This Privacy Policy applies to shuttlerock.com, a website and associated subdomains owned and operated by Shuttlerock Limited.

 

Shuttlerock Limited (“Shuttlerock”, “We”, “Us” or “Our”) provides this Privacy Policy to inform you of Shuttlerock’s policies and procedures regarding the collection, use, retention, disclosure and disposal of information that relates to an identified or identifiable individual (“Personal Information”) Shuttlerock receives from the following:

 

Users in the general public (“Public Users”) who visit and use the publicly-accessible website located at www.shuttlerock.com (“Shuttlerock Site”).

 

Users who are customers or prospective customers of Shuttlerock (“Customers”) who access and use the Shuttlerock platform (“Platform” or “Shuttlerock Platform”), whether on a trial, or paid subscription basis, to operate the Platform and/or interact with other social network sites eg Facebook, Twitter, or any other website operated by a third party (“Third Party Sites”).

 

Users who interact with Shuttlerock as prospective or onboarded Content Creators under Shuttlerock’s Creator Program Terms and Conditions (“Content Creators”).

 

When handling Personal Information, we will comply with all privacy laws that we are legally obliged to comply with (“Applicable Privacy Laws”), including (as applicable), the New Zealand Privacy Act 2020, California Consumer Privacy Act 2018, the General Data Protection Regulation (EU) 2016/679 (EU GDPR) and/or the United Kingdom Data Protection Regulation (UK GDPR).

​

 

INFORMATION SHUTTLEROCK MAY RECEIVE FROM USERS

 

1. Public Users: If you are a Public User, in the course of using the Shuttlerock Site, you may provide Shuttlerock with (i) personally identifiable information such as your name, phone number, picture and/or email address and other information that, if aggregated, could be used to identify you such as your age, gender, languages, city, suburb (some of which may also be inferred from your IP address and browser), and permissions (“Personal Information”); and (ii) feedback, suggestions, complaints, or other descriptions of your experiences, preferences, or interests in Shuttlerock or the Platform (“Feedback”).

2. Customers: If you are a Customer, in the course of using the Shuttlerock Site or the Platform, you may provide Shuttlerock with (i) Personal Information in your user or account profile with Shuttlerock, such as your name, phone number, credit card or other billing information, email address, and home and/or business postal addresses; (ii) Personal Information in your user or account profile with the Third Party Site that interacts with the Shuttlerock Platform, that may include, but are not limited to, your log in credentials and profile information that you have elected to make public or provided to us; and (iii) Personal Information of your Customer Users that you have consent to collect, process, and/or store in connection with such Customer Users’ participation in an advertising, marketing, social media or another campaign (“Campaign”) using the Shuttlerock Platform or created by Shuttlerock; and (iv) Feedback.

3. Content Creators: your name, email address, postal address, profile picture, moving or still images or audio recordings of your voice in your introductory video, information in your public online social media pages such as Instagram and TikTok, professional profiles such as Shopify or LinkedIn that you actively provide us with links to, your profile summary in the form of free text information that you choose to provide about yourself, your hobbies and your interests, your creator content speciality verticles, languages spoken, your age range, bank account information that enables us to pay you, and if you volunteer to do so, your gender and ethnicity (“Creator Profile Data”). Shuttlerock processes this information as a data controller, to the extent applicable under the EU GDPR and/or UK GDPR.

​

If you are someone who's still or moving image or voice is contained within any of the Creative Content that our Customers or Content Creators makes, then we may collect or receive your still or moving image, or voice.

 

Where information is provided to Shuttlerock by its Customers in accordance with the Customer’s relevant privacy policy, Shuttlerock processes that information solely on behalf of and under the direction of its Customers. We process this Personal Information as an “agent” under the NZPA and, to the extent applicable, a “data processor” under the EU GDPR and/or UK GDPR. The data controller in this situation (for example, the Customer) will have its own privacy policy that will apply to its use of your Personal Information and We suggest you review any such privacy policy before you provide them with access to your Personal Information.

 

Where We process Personal Information for Our own purposes related to our business, We will be an “agency” governed by the NZPA and, to the extent applicable, a “data controller” under the EU GDPR and/or the UK GDPR.

