Privacy Policy
Last Updated: July 2026
Privacy Policy
Devotech ("we", "our", or "us") is committed to protecting your privacy and handling personal information responsibly in accordance with the New Zealand Privacy Act 2020 and other applicable privacy laws.
This Privacy Policy explains how we collect, use, disclose, store, and protect personal information when you visit our websites, purchase or use our software products, subscribe to our services, attend training events, or otherwise interact with Devotech.
By using our products, services, or websites, you acknowledge that your personal information may be processed as described in this Privacy Policy.
1. Who We Are
Devotech is a software company headquartered in Auckland, New Zealand, providing civil engineering software, technical support, training, licensing, and related professional services.
2. Information We Collect
We may collect the following categories of personal information:
Information You Provide
-
Name and surname
-
Company or organisation name
-
Email address
-
Telephone number
-
Postal or billing address
-
Job title or professional role
-
Account credentials
-
Payment and transaction information
Product and Licensing Information
-
Software licence details
-
Activation information
-
Subscription information
-
Product registration records
Technical Information
-
Product version information, licence status, activation status, feature usage statistics, and diagnostic telemetry where enabled.
-
IP address
-
Browser type and settings
-
Device information
-
Operating system details
-
Application usage information
-
Error reports and diagnostic data
Support Information
-
Helpdesk requests
-
Technical support communications
-
Project files, drawings, models, calculations, and other information voluntarily submitted to Devotech for technical support purposes.
3. How We Collect Information
We collect personal information in several ways, including:
-
When you contact us
-
When you create an account
-
When you purchase or register software
-
When you request technical support
-
When you attend training courses or events
-
Through website forms and online services
-
Through cookies and similar technologies
-
Through authorised resellers and business partners where appropriate
4. Why We Use Personal Information
We use personal information to:
Provide Products and Services
-
Process purchases and subscriptions
-
Manage software licensing and activation
-
Deliver software updates
-
Provide technical support
-
Administer customer accounts
Communicate With You
-
Respond to enquiries
-
Provide service notifications
-
Send licensing and subscription reminders
-
Inform you about maintenance activities and product updates
Improve Our Products and Services
-
Investigate, diagnose, and resolve software support issues
-
Monitor software health, licence compliance, and product performance.
-
Analyse product usage
-
Troubleshoot technical issues
-
Improve customer experience
-
Develop new features and services
Marketing Communications
-
Where permitted by law, we may send:
-
Product announcements
-
Newsletters
-
Training opportunities
-
Event invitations
-
Special offers and promotions
You may opt out of marketing communications at any time by using the unsubscribe link included in our communications or by contacting us directly.
5. Legal Basis for Processing
Where applicable, we collect and process personal information because:
-
It is necessary to provide requested products or services.
-
It is necessary for our legitimate business operations.
-
We have obtained your consent.
-
We are required to comply with legal obligations.
6. Cookies and Analytics
Our websites use cookies and similar technologies to improve functionality, enhance user experience, analyse website traffic, and support security and operational requirements.
Cookies may include:
Essential Cookies
These cookies are necessary for the operation of our websites and services and cannot be disabled through our consent mechanisms.
Examples include:
-
User authentication
-
Session management
-
Security and fraud prevention
-
Website functionality
Performance and Analytics Cookies
These cookies help us understand how visitors use our websites by collecting aggregated and anonymous statistical information.
Examples include:
-
Website traffic analysis
-
User interaction metrics
-
Performance monitoring
Functional Cookies
These cookies remember preferences and settings to improve your experience across visits.
Marketing Cookies
Where used, these cookies help us measure the effectiveness of marketing activities and deliver relevant communications.
Cookie Consent
Where required by applicable law, visitors will be provided with a cookie consent banner or preference center allowing them to:
-
Accept all cookies
-
Reject non-essential cookies
-
Configure cookie preferences
You may also manage cookies through your browser settings. Disabling certain cookies may impact the functionality of some website features.
Consent preferences can be changed at any time through available website settings or by contacting Devotech.
7. Sharing Personal Information
We do not sell personal information.
We may disclose personal information to:
-
Cloud hosting providers
-
Payment processors
-
Software and technology service providers
-
Technical support partners
-
Professional advisers
-
Regulatory authorities or law enforcement agencies where required by law
We may also disclose information where reasonably necessary to establish, exercise, or defend legal claims, protect our rights, prevent fraud, or protect the safety of our customers, employees, and systems.
All service providers are expected to maintain appropriate safeguards for personal information.
8. International Data Transfers
As a global business, Devotech may store or process information in countries outside New Zealand.
Where personal information is transferred internationally, we take reasonable steps to ensure that recipients provide safeguards that are comparable to those required under New Zealand privacy law.
