy explains what personal information Ctrack collects, how we use it, how we protect it, and your rights under the NZ Privacy Act 2020. It applies to all personal information collected through our website and fleet tracking and telematics services in New Zealand.

By using Ctrack New Zealand services, you agree to the collection and use of information as described here. If you have questions, contact details are at the end of this page.

For information about your service rights and obligations, read our Terms & Conditions.

Last updated: April 2026

Ctrack collects personal information through three channels: information you provide directly, information generated through our fleet tracking and telematics services, and information gathered automatically through our website.

Information you give us:

• Name, job title, and company name

• Email address, phone number, and postal address

• Billing and payment details

• Account login credentials for the Crystal platform

• Messages and support requests sent to our team

Information from fleet tracking and telematics services:

• Vehicle GPS location data, routes, and stop records

• Driver behaviour data including speed, acceleration, and braking patterns

• Trip history and journey records

• Vehicle diagnostic and engine data

• Electronic Driver Logbook (EDL) records where your organisation uses this service

Information gathered through our website:

• Browser type, device, and operating system

• Pages visited and time on site

• IP address and approximate location

• Referring websites and search terms

• Data collected through cookies and analytics tools

We collect only the personal information needed to deliver our services, meet our legal obligations, and improve our products for fleet operators across New Zealand.

Personal information Ctrack collects is used to:

• Deliver and manage fleet management and telematics services

• Process account registration and billing

• Respond to support requests and general enquiries

• Send service updates and relevant communications where you have opted in

• Develop and improve the Crystal platform and our other products

• Meet legal and regulatory requirements under NZ law

• Investigate and resolve privacy complaints or data-related disputes

GPS tracking data and telematics data collected through vehicle hardware are used only to deliver the services your organisation has subscribed to. Fleet operators own this data. Ctrack does not use driver behaviour data or vehicle data for advertising, and we do not sell personal information.

Ctrack stores personal information on secure servers. Data may be held in New Zealand or in offshore data centres operated by our infrastructure partners. All offshore storage arrangements satisfy the requirements of the NZ Privacy Act 2020, including Information Privacy Principle 12 on transborder data flows.

Security measures Ctrack applies:

• Encryption in transit using TLS, and encryption at rest

• Access controls restricting data access to authorised personnel

• Regular security assessments and vulnerability testing

• ISO 27001 information security management standards

No system is entirely immune from risk. If a data breach occurs that is likely to cause serious harm, Ctrack will notify affected individuals and report to the Office of the Privacy Commissioner (OPC) as required by the NZ Privacy Act 2020.

Ctrack does not sell personal information. We share personal information in the following circumstances:

Service delivery partners: Third-party providers assist with hosting, payment processing, and customer support tools. These providers access personal information only as needed and are bound by contract to protect it.

Your organisation: Telematics and GPS tracking data is accessible to the fleet operator (your employer or organisation) as the primary data controller for operational use.

Legal requirements: Ctrack may disclose personal information when required by NZ law, a court order, or a regulatory authority.

Business transactions: If Ctrack is acquired by or merges with another entity, personal information may transfer to the successor organisation under equivalent privacy protections.

We do not share personal information with third parties for marketing purposes without your explicit consent.

The Ctrack website uses cookies. Cookies are small text files stored on your device. They help our website recognise returning visitors and understand how people use our site.

Cookies the Ctrack website uses:

• Essential cookies: Required for basic website functionality and security. Disabling these will affect site operation.

• Analytics cookies: Measure page views, traffic sources, and browsing patterns to help us improve our website.

• Preference cookies: Store your display or language preferences across visits.

You can manage or turn off cookies through your browser settings. Disabling essential cookies may limit some website features. Analytics and preference cookies can be disabled without affecting core functionality. Continued use of our website after this notice constitutes acceptance of cookies as described.

The NZ Privacy Act 2020 gives you the following rights over personal information Ctrack holds about you. These rights apply to all individuals whose personal information we collect and hold.

Right to access: Request a copy of any personal information we hold about you. Ctrack will respond within 20 working days.

Right to correct: Ask us to correct personal information that is inaccurate or out of date. We will make the correction or explain why we disagree.

Right to complain: If you believe Ctrack has not handled your personal information correctly, you can complain to us directly or to the Office of the Privacy Commissioner at www.privacy.org.nz. The OPC is New Zealand's independent regulator for privacy rights.

Right to withdraw consent: Where we process personal information on the basis of your consent (for example, marketing emails), you can withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, use the contact details below.

Ctrack retains personal information for as long as needed to deliver services, meet legal obligations, or resolve disputes. Retention periods by data type:

• Account data: Retained while your account is active and for 7 years after account closure, to meet NZ commercial and tax record requirements

• Telematics and GPS tracking data: Standard retention is 12 months under your subscription agreement. Extended retention is available on request.

• Support communications: Retained for 3 years after the last contact

• Website analytics data: Retained for 26 months in anonymised form

When personal information is no longer required, Ctrack securely deletes or anonymises it.

For access requests, corrections, consent withdrawal, or privacy complaints, contact our privacy team:

Ctrack New Zealand
Privacy Officer
Email: privacy@ctrack.com
Phone:

For complaints not resolved to your satisfaction, contact the Office of the Privacy Commissioner (OPC):

www.privacy.org.nz

For general enquiries, visit our Contact Us page.

What personal information does Ctrack collect?

Ctrack collects information you provide (name, email address, phone number, billing details, and account credentials) and information generated through our telematics and fleet tracking services (vehicle GPS location, driver behaviour data, trip records, and EDL data). We also collect standard website analytics data through cookies and tracking tools.

How does Ctrack use GPS tracking data?

GPS tracking data and telematics data are used only to deliver fleet management services to your organisation. This includes live vehicle location, trip history, driver behaviour reporting, and compliance records for logbook hours. Ctrack does not use this data for advertising and does not sell it to third parties.

How can I access or correct my personal information?

Contact our privacy team at privacy@ctrack.com with a written request. We will respond within 20 working days as required by the NZ Privacy Act 2020. Include your name, contact details, and a description of the information you want to access or correct.

Does Ctrack share my data with third parties?

We do not sell personal information. We share data with third-party service delivery partners who help us operate our platform, and with the fleet operator (your employer or organisation) as the data controller for telematics data. We do not share personal information for third-party marketing without your explicit consent.

How long does Ctrack retain my personal information?

Retention periods depend on data type. Account data is retained for 7 years after account closure. Telematics and GPS tracking data is held for 12 months by default, with extended retention available. Website analytics data is held for 26 months in anonymised form.