OSHE Limited Privacy Policy (New Zealand)

Last updated: [insert date]

OSHE Limited (“OSHE”, “we”, “us”, “our”) is committed to protecting personal information in accordance with the Privacy Act 2020.

This Privacy Policy explains how personal information is handled when you use the OSHE App, website, and services.

​

1. Information we handle

OSHE provides a digital health and safety management platform. Information may be entered into the OSHE App by clients and their authorised users.

This may include:

• names and contact details
• worker and contractor information
• site and project details
• incident and accident reports
• injury or health related information
• photographs, documents, and notes
• compliance records and risk registers
• account and subscription information

OSHE does not own client data. All data remains the property of the client.

​

2. How information is collected

Information is collected when:

• users enter data into the OSHE App
• files or images are uploaded
• clients communicate with OSHE for support
• accounts are created and managed
• technical data is automatically recorded for security and performance

This may include IP addresses, device type, and system activity logs.

​

3. How information is used

OSHE uses information to:

• operate and maintain the OSHE App
• provide services and system functionality
• access data as necessary to provide technical support, assistance, training, and services
• assist clients with setup, troubleshooting, and compliance support
• improve platform performance and features
• communicate about updates, billing, and support
• meet legal and regulatory obligations

OSHE only accesses client data where reasonably necessary to deliver agreed services and support.

​

4. Disclosure of information

OSHE does not sell personal information.

Information may be disclosed where necessary to:

• authorised OSHE employees and contractors
• technology providers supporting hosting, security, analytics, and system operations
• professional advisers such as legal or accounting services
• regulatory or law enforcement agencies where legally required

All third parties are required to maintain appropriate confidentiality and security safeguards.

​

5. Storage, security, and protection

OSHE takes reasonable and appropriate steps to protect information from:

• unauthorised access
• loss or misuse
• alteration or disclosure

Security measures may include:

• secure cloud hosting environments
• encryption where appropriate
• access controls and user permissions
• regular system monitoring
• backups and resilience controls

While no system can be completely secure, OSHE continually works to maintain strong information security practices.

​

6. Overseas storage and processing

Information may be stored or processed using cloud based systems that may be located outside New Zealand.

Where this occurs, OSHE takes reasonable steps to ensure that overseas providers maintain privacy protections consistent with New Zealand privacy standards.

​

7. Access and correction rights

Individuals have the right to:

• request access to personal information held about them
• request correction of inaccurate or outdated information

Requests can be made by contacting OSHE using the details below.

​

8. Data retention

Information is retained only for as long as required to:

• provide services
• meet contractual obligations
• comply with legal or regulatory requirements

When no longer required, data is securely deleted or anonymised.

​

9. Privacy breaches

If a privacy breach occurs that has caused, or is likely to cause, serious harm, OSHE will:

• take immediate steps to contain the breach
• assess the impact
• notify affected individuals where required
• notify the Office of the Privacy Commissioner in accordance with the Privacy Act 2020

​

10. Cookies and technical tracking

OSHE may use cookies and similar technologies to:

• improve user experience
• enhance security
• analyse system performance

Users can control cookie settings through their browser, noting some features may not function correctly if disabled.

​

11. Updates to this policy

This Privacy Policy may be updated from time to time.

Updated versions will be available on the OSHE website or within the OSHE App and apply from the date of publication.

​

12. Contact details

For privacy enquiries, access requests, or concerns, contact:

OSHE Limited at the contact section of this website