MATTR Privacy Policy
Last Updated: 5 November 2024
See what’s changed | Previous versions
-
Your Privacy Matters
- MATTR is built and operated as a privacy-first company. Enhancement of privacy and trust in digital transactions are fundamental to the software we develop. We aim to support entities participating in the growing eco-system of privacy-preserving verifiable data transactions.
- This Privacy Policy sets out how we collect, use, disclose and protect personal information which we process on our own behalf (that is, as a data controller). It does not cover situations where we process personal information on behalf of another party, or as their agent or data processor (such as where a customer uses our Services or Materials to issue, verify or otherwise manage credentials). In these circumstances the other entity (e.g. the customer issuing, verifying or managing the credentials using our Services or Materials) has its own privacy policy which will apply instead of this Privacy Policy. In the first instance, we recommend that you contact that entity for any questions you have about your personal information (including where you want to access, correct, amend, or request the deletion of, your personal information).
-
Who we are
- When we say “our”, “we”, or “us”, we mean MATTR Limited a New Zealand company, NZBN 9429039661098 (MATTR). Our corporate headquarters are in New Zealand, but we operate globally and have group companies and personnel in a number of other locations. We provide easy-to use Services and Materials to improve trust and privacy in digital interactions.
- We carefully comply with all privacy and data protection laws applicable to our business. The specific privacy laws that apply to our processing of your information will depend on where you are located.
- For clarity, when we refer to “you” or “your” we mean an individual whose personal information is processed by us.
-
Our principles of data protection
- General Supply commitments: Our approach to privacy and data protection is built around
four key principles. They’re at the heart of everything we do relating to personal
information.
- Transparency: We take a human approach to how we process personal information by being open, honest and transparent.
- Security: We champion industry leading approaches to securing the personal information entrusted to us.
- Stewardship: We accept the responsibility that comes with processing personal information.
- Data minimisation: We are continuously working to minimise the personal information that we collect and develop more privacy preserving features.
- General Supply commitments: Our approach to privacy and data protection is built around
four key principles. They’re at the heart of everything we do relating to personal
information.
-
Types of personal data we collect
- When we say “personal information” we mean identifiable information about you. If you can’t be identified (for example, when personal information has been aggregated and anonymised) then this Privacy Policy doesn’t apply.
- We collect personal information when you provide it to us, when you interact with our
products and services, websites and electronic systems, when you attend events and visit our
offices, and when other sources provide it to us, as further described below:
- Directly provided information: We collect personal information that you provide to us directly. For example, if you fill out a form or sign up to our Services on our website, we will collect any information you provide to us in that context and as you use the Services you may input personal information in order to manage and configure your account. You may also provide us personal information if you contact us for support, participate in community forums, join us on social media, take part in training and events or visit our offices. If you don’t want to provide us with such personal information, it may mean that we cannot provide you with certain Services or Materials.
- Automatically collected information when using our website: When using our website, we collect analytics data about how you use and interact with our site, which may include your online device information, such as the IP address and device ID of the device you are using, the domain name from which you are accessing the internet, the operating system and the browser your device uses, any search engine you are using, your browsing behaviour and click activities, date and time you are visiting, location data based on where your browsing session originates, urls of pages you visit, the domain name of pages you visit directly before or after coming to our site, login history, performance results for the website, details of any errors or system crashes/failures (“Usage Data”). We have set out specific information about the cookies we use on our websites below at section 5 (Our website, cookies and similar technologies).
- Automatically collected information when using Services: We collect information about the way you use or interact with our Services and Materials and actions taken via your account, including Usage Data associated with that use. We combine that with other personal information we hold about you (for example, your user and customer accounts with which interactions are linked). In addition, we may collect data about any problems you experience with our websites, applications, Services or Materials, including bug, error, and crash reports, which can include Usage Data such as device information, location, and user data at the time of the bug, error, and/or crash.
- Information collected from third parties: We sometimes receive personal information
about you from third parties. We have summarised some of the ways we might do that below:
- We may receive business contact information (such as name, job title, business email, phone number, and address), social profile (such as LinkedIn) including other details about your organization for sales and marketing purposes, to better inform you about MATTR products and services. Typically, and subject to applicable laws, we might receive this information from: (A) third-party marketing initiatives, such as events where we are a sponsor, or website forms hosted by third parties that may provide content about us; (B) where you consent to having your attendee badge scanned at an event hosted by us or another entity; (C) companies, such as information aggregators and similar entities, from whom we have licensed business contact information; (D) publicly available sources, such as your social media profile, articles or interviews you have previously given; (E) referrals; or (F) resellers and channel partners, including those that offer joint marketing services. In some situations, we may combine such business contact information with other non-personal and personal information we possess or that you have provided to us for sales and marketing purposes.
