Privacy Policy

1. Who We Are

Cybersafe NZ is a school cybersafety programme operated by Purelayer Ltd, a New Zealand registered company based in Christchurch, New Zealand. References to "we", "us", or "our" in this policy refer to Purelayer Ltd.

2. What Information We Collect

From Students

• First name (entered voluntarily at login)
• Quiz scores and completion status
• Year level completed
• Date and time of completion

From Schools & Teachers

• School name
• Contact email address
• School access code
• Licence expiry date

We do not collect full names, addresses, dates of birth, photos, or any other personally identifying information about students beyond their first name.

3. How We Use This Information

• To display student results in the Teacher Dashboard
• To generate completion certificates
• To allow teachers to identify students who may need follow-up support
• To validate school access codes and licence status
• To provide aggregate reporting on programme usage

We do not sell, share, or disclose student data to any third party for marketing or commercial purposes.

4. Where Data Is Stored

Student and school data is stored using Supabase, a cloud database provider. Data may be stored on servers located outside New Zealand, including in the United States. Supabase complies with internationally recognised data security standards.

By using Cybersafe NZ, schools acknowledge that data may be transferred to and stored in overseas jurisdictions.

5. Data Retention

Student quiz results are retained for the duration of the school's active licence. Schools may request deletion of their data at any time by contacting us. Upon licence expiry or cancellation, data will be deleted within 90 days unless a retention request is made.

6. Children's Privacy

Cybersafe NZ is designed for use by school-aged children under teacher supervision. We collect only the minimum data necessary. We do not knowingly collect data from children outside of a supervised school environment. Teachers and schools are responsible for ensuring appropriate supervision and obtaining any necessary parental consents required under their school's policies.

7. Your Rights Under the NZ Privacy Act 2020

Under the New Zealand Privacy Act 2020, you have the right to:

• Request access to personal information we hold about you or your students
• Request correction of inaccurate information
• Request deletion of data
• Make a complaint to the Office of the Privacy Commissioner

To exercise any of these rights, contact us at the details below.

8. Security

We take reasonable steps to protect personal information from loss, unauthorised access, use, modification, or disclosure. Access to the Teacher Dashboard is protected by school-specific access codes. We use HTTPS encryption for all data in transit.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify schools of any material changes by email. Continued use of Cybersafe NZ after changes constitutes acceptance of the updated policy.