Last Updated : Sep 2025
Eightwire Limited (“Eightwire”, “we”, “our”, or “us”) is committed to protecting the privacy and security of the information entrusted to us. This Privacy Policy has been updated to reflect the Privacy Act 2020 and the sensitive nature of the information handled by our enterprise SaaS platform, Conductor. It explains how we collect, use, disclose, and protect personal information across our business and services.
This Privacy Policy is structured in two parts:
1. General Privacy Policy – covering information collected from website visitors, marketing contacts, and business interactions with Eightwire.
2. Conductor – Data Handling Policy – covering how Eightwire manages and protects information processed through the Conductor platform.
The Privacy Act 2020 applies to all our activities. Eightwire has obligations under the Act to safeguard information and to notify of any notifiable privacy breaches. Clients using Conductor remain the primary 'agencies' under the Act and are responsible for compliance with the Information Privacy Principles.
For general business and website use, Eightwire may collect:
• Contact information (e.g., name, email, phone number).
• Information submitted through enquiries, support requests, or forms.
• Website usage information (cookies, analytics).
We use personal information to:
• Provide services and respond to enquiries.
• Manage customer accounts and relationships.
• Improve website performance and user experience.
• Meet legal and compliance obligations.
We retain business and website-related information only as long as necessary for the purpose it was collected, or as required by law.
In accordance with the Privacy Act 2020, Eightwire will notify the Privacy Commissioner and affected individuals if a notifiable privacy breach occurs. We will also work with affected clients to ensure they can meet their obligations.
When operating the Conductor platform, Eightwire acts as a processor on behalf of its clients (e.g., government agencies, NGOs, enterprises). Clients are the 'agencies' under the Privacy Act 2020 and remain responsible for compliance with the Information Privacy Principles.
Conductor employs strict security measures to safeguard data:
• End-to-end encryption (in transit and at rest).
• Technical safeguards preventing Eightwire staff from accessing the content of data transmissions.
• Independent audits and compliance with SOC 2 standards and NZ Government frameworks (where applicable).
Conductor is a zero-retention platform. Personal information is only held for the duration of a transaction:
• Data is deleted immediately after successful completion of a transaction.
• If a transaction stalls, no data remains accessible.
• Only minimal metadata may be retained temporarily for audit, troubleshooting, or security purposes, and is anonymised where possible.
Individuals seeking access to their personal information must contact the client organisation (the data controller) using Conductor. Eightwire does not hold the underlying data and cannot provide access directly, but will support clients in responding to such requests.
Eightwire facilitates disclosure of information only as directed by its clients for agreed purposes. We do not access, use, or disclose personal information for our own purposes or to third parties, except where required by New Zealand law.
Clients may request that data processed by Conductor is restricted to New Zealand-based infrastructure, meeting data sovereignty requirements. Where offshore processing occurs, Eightwire ensures appropriate safeguards are in place in compliance with the Privacy Act 2020.
Eightwire is committed to transparency. We use plain language in this policy and welcome questions or concerns about our privacy practices.
Contact: support@eightwire.io
Address: Eightwire Limited, Level 4, 40 Taranaki Street, Wellington 6011You also have the right to lodge a complaint with the New Zealand Privacy Commissioner.
