Privacy Policy

1. Who we are and what this policy covers

1.1Incredible Group Limited (company number 4477839), trading as Incredible Group ("we", "us", "our"), is a New Zealand company based at 38F Highbrook Drive, East Tāmaki, Auckland. We provide aerial and ground imaging, drone operations, surveys, drone and equipment sales, platforms such as Percepta and Drone in a Box, timelapse and project tracking, and training.

1.2This policy applies to personal information about:

• our clients and their staff and contacts;
• people who visit our website, use our platforms or contact us;
• people who appear in imagery, video or data we capture;
• suppliers, contractors, pilots and job applicants.

1.3"Personal information" means information about an identifiable person. It does not include information about a business that does not identify an individual.

1.4Where we provide a platform or monitoring service to a client, the client decides what is monitored and is responsible for its own privacy obligations to the people involved. We handle that information on the client's behalf, under our agreement with them and this policy.

2. What personal information we collect

2.1We only collect what we need for the purpose we collect it for.

2.2We do not store full credit card numbers. Card payments are handled by Stripe.

2.3We do not collect health information or carry out credit checks.

3. How we collect it

3.1Most of the information we hold comes directly from you, when you request a quote, place an order, use our platforms, contact us, apply for a role or attend training.

3.2We also collect information from other sources, including:

• your employer or the client who engaged us, for example when they give us your details as a site contact;
• main contractors, site managers and landowners, for access and health and safety;
• airspace and aerodrome contacts, councils and other authorities, when arranging approvals;
• manufacturers and distributors, for warranty and product support;
• public sources such as the Companies Office and business websites.

3.3When we collect your information from someone else, we will take reasonable steps to tell you that we have it, why, and how to contact us, as required by information privacy principle 3A. We may not do this where an exception in the Privacy Act applies, for example where you already know, or where telling you is not reasonably practicable.

3.4When we capture imagery or data, we may record people who happen to be nearby. Section 5 explains how we handle this.

4. How we use it

4.1We use personal information to:

• prepare quotes, deliver services and supply products;
• plan and carry out flights safely, including approvals, site access, inductions and incident reporting;
• give access to our platforms and support their users;
• invoice, collect payment and manage accounts;
• deliver training and keep training records;
• handle warranty claims and product support;
• meet our obligations under civil aviation, health and safety, tax and other laws;
• improve our website, platforms and services; and
• tell you about our products, services and news.

4.2You can opt out of marketing emails at any time by using the unsubscribe link or contacting us. We will still send messages you need about your account or a job.

4.3We do not sell or rent personal information.

5. People in imagery, drone footage and monitoring

5.1Our work is about places, buildings, infrastructure and projects, not people. Even so, aerial and ground capture can record people, vehicles and private property near a Site.

5.2To limit this, we:

• plan flight paths and camera angles to avoid identifying people and neighbouring private areas where we can;
• follow Civil Aviation Rules on flying over people and property, including obtaining consent where required;
• ask clients to tell neighbours and people on Site about planned flights; and
• blur or remove identifiable people, faces and number plates from published work where practical, or on request.

5.3We may use imagery in our portfolio, website and marketing. We will not publish imagery that identifies a person in a way they would reasonably object to. If you appear in something we have published and want it removed or blurred, contact us and we will deal with it promptly.

5.4Monitoring services. Platforms such as Percepta, Drone in a Box and timelapse cameras may record people within the monitored area. We run these for our clients, who decide what is monitored and must tell people about it, for example with signage. Requests about that footage may be passed to the client.

5.5Raw footage is kept only as long as needed for the job, our records and our client's licence, and is then deleted (see section 7).

6. Who we share it with

6.1We share personal information only where needed for the purposes in section 4, with:

• our staff and the subcontractors, pilots and crew working on a job;
• service providers who support our business, such as cloud hosting and storage, email, accounting, payment, website and platform providers;
• equipment manufacturers and distributors, for warranty, repairs, product registration and support;
• the Civil Aviation Authority, Airways, aerodromes and councils, where needed for approvals or incident reporting;
• our professional advisers, insurers and debt collection agencies;
• a buyer of all or part of our business, under the same privacy protections; and
• police or other agencies, where the law requires or allows it, for example to prevent a serious threat to someone's safety.

6.2Our service providers may only use your information to provide services to us.

6.3Our main service providers are:

6.4Overseas. Some of our providers store or process information outside New Zealand, for example in Australia, the United States or China. Most of the providers in 6.3 are based overseas, and drone apps may sync flight and image data to the manufacturer's cloud, depending on settings. Before we send personal information overseas, we take reasonable steps to make sure it will be protected in a way comparable to the Privacy Act, as required by information privacy principle 12.

7. Storage, security and retention

7.1We store information in secure cloud systems and on our own equipment. We protect it with access controls, passwords and multi-factor authentication, encryption where available, and by limiting access to people who need it.

7.2No system is completely secure. Please keep your platform log-in details private and tell us straight away if you think your account has been misused.

7.3We keep personal information only as long as we need it for the purpose we collected it for, or as the law requires. For example:

• financial and tax records are kept for at least 7 years;
• flight logs and operational records are kept as our Part 102 certificate requires;
• raw footage and survey data are kept for the job, our records and the client's licence period; and
• platform data is deleted after a Subscription ends, as our Terms and Conditions describe.

After that, we delete or anonymise it.

7.4Privacy breaches. If a privacy breach is likely to cause someone serious harm, we will notify the Privacy Commissioner and the people affected as soon as practicable, as the Privacy Act requires.

8. Website, cookies and platforms

8.1Our website and platforms use cookies and similar tools to keep you signed in, remember your settings, keep the service secure and understand how they are used.

8.2We use analytics tools, such as Google Analytics, to see which pages are visited and how people find us. These tools may store data overseas. We use the results in aggregate and do not use them to identify you.

8.3You can block or delete cookies in your browser settings. If you do, some features, such as signing in to a platform, may not work.

8.4Our website may link to other sites, such as DJI or other manufacturers. Their own privacy policies apply.

9. Your rights

9.1You can ask us whether we hold personal information about you, and ask to see it. You can also ask us to correct it if you think it is wrong.

9.2To make a request, contact our Privacy Officer (section 10). We may ask you to confirm who you are. We will respond as soon as reasonably practicable, and within 20 working days.

9.3There is normally no charge. We may only refuse a request on the grounds the Privacy Act allows, and if we do, we will tell you why. If we do not agree to correct information, you can ask us to attach a statement of the correction you asked for.

9.4Complaints. If you have a concern about how we have handled your information, please contact us first so we can try to put it right. If you are not satisfied, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.

10. Changes and contact

10.1We may update this policy from time to time. The current version is always on our website, with its effective date. If a change significantly affects how we handle your information, we will let our clients and platform users know.

10.2Our Privacy Officer handles privacy questions, requests and complaints:

• Email: support@incredible.co.nz
• Phone: 09 525 7750
• Post: Privacy Officer, Incredible Group Limited, PO Box 204066, Highbrook, Auckland 2161