Privacy Policy

1. Who we are

Deis is operated by Forman Pacific, LLC (“Deis”, “we”, “us”, or “our”). We are committed to protecting your privacy in accordance with the Privacy Act 2020.

2. Information we collect

Business Users: work email address, business name, NZBN, and usage data (lookups, evidence log entries).

Individuals: email address (for transparency portal access only). We do not create accounts for individuals.

Lookup data: the results of lookups performed by Business Users are stored temporarily according to the Business User’s retention policy. Compliance evidence (timestamps, pathways, notifications) is retained for 7 years.

3. How we use your information

• To provide and operate the Service.
• To capture and store IPP3A compliance evidence.
• To send IPP3A notifications on behalf of Business Users.
• To provide transparency portal access to individuals.
• To send system communications (magic links, notifications, billing).
• To improve the Service and develop new features.

4. Data storage and security

All data is stored on New Zealand-based infrastructure. We use encryption at rest and in transit. Access to production systems is restricted to authorised personnel with multi-factor authentication.

5. Your rights

Under the Privacy Act 2020, you have the right to access (IPP6) and correct (IPP7) your personal information. To exercise these rights, contact us through our AI-powered support.

6. Third-party data sources

DEIS connects to third-party data sources on behalf of Business Users. We do not control the data held by these sources. Business Users are responsible for their own IPP3A compliance when accessing these sources through DEIS — the platform captures the evidence but does not make compliance decisions for them.

7. Cookies

We use essential cookies for session management. We do not use advertising or tracking cookies. No third-party analytics are embedded on the site.

8. Contact

For all privacy inquiries, requests, or complaints: