PRIVACY & DATA GOVERNANCE
Valida Group respects the confidentiality of the information entrusted to us. This policy explains how we collect, use, disclose, protect and retain personal information when you visit our website, contact us, engage our services or use a ValidaOS implementation.
POLICY FRAMEWORK
Depending on your interaction with us, we may collect identity and contact details, company and director information, correspondence, service enquiries, engagement records, billing information, technical usage data and documents you choose to provide. Advisory work may involve sensitive financial records, tax information, creditor correspondence, payroll or transaction data, legal documents and information about directors, employees or counterparties.
We use information to respond to enquiries, assess and deliver agreed services, manage engagements and authorisations, operate and improve ValidaOS, communicate with clients, maintain security, meet professional and legal obligations, and establish or defend legal claims. Where required, processing is based on consent, performance of a contract, compliance with law or our legitimate interests in operating secure and effective services.
ValidaOS may use AI to support approved activities such as information retrieval, document classification, drafting and workflow guidance. The exact data sources, permissions, providers and controls are defined for each implementation. AI supports workflows; it does not replace professional judgement, legal advice or director responsibility. We do not represent the voice demonstration on this website as a live adviser.
We may share information with authorised Valida personnel, technology and hosting providers, professional advisers, and lawyers, barristers, accountants or insolvency practitioners engaged for the relevant matter. We may also disclose information to authorities, courts or other parties where authorised, required by law, or necessary for an agreed service. Providers are given only the access reasonably required for their role.
Valida operates across New Zealand, Australia and the United Kingdom. Information may therefore be accessed or processed outside the country where it was collected. Where applicable, we use contractual, organisational or legal safeguards for cross-border handling and consider the New Zealand Privacy Act 2020, the Australian Privacy Act 1988 and Australian Privacy Principles, and the UK GDPR and Data Protection Act 2018.
We use reasonable technical and organisational measures appropriate to the nature of the information and the service. These may include access controls, authentication, permission management, secure hosting, logging, staff confidentiality obligations and controlled sharing. No method of transmission or storage can be guaranteed completely secure, so clients should use the agreed channels for sensitive documents.
We retain information only for as long as reasonably necessary for the purpose collected, the agreed engagement, security and operational requirements, and applicable legal, tax, professional or dispute obligations. Retention periods vary by record type and jurisdiction. Information is then deleted, anonymised or securely disposed of where appropriate.
Subject to applicable law, you may have rights to request access to or correction of your personal information, object to or restrict certain processing, request deletion or portability, or withdraw consent. Some rights are limited where information must be retained or processed for legal, professional or contractual reasons.
Our website may process basic device, browser and usage information needed to operate, secure and understand the site. External services linked from the site apply their own privacy terms. Please avoid sending sensitive financial documents through general website enquiries unless we have provided an appropriate channel.
QUESTIONS, REQUESTS & COMPLAINTS
Contact us with a privacy question, rights request or concern and provide enough detail for us to identify the relevant information. We may need to verify your identity before acting. You may also have the right to complain to the privacy or data-protection authority in your jurisdiction.
Contact Valida about privacy ↗