Privacy policy

Introduction

Sydekick Group Limited (Sydekick, we, us, our) complies with the New Zealand Privacy Act 2020 (the Act) when dealing with personal information. Personal information is information about an identifiable individual (a natural person).

This policy sets out how we will collect, use, disclose and protect personal information about users of our products, visitors to our site, and other individuals whose personal information we hold (you).

This policy does not limit or exclude any of your rights under the Act. If you wish to seek further information on the Act, see www.privacy.org.nz.

Information your organisation puts into Sydekick

Sydekick is a tool your organisation uses to run its security and privacy programme. Your organisation decides what goes into it, including any personal information in records, tasks, risks, policies, uploaded documents and conversations with our AI assistant.

Where we hold that information solely on your organisation's behalf, section 11 of the Privacy Act treats it as held by your organisation rather than by us. Your organisation is responsible for deciding what it collects, for telling the people concerned — including under principle 3A, where it takes information about someone from a source other than that person — and for answering their requests for access and correction. If you want to see or correct information your organisation holds in Sydekick, please ask your organisation. We will help them respond.

This does not reduce our own obligations. We remain responsible for keeping that information secure, for using it only to provide and support the service, and for the personal information we hold in our own right, such as your account and sign-in records.

Changes to this policy

We may change this policy by uploading a revised policy onto the website. The change will apply from the date that we upload the revised policy.

This policy was last updated on 12 August 2026.

What personal information do we collect?

Sydekick collects personal information about users of its products when you (or the organisation you work for) subscribe to or use any of our products or services.   We collect your name, email address, and the name of the company you work for.     When you use any of our products we will collect their IP address and log their activity within the product.

We also collect personal information from you when you voluntarily provide it through online forms, email, support requests or other types of communication with us (for example, when booking a demo of one of our products).

When we collect information about you from someone else

Sometimes we collect personal information about you from a source other than you. When that happens, the Privacy Act 2020 requires us to tell you about it. This section explains when we do it and what we tell you.

We collect personal information about you from someone else when:

• Your employer or a colleague adds you to Sydekick: An administrator at your organisation can create an account for you using your first name, last name and work email address. We use these to create your login, send your invitation, and set up your reminders and reports.
• A partner or enterprise administrator sets up your organisation: Where your organisation works through one of our partners, that partner may create your organisation and its first user accounts on its behalf.
• Your organisation connects Slack or Microsoft Teams: We receive your user identifier on that platform so we can match it to your Sydekick account and send you notifications where you already work.
• Someone refers you to us: A colleague may give us your name, work email and company when booking a demo or asking us to get in touch.

What we tell you, and when: As soon as reasonably practicable after collecting your information this way - usually in the email we send when your account is created — we let you know:

• that we have collected personal information about you, and who we got it from;
• why we collected it and what we use it for, as set out in How we use your personal information;
• who else may receive it, as set out in Disclosing your personal information;
• that Sydekick Group Limited, trading as Sydekick, is both the agency that collected your information and the agency that holds it, at 70E Neil Ave, Te Atatu Peninsula, Auckland 0610, and can be reached at support@sydekick.co;
• that no law requires or authorises us to collect this information — your organisation provides it voluntarily so that we can give you access to the service; and
• that you can ask us for a copy of the information we hold about you and ask us to correct it, as set out in Accessing and correcting your personal information.

When we might not tell you: The Privacy Act lets us skip this notice in limited situations - for example where you already know, where the information is publicly available, where telling you is not reasonably practicable, or where doing so would prejudice the maintenance of the law or create a serious threat to someone's health or safety. We rely on these exceptions only where they genuinely apply, and we record our reasons when we do.

Cookies

We use cookies (an alphanumeric identifier that we transfer to your computer’s hard drive so that we can recognise your browser) to collect information from and monitor visitor’s use of our website and products.  

We also use this information to personalize your experience and remember your preferences each time you visit our website.

The cookies we use collect information such as domain names, IP address, browser type, operating system, access times and referring web site addresses. In most cases this type of information does not personally identify you.

However we do use certain cookies to help us identify you on future visits. If you fill out a form on this website, your previous page views within our site will be connected with your email address and any other contact information you provide .

If you don’t fill out a form, cookie tracking on our site is anonymous. If you delete your cookies, you’ll be considered a new visitor next time you visit.

You may disable cookies by changing the settings on your browser, although this may mean that you cannot use all of the features of the website.

Who do we collect personal information from?

We collect personal information about you from:

• you, when you provide that personal information to us, including via the website and any related service, through any registration or subscription process (include free or trials assessments), through any contact with us (e.g. telephone call or email), or when you buy or use our services and products
• your company, when it provides us with your name and contact details so you can use the product and/or be assigned tasks
• our partners and enterprise administrators, where they set up your organisation on its behalf; the tools your organisation connects to Sydekick, such as Slack and Microsoft Teams; a colleague who refers you to us or books a demo on your behalf; and other third parties where you have authorised this or the information is publicly available. See When we collect information about you from someone else.

If possible, we will collect personal information from you directly.

How we use your personal information

We will use your personal information:

• to verify your identity (for example, to enable two factor authentication)
• to provide services and products to you
• to market our services and products to you, including contacting you electronically (e.g. by text or email for this purpose)
• to improve the services and products that we provide to you
• to bill you and to collect money that you owe us, including authorising and processing credit card transactions
• to respond to communications from you, including a complaint
• to conduct research and statistical analysis (on an anonymised basis)
• to protect and/or enforce our legal rights and interests, including defending any claim
• for any other purpose authorised by you or the Act.

Disclosing your personal information

We may disclose your personal information to:

• any business that supports our services and products, including any person that hosts or maintains any underlying IT system or data centre that we use to provide the website or other services and products
• a credit reference agency for the purpose of credit checking you (with your authorisation)
• other third parties (for anonymised statistical information)
• a person who can require us to supply your personal information (e.g. a regulatory authority)
• any other person authorised by the Act or another law (e.g. a law enforcement agency)
• any other person authorised by you.

A business that supports our services and products may be located outside New Zealand. This may mean your personal information is held and processed outside New Zealand.

Protecting your personal information

We will take reasonable steps to keep your personal information safe from loss, unauthorised activity, or other misuse.

Accessing and correcting your personal information

You have the right to request access to and correction of the personal information we hold about you. To do so, or if you have any privacy concerns or questions about our products, email us at support@sydekick.co.

Internet use

If you follow a link on our website to another site, the owner of that site will have its own privacy policy relating to your personal information. We suggest you review that site’s privacy policy before you provide personal information.

Contacting us

If you have any questions about this privacy policy, our privacy practices, or if you would like to request access to, or correction of, your personal information, you can contact us at support@sydekick.co.