DairySmart Privacy Policy

At DairySmart, protecting your personal data is a responsibility we take seriously. Our products and services are designed to help you monitor, analyse, and improve important aspects of agricultural and dairy operations, animal health, productivity, and sustainability. We recognise that the data you share with us may be sensitive and business‑critical, and we believe you should remain in control of it at all times.

This Privacy Policy (the “Policy”) explains how DairySmart collects, uses, and protects personal data and operational data. It is intended to help you understand your rights and choices and to support transparency and trust in your use of DairySmart’s services. Please review this Policy carefully.

  1. About This Privacy Policy

This Policy applies to the processing of personal data by DairySmart and its affiliates (collectively, “DairySmart,” “we,” “us,” or “our”) when you:

  • Visit our websites or digital properties (the “Sites”)
  • Use DairySmart applications, platforms, or dashboards
  • Use DairySmart hardware, sensors, or AI‑powered services
  • Interact with us through support, research, or marketing communications

Collectively, these are referred to as the “Services.”

III. Why Does DairySmart Process Your Personal Data?

We collect and process personal data and related information for specific, legitimate purposes. Below we explain the main categories of processing purposes, our legal bases, and the types of data involved.

  1. Device & Application Users
  2. Processing Purposes

When you use DairySmart Services, we may process personal data for the following purposes:

  • To Provide DairySmart Services
    To operate, maintain, and deliver our Services, including dashboards, analytics, AI insights, alerts, and reporting related to dairy operations, livestock health, and productivity.
  • To Provide Customer Support
    To respond to inquiries, troubleshoot issues, manage accounts, and communicate with users who contact our support teams or virtual assistants.
  • To Protect Privacy and Security
    To safeguard your data, prevent fraud or misuse, and apply privacy‑enhancing technologies and security measures.
  • To Improve Our Services
    To understand how our Services are used, enhance functionality, develop new features, and improve user experience. Where feasible, we use aggregated or pseudonymised data.
  • To Perform Research and Analysis
    To analyse disease trends, pathogen prevalence, and mastitis trends in dairy operations, and to improve the insights delivered by our AI models.
  • To Market Services
    To provide marketing communications, promotions, or advertisements about DairySmart and partner offerings. You may opt out of direct marketing at any time.
  • To Enable Third‑Party Integrations
    To integrate with third‑party platforms or services (such as farm management software or analytics tools) when you provide permission.
  • To Comply with Legal Obligations
    To meet legal, regulatory, accounting, or tax requirements, and to respond to lawful requests from authorities when required by law.
  1. Legal Basis for Processing

Where required by applicable data protection laws (including GDPR), DairySmart relies on the following legal bases for processing personal data:

  • Contract – Processing necessary to provide Services under our agreement with you.
  • Consent – Processing sensitive or optional data when you have provided explicit consent.
  • Legitimate Interest – Processing necessary for service improvement, customer support, marketing, and security, balanced against your privacy rights.
  • Legal Obligation – Processing required to comply with applicable laws and regulations.
  1. Processed Data and Data Sources
  2. Data Sources

In most cases, we collect data directly from you when you:

  • Register for an account
  • Use DairySmart applications or hardware
  • Enter information into dashboards or forms
  • Communicate with us

We may also process data generated from your use of the Services or rely on trusted third‑party processors (such as cloud service providers) acting on our behalf.

  1. Categories of Data We Process

Depending on how you use the Services, we may process the following categories of data:

  • Contact Information – such as name, email address, phone number, or business address
  • User and Account Information – such as user ID, role, organisation details, and preferences
  • Device Information – such as IP address, device identifiers, and approximate location
  • User‑Provided Operational Data – including notes, tags, comments, feedback, and contextual inputs
  • Measured Data – such as milk culture results, environmental metrics, livestock details, or operational performance indicators
  • Calculated and Derived Data – including analytics, trends, predictions, alerts, and AI‑generated insights based on collected data

Some data may be considered sensitive or confidential under applicable law or business practices. We process such data only with appropriate safeguards and, where required, your consent.