9. Information Security
We implement reasonable technical, organisational, and administrative measures to protect personal information against:
-
Unauthorised access
-
Disclosure
-
Loss
-
Misuse
-
Modification
-
Destruction
While we strive to protect personal information, no method of electronic transmission or storage can be guaranteed to be completely secure.
Access to personal information is restricted to authorised personnel and service providers who require access to perform their duties.
10. Data Retention
We retain personal information only for as long as necessary to:
-
Provide products and services
-
Meet legal and regulatory obligations
-
Resolve disputes
-
Enforce contractual agreements
-
Maintain appropriate business records
Licensing, financial, and transaction records may be retained for periods required by applicable tax, accounting, and legal obligations. Information that is no longer required will be securely deleted, anonymised, or otherwise disposed of.
11. Your Privacy Rights
Subject to applicable law, you may have the right to:
-
Request access to your personal information
-
Request correction of inaccurate information
-
Withdraw consent where consent is relied upon
-
Request clarification regarding the use of your information
To exercise these rights, please contact us using the details provided below.
12. Third-Party Websites
Our websites and services may contain links to third-party websites or services. Devotech is not responsible for the privacy practices, policies, or content of third-party websites.
We encourage users to review the privacy policies of any external websites they visit.
13. European Union and United Kingdom Users (GDPR)
Where the General Data Protection Regulation (GDPR) or United Kingdom GDPR applies, Devotech acts as either a Data Controller or Data Processor depending on the services being provided.
Individuals located within the European Economic Area (EEA), Switzerland, or the United Kingdom may have additional rights, including:
Right of Access
The right to obtain confirmation of whether your personal information is being processed and to request a copy of that information.
Right to Rectification
The right to request correction of inaccurate or incomplete personal information.
Right to Erasure
The right to request deletion of personal information where retention is no longer necessary or legally required.
Right to Restrict Processing
The right to request that processing be temporarily limited under certain circumstances.
Right to Data Portability
The right to receive personal information in a structured, commonly used, and machine-readable format where applicable.
Right to Object
The right to object to processing based on legitimate interests or direct marketing activities.
Right to Withdraw Consent
Where processing is based on consent, consent may be withdrawn at any time without affecting prior lawful processing.
Right to Lodge a Complaint
Individuals may lodge a complaint with a relevant data protection authority in their country of residence.
International Transfers under GDPR
Where personal information originating from the EEA or UK is transferred to countries outside those jurisdictions, Devotech will implement appropriate safeguards, which may include:
-
Standard Contractual Clauses (SCCs)
-
Adequacy decisions recognised by applicable regulators
-
Contractual and technical safeguards
-
Other lawful transfer mechanisms permitted by applicable law
14. Customer Data Processing
Where customers upload, submit, or provide information through Devotech products or services, the customer remains responsible for determining the lawful basis for processing such information.
In such circumstances, Devotech may act as a data processor or service provider on behalf of the customer and will process such information only in accordance with the customer's instructions and applicable law.
15. Privacy Breaches
If Devotech becomes aware of a privacy breach that may cause serious harm, we will take appropriate steps to investigate, manage, and notify affected individuals and relevant authorities where required by applicable law.
16. Data Breach and Security Incident Management
Devotech maintains policies and procedures designed to identify, assess, respond to, and mitigate security incidents and privacy breaches.
In the event of a suspected or confirmed data breach, we will apply the following:
Investigation
-
Promptly assess the nature and scope of the incident
-
Determine the information affected
-
Identify affected individuals and systems
Containment and Remediation
-
Take steps to contain the incident
-
Restore the security and integrity of affected systems
-
Implement corrective measures to reduce the risk of recurrence
Notification
Where required by applicable law, we will notify:
-
Affected individuals
-
Regulatory authorities
-
Relevant business partners
Notification will occur as soon as reasonably practicable after becoming aware of a notifiable privacy breach.
Record Keeping
Devotech maintains records of significant privacy and security incidents and the actions taken in response to those incidents.
Automated Decision-Making
Devotech does not make decisions that produce legal or similarly significant effects solely through automated processing of personal information.
17. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our business practices, technologies, legal requirements, or services.
The latest version will always be published on our website and will indicate the date of the most recent revision.
18. Contact Us
Devotech has a Privacy Officer responsible for privacy compliance and personal information management. For privacy enquiries, access requests, correction requests, or concerns regarding personal information, please contact:
Devotech
Level 1, 103 Carlton Gore Road
Newmarket
Auckland
New Zealand
Privacy Officer: privacy@devotechgroup.com
Sales: sales@devotechgroup.com
Support: support@devotechgroup.com
Phone: +64 21 412 208
If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner New Zealand.