 

 

INFORMATION SHUTTLEROCK COLLECTS

 

In addition to the information identified above, and regardless of the type of user you are, when you visit the Shuttlerock Site or interact with the Shuttlerock Platform, Shuttlerock’s servers and our third party tracking-utility partners gather certain information automatically that your browser sends whenever you visit a website through log files. This information may include, but is not limited to, your computer’s Internet Protocol address, browser type, the web page you were visiting before you came to the Shuttlerock Site or interacted with the Shuttlerock Platform, and information you search for on the Shuttlerock Site or the Customer’s website or the Third Party Site.

 

Cookies

Shuttlerock uses a number of automated tracking technologies. Technologies such as cookies, beacons, tags and scripts are used by Shuttlerock and our tracking-utility partners, affiliates, or analytics or service providers (Providers). These technologies are used in analyzing trends, administering the Shuttlerock Site, tracking users’ movements around the Shuttlerock Site and to gather demographic information about our user base as a whole. We may receive reports based on the use of these technologies from Our Providers on an individual as well as aggregated basis.

 

We use cookies to remember users’ settings (e.g. language preference), for authentication, for storing recently visited page information and for routing user traffic. Users can control the use of cookies at the individual browser level. If you reject cookies, you may still use our website, but your ability to use some features or areas of our website may be limited and you may not receive the latest content.

 

The use of cookies by our Customers or Third Party Sites is not covered by our Privacy Policy. We do not have access or control over these cookies.

 

Log Files

As is true of most websites, we gather certain information automatically and store it in log files. This information may include internet protocol (IP) addresses, browser type, internet service provider (ISP), referring/exit pages, operating system, date/time stamp, and/or clickstream data. We may link this automatically-collected data to other information we collect about you.

​

Local Storage Objects (HTML 5)

We use Local Storage Objects (LSOs) such as HTML5 to store content information and preferences. Various browsers may offer their own management tools for removing HTML5 LSOs.

​

Behavioural Targeting / Re-Targeting

We may partner with a third party Provider to either display advertising on the Shuttlerock Site or to manage our advertising on other sites. Our Providers may use technologies such as cookies to gather information about your activities on the Shuttlerock Site and other sites in order to provide you with advertising based on your browsing activities and interests.

​
Disabling cookies

You can enable or disable cookies by modifying the settings in your browser.  You can find out how to do this and find more information on cookies at: www.allaboutcookies.org. You can also find out how to disable Flash cookies at www.adobe.com/products/flashplayer/security. Please be aware that if you choose to disable or delete cookies in your browser, you may not be able to access or use certain functions of our website.

 

Google Workspace APIs are not used to develop, improve, or train generalized/non-personalized AI and/or ML models.

​

 

HOW SHUTTLEROCK USES AND DISCLOSES PERSONAL INFORMATION

 

Shuttlerock uses Personal Information obtained by the technical means or directly or indirectly as described above for the following lawful purposes:

 

For the purposes of the contract  between you and Us: (i) to create and set up your account with Shuttlerock and verify your identity; (ii) to provide the Shuttlerock Site, the Shuttlerock Platform, and related Shuttlerock services, features and content; (iii) to enable you to enjoy and easily navigate the Shuttlerock Site and Shuttlerock Platforms; (iv) to personalise your experience on the Shuttlerock Site or Shuttlerock Platforms; (v) to carry out Our obligations under our Terms of Use (available on the Shuttlerock Site); (vi) to respond to communications from you (including complaints) relating to the Shuttlerock Site, the Shuttlerock Platform and/or related Shuttlerock services, features and content; (vii) to identify you when you sign-in to your account and verify that your account is not being used by others; (viii) to bill you and to collect money that you owe Us, including authorising and processing (or procuring the processing by a third party of) credit card transactions; and (ix) to enforce compliance with our Terms of Use (available on the Shuttlerock Site) or any other agreement you have with Us.

 

As necessary for the purposes of a legitimate interest pursued by Us: (i) to comply with Our obligations to our third-party service providers, suppliers and resellers; (ii) to improve the Shuttlerock Site, the Shuttlerock Platform, and related Shuttlerock services, features and content; (iii) to analyse usage of Shuttlerock Site, the Shuttlerock Platform and related Shuttlerock services, features and content, or carry out research and analysis, so We can improve the Shuttlerock Site, the Shuttlerock Platform and related Shuttlerock services, features and content; (iv)  to protect and/or enforce Our legal rights and interests, including defending any claim; (v) to provide or offer software updates and product announcements; (vi) to provide users with further information and offers from Shuttlerock or third parties that a user has asked to receive or that Shuttlerock believes users may find useful or interesting, including newsletters, marketing or promotional materials and other information on services and products offered by Shuttlerock or third parties; and (vii) to comply with Our legal obligations, including any notification and reporting obligations and any access directions imposed on us by a Government agency or regulatory authority. This will include complying with any notification and reporting obligations and any access directions imposed on us by a Government agency, and otherwise where the law requires or allows us to do so.

 

We have assessed that, when processing Personal Information based on legitimate interests, our interests are not overridden by the interests or fundamental rights and freedoms of the person to whom the Personal Information relates. However, if you are based in the European Union (including Switzerland) or the United Kingdom at the time we are processing your Personal Information, you have the right to object to the way We process your Personal Information where the processing is based on legitimate interests.

 

If you are a Content Creator, we use your Creator Profile Data to identify whether you may be suitable to provide Creator Content to Customers, as described in the Creator Program Terms and Conditions. Your Creator Profile Data may also be shared with Customers as part of this process of determining suitability and brand alignment, and at any point thereafter whilst you are providing work in line with those Creator Program Terms and Conditions.

 

If you are someone who is in any creative content that we make or procure, then your still or moving image or any recording of your voice is used for the purposes of providing our Services to Customers, which includes determining suitability and alignment with our Customers’ creative and brand requirements. We will use any other personal information about you to facilitate and otherwise manage our working relationship with you.

​

 

LAWFUL BASIS FOR PROCESSING

 

We rely on legitimate interests to collect personal information about any website, service or platform user or customer, to the extent that the lawful basis is not set out in a prevailing contractual requirement.

 

We rely on Content Creators’ consent to collect personal information in Creator Profile Data and we rely on the need to fulfill contractual obligations, our legitimate business interests to process any personal information contained in Creator Content.

 

Depending on your jurisdiction, we rely on either consent or legitimate interests to collect and process personal information contained in cookies and related technologies. Where consent is withdrawn or withheld, we will not start, or will stop any existing processing of such personal information.

HOW SHUTTLEROCK SHARES PERSONAL INFORMATION

 

We will share your Personal Information with third parties only in the ways that are described in this Privacy Policy. We do not sell Personal Information that would identify you to third parties.

 

We may share Your Personal Information with (i) customers, (ii) service providers and business partners, as described in the section below headed “Service Providers and Business Partners”; (iii) a person who can require us to supply your Personal Information (e.g. a regulatory authority or law enforcement agency); (iiv) a third party to respond to due diligence requests and/or transfer Personal Information in the case of a sale, merger, consolidation, liquidation, reorganisation or acquisition of our business or in the event of bankruptcy; and (v) any other person or entity authorised by you.

SERVICE PROVIDERS AND BUSINESS PARTNERS
 

Shuttlerock may employ third party companies and individuals to operate the Shuttlerock Site or the Shuttlerock Platform to perform site-related services (such as to maintenance services, database management, customer support, sending emails on our behalf and web analytics and site improvement) or to assist us in analyzing how the Shuttlerock Site and the Shuttlerock Platforms are used. These third parties will have access to your Personal Information only for purposes of performing these tasks on Shuttlerock’s behalf. These third parties will not retain a copy of your Personal Information. Transfers to Providers are covered by the service agreements with our Customers.

 

​Shuttlerock may also provide Personal Information to its business partners or other entities with whom Shuttlerock has cooperative relationships so that they can send you the promotional and other information you have requested from Shuttlerock or its business partners. If you provide us with your Personal Information for these purposes and no longer want it to be used in this way you may contact us at privacy@shuttlerock.com.

​

Overseas Transfers

We are located in New Zealand, so unless you are in the European Economic Area or the UK, your Personal Information may be transferred and/or stored there. If you are in the European Economis Area or the UK your personal information will be transferred to and stored in Ireland or Germany. In any event, for the purposes of the EU GDPR and the UK GDPR, New Zealand has been recognized as providing adequate protection of personal information, equivalent to that provided under the EU and UK GDPR regimes.

​

We utilise the services of third party processors (or sub-processors, as applicable) in various countries (including New Zealand and the United States) who may access your Personal Information for the matters specified under the heading “Service Providers and Business Partners” above. 

 

Consequently, for non EEA or UK customers, we may transfer Personal Information collected on the Shuttlerock Site or in relation to a Campaign through the Shuttlerock Site, a Third Party Site or related applications, to persons or entities located in these countries.  Although we will endeavour to ensure that Personal Information is treated securely and in accordance with this Privacy Policy as well as Applicable Privacy Laws, we advise that some of these countries may not have an equivalent level of data protection laws as those in New Zealand. By submitting your Personal Information to Shuttlerock, the Shuttlerock Site, in relation to a Campaign or to a related application, directly or indirectly through a Campaign, you consent to such processing of your Personal Information.

​

If we transfer Personal Information to a third party located in a country outside:

 

• the European Economic Union that the European Commission has not recognised as providing adequate protection, if required by the EU GDPR We will enter into an agreement with that third party that contains the standard contractual clauses approved by the European Commission; or

 

• If required by the United Kingdom in circumstances where  the United Kingdom Government has not recognised as providing adequate protection, if required by the UK GDPR We will enter into an International Data Transfer Agreement or Addendum (as appropriate) issued under section 119A of the UK Data Protection Act 2018.

​

 

OPT-OUT POLICY

 

If you are either a Public User or a Customer and decide at any time that you no longer wish to receive email or marketing communications from Shuttlerock, please follow the unsubscribe instructions provided in any of our communications.

​

​

PUBLICLY-AVAILABLE PERSONAL INFORMATION

 

If you are a prospective or on-boarded Content Creator then we may review your publicly available social media or professional networking pages to determine your initial or ongoing suitability for the Creator Program, and we may keep your profiles on those sites under review whilst you continue to be a member of the Creator Program. If you are not fully onboarded to the Creator Program, or if you leave the Creator Program for any reason then we will delete any information about you that we have collected within 60 days, with the exception of Creative Content in respect of which the ownership rights have been assigned to Us or any of our Customers, licensees or assignees. 

​

​

BLOG

​

The Shuttlerock Site offers publicly accessible blogs. You should be aware that any information you provide in these areas may be read, collected, and used by others who access them. You should not provide any personal information in any blog if you do not want it to be publicly available. To request removal of your personal information from the Shuttlerock Site or blog, contact us at privacy@shuttlerock.com. In some cases, we may not be able to remove your Personal Information. We will let you know if we are unable to remove your Personal Information and why.

​
 

SINGLE SIGN-ON

​

You can log in to our Customers Platforms using sign-in services such as Facebook Connect or an Open ID provider. These services will authenticate your identity and provide you with the option to share certain Personal Information with us and our Customers, such as your name and email address, to pre-populate our sign up form.

​

​

OUR POLICY TOWARD CHILDREN

​

Neither the Shuttlerock Site nor the Shuttlerock Platforms are directed to children under 13. Shuttlerock does not knowingly collect Personal Information from children under 13. If a parent or guardian becomes aware that his or her child has provided Shuttlerock with Personal Information without their consent, he or she should contact us at privacy@shuttlerock.com. If Shuttlerock becomes aware that a child under 13 has provided Shuttlerock with Personal Information, Shuttlerock will delete such information from its files, and perform any other acts necessary to comply with applicable laws or regulations.

​

​

ANONYMOUS AND AGGREGATE INFORMATION

​

Shuttlerock reserves the right to use and disclose any information that is aggregated in a format such that you are not identifiable from that information (such as statistics and survey results that do not identify you individually).

 

We may anonymise and aggregate Personal Information such that no person could be re-identified from the information. Once anonymised, this aggregated and anonymised data no longer constitutes Personal Information.

​

 

MARKETING COMMUNICATION

​

Users who opt-in to receive a mailing or other communications may opt-out from receiving such marketing communications from Shuttlerock at any time by calling Shuttlerock, following the specific instructions in the email you receive, or by notifying Shuttlerock via the following contact email address: privacy@shuttlerock.com.

 

Please note that the above will not apply to communications to Customers about the Shuttlerock Platform that is considered part of Shuttlerock’s service, in which case you will continue to receive such communications and may not opt out of receiving them unless you cancel your subscription to the Shuttlerock Platform.

 

 

RETENTION OF PERSONAL INFORMATION

 

We will retain your information as well as information we process on behalf of our Customers for as long as the Customers’ account is active or as needed to provide the Customer with services. We will retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

 

 

YOUR RIGHTS

 

You have the right to access your readily retrievable Personal Information that we hold about you, and to ask for it to be corrected if you think it is wrong.

 

If you are based in the European Economic Area (including Switzerland) or the United Kingdom you also have the right, under the EU GDPR or the UK GDPR (as applicable), to: (i) in certain circumstances, have your Personal Information erased; (ii) restrict the processing of your Personal Information; (iii) move, copy or transfer your Personal Information easily for your own purposes across different services in a safe and secure way; (iv) object to processing where We rely on our legitimate interests as the lawful basis for processing; (v) where we are processing Personal Information with consent, withdraw your consent; and (vi) lodge a complaint with a data protection supervisory authority, in particular in the Member State in the European Union (or in the UK, as applicable) where you are habitually resident or where an alleged infringement of the EU GDPR or UK GDPR (as applicable) has taken place.

​

Please note that in certain circumstances We may refuse to respond to a rights request where We have the right to do so under the EU GDPR or UK GDPR (as applicable), for example, where a request is manifestly unfounded or excessive.

 

​If you wish to exercise your rights under this Privacy Policy or any Applicable Privacy Laws, please contact Us at privacy@shuttlerock.com. Your email should provide evidence of who you are and set out the details of your request (e.g. the Personal Information, or the correction, that you are requesting).

​

 

TESTIMONIALS

​

We post Customer testimonials on the Shuttlerock Site which may contain Personal Information. We will obtain your consent, usually via email, prior to posting the testimonial to post your name along with the testimonial. If you have previously provided consent, but later want your testimonial removed, please contact us at privacy@shuttlerock.com.

 

 

FEEDBACK

​

By providing Shuttlerock with Feedback, you hereby grant to Shuttlerock a royalty-free, worldwide, transferable, sublicensable, irrevocable, perpetual license to use any Feedback and/or to incorporate such Feedback into the Shuttlerock Site, or Shuttlerock Platform, or any service or product developed by Shuttlerock. You acknowledge and agree that any Shuttlerock Platform, the Shuttlerock Site, or other product or service created by Shuttlerock incorporating such suggestions, enhancement requests, recommendations or other feedback shall be the sole and exclusive property of Shuttlerock and all such recommendations shall be free from any confidentiality restrictions that might otherwise be imposed upon Shuttlerock pursuant to your written or electronic agreement with Shuttlerock.

 

INFORMATION SECURITY

​

Shuttlerock takes industry-standard precautions to protect Personal Information. When you enter sensitive information (such as a login credentials) on our login forms, we encrypt the transmission of that information using secure socket layer technology (SSL).

 

While the safeguards implemented by Shuttlerock may help prevent or slow unauthorized access, maintain data accuracy, and facilitate the appropriate use of data, no guarantee is or can be made that your information is secure from intrusions and/or unauthorized access by third parties. If you have any questions about the security of the Shuttlerock Site or the Shuttlerock Platform, you can contact us at privacy@shuttlerock.com.

​

​​

COMPLIANCE WITH LAWS AND LAW ENFORCEMENT

​

Shuttlerock cooperates with government and law enforcement officials and private parties to assist with enforcement and compliance with the law. Shuttlerock will disclose any information about you to government or law enforcement officials or private parties as Shuttlerock, in its sole discretion, believes necessary or appropriate to respond to claims and legal processes (including but not limited to legal proceedings and subpoenas), to protect the property and rights of Shuttlerock or a third party, to protect the safety of the public or any person, or to prevent or stop any activity Shuttlerock may consider to be, or to pose a risk of being, illegal, unethical, inappropriate or legally actionable.

​

​

CHANGES TO THIS POLICY

​

Shuttlerock may revise this Privacy Policy from time to time. The most current version of the policy will govern Shuttlerock’s use of Personal Information and will always be on www.shuttlerock.com. If Shuttlerock makes any material change to this policy, Shuttlerock will notify you by email (sent to the e-mail address specified in your account) or by means of a notice on the Shuttlerock Site prior to the change becoming effective. We encourage you to periodically review the Shuttlerock Site for the latest information on our privacy practices. By continuing to access or use the Shuttlerock Site or the Shuttlerock Platform after those changes become effective, you agree to be bound by the revised Privacy Policy.​

​

​

CONTACTING US

If you have any questions about our Privacy Policy, please contact us at privacy@shuttlerock.com, or by mail to:

 

Shuttlerock Limited: Level 1, 47 Bridge Street, Nelson, 7010 New Zealand.