  1. Location Data

If you enable location‑based features, DairySmart may process approximate or precise location data derived from GPS, network, or Wi‑Fi information. Location data is processed only with your consent and can be disabled at any time through your device or application settings. Disabling location access may limit certain features.

VII. Data Sharing and Third Parties

We do not sell personal data. We may share data with:

  • Trusted service providers acting on our behalf
  • Integration partners when you authorise data sharing
  • Authorities or legal entities when required by law

All third parties are required to protect your data and use it only for permitted purposes.

VIII. Your Rights

Depending on your location, you may have the right to:

  • Access your personal data
  • Correct inaccurate or incomplete data
  • Request deletion of your data
  • Restrict or object to processing
  • Withdraw consent at any time
  • Request data portability

Requests can be submitted through DairySmart support channels.

  1. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes described in this Policy, comply with legal obligations, or resolve disputes.

  1. International Data Transfers and Legal Disclosures

DairySmart operates globally, and your personal data may be processed on servers located outside of your country of residence. Regardless of where processing occurs, DairySmart applies the safeguards described in this Privacy Policy and complies with applicable cross-border data transfer laws.

Where required, DairySmart relies on appropriate legal mechanisms for international transfers, including contractual protections and other lawful transfer frameworks. We may be required to disclose personal data in response to lawful requests by public authorities, including for national security or law enforcement purposes.

  1. Personal Data Disclosures

We may disclose personal data in limited circumstances, including:

  • With your explicit consent;
  • When reasonably necessary for legitimate business interests, such as a merger, acquisition, financing, or sale of assets;
  • To protect DairySmart’s legal rights, property, or safety;
  • To comply with applicable laws, regulations, court orders, or lawful governmental requests.

Where legally permissible, DairySmart will seek to notify affected users of such disclosures.

XII. Safeguarding Your Data

DairySmart uses appropriate technical and organisational safeguards to protect personal data, including access controls, encryption, monitoring, staff training, and regular security testing. Access to sensitive data is limited to authorised personnel with a legitimate business need.

Despite our efforts, no system can be guaranteed to be 100% secure. We encourage users to take steps to protect their own information, including using up-to-date software and safeguarding account credentials.

XIII. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including providing Services, complying with legal obligations, resolving disputes, and enforcing agreements. Retention periods vary depending on the nature of the data and applicable legal requirements.

You may request deletion of your account or personal data, subject to legal and contractual limitations.

XIV. Cookies and Similar Technologies

DairySmart uses cookies and similar technologies to operate and improve our Sites and Services, analyse usage, personalise content, and support marketing activities. Cookies may be first-party or third-party. You can manage cookie preferences through your browser settings or applicable consent tools.

  1. Your Rights as a Data Subject

Depending on your location and applicable law, you may have rights including:

  • Right to access personal data
  • Right to rectification of inaccurate data
  • Right to erasure (deletion)
  • Right to data portability
  • Right to object to or restrict processing
  • Right to withdraw consent, where processing is based on consent

To exercise your rights, please contact admin@dairysmart.co.nz. You may also have the right to lodge a complaint with a relevant supervisory authority.

XVI. Governing Law, Jurisdiction, and New Zealand Compliance

DairySmart  is based in New Zealand and is subject to the New Zealand Privacy Act 2020. We are committed to complying with the Information Privacy Principles (IPPs) set out in that Act.

This Privacy Policy, and any disputes arising from or relating to it, shall be governed by and construed in accordance with the laws of New Zealand, without regard to conflict of law principles, except where otherwise required by applicable data protection laws.

Where personal data is collected from or relates to individuals outside New Zealand, DairySmart also complies with applicable international privacy and data protection laws, including but not limited to:

  • The EU General Data Protection Regulation (GDPR)
  • Other comparable privacy frameworks, where required

When transferring personal data outside New Zealand, we take reasonable steps to ensure that overseas recipients protect the information in a way that provides comparable safeguards to those required under the New Zealand Privacy Act 2020, including through contractual protections and other lawful transfer mechanisms.

XVII. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will notify users through our Services, our website, or other appropriate means. The “Last Updated” date at the top of this Policy indicates when it was most recently revised.

XVIII. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact:

DairySmart
Email: admin@dairysmart.co.nz