- We may receive information from third-party platforms for various business purposes such as research and development, organizational credit information, program management, or technical reasons. For example, we may receive credit information about an organization that includes the names of individuals.
- If you are a candidate applying for a job at MATTR, subject to laws applicable in your jurisdiction, we may receive personal information about you from third parties for business purposes, such as through background checks (educational, employment, criminal, and financial information), publicly-available sources (like social media accounts, including LinkedIn for identifying candidates), feedback about your application and from interviews, and other third parties that may provide feedback about your application. MATTR treats references provided as part of a job application as confidential.
-
Our website, cookies and similar technologies
-
A cookie is a small text file that websites can ask your browser to store on your device to enhance your experience and collect and understand Usage Data. You can disable cookies by changing the settings on your browser, by not providing consent for us to use cookies, or by changing your cookie preferences, but this may impact your experience of our website. We summarise some of the cookies we use on our website below.
Pardot
-
We use Pardot as a marketing automation tool, which uses first-party cookies for tracking purposes and third-party cookies for redundancy (e.g., because of differences between how web browsers use cookies). The following cookies are saved by Pardot/Salesforce for 3650 days:
- visitor_id
<accountid>
: Visitor Cookie: The visitor cookie includes the name “visitor_id” plus the unique identifier for MATTR, which is derived from the tracking code on our website. The value stored is the unique ID for the visitor. - pi_opt_in
<accountid>
: Opt-in Cookie: The persistent cookie named “pi_opt_in” is used to track a visitor. The value stored is “true” or “false”. If you do not opt-in to allow cookies to track you, or if you ignore the opt-in banner, the Visitor Cookie is disabled and you will not be tracked when you view our pages, forms, or landing pages, or download files or click on a custom redirect link. In some circumstances, we may track you even if you do not accept the Opt-in Cookie. For example, we may track you through form and landing page submissions and when you send us an email, or open or click on our emails. - Visitor_id
<accountid>
-hash : This cookie is a security measure to make sure that a malicious user can’t fake a being another visitor and access corresponding information. - lpv
<accountid>
: This LPV cookie is set to keep Pardot from tracking multiple page views on a single asset over a 30-minute session. For example, if you reload a landing page several times over a 30-minute period, this cookie keeps each reload from being tracked as a page view. - pardot: A session cookie named ’pardot’ is set in your browser while you’re logged in as a user or when you access a form, landing page, or page with Pardot tracking code. The cookie indicates an active session and isn’t used for tracking.
6Sense
- visitor_id
-
We also use 6Sense to collect Usage Data in connection with business development, sales and marketing. 6Sense may combine this Usage Data with other data it holds in order to: (i) identify the organisation you work for; (ii) provide indications of how likely your organization is to purchase our products or services; and (iii) suggest contact points within your organization and provide us with business contact data in respect of these. Usage Data that has been aggregated or de-identified may be used by 6Sense to maintain, improve or enhance its products and services.
-
The following cookies are used in connection with 6Sense:
- sixSenseUUID. Cookie name: “6suuid”. A third party cookie that contains a unique identifier for the visitor that is managed by 6Sense. It is saved for a period of 2 years and 12 hours.
- visitorUUID. Cookie name: “_gd_svisitor”. A first party cookie containing a unique identifier for the visitor that is specific to the website and will remain unique for the duration of the cookie. It is saved for a period of 2 years and 12 hours.
- sessionUUID. Cookie name: “_gd_session”. A first party cookie containing a unique identifier for the visitor’s session on the website. Used to correlate page views and activities to a single browsing session on the website. It will remain unique for the duration of the cookie. It is saved for 4 hours.
- svisitorUUID. Cookie name: “_gd_svisitor”. A first party cookie which is a long lived unique identifier of this visitor on the website. It is either correlated to the 6uuid or a unique value, and can be changed during the lifetime of this cookie. It is saved for a period of 2 years and 12 hours.
- retargetingUID. Cookie name: “_an_uid”. A first party cookie which is a unique identifier for the purpose of running 6sense Creative Ads. It is saved for a period of 1 week.
- 6Sense Campaign ID. Cookie name: “_6si_cid”. A first party cookie which is a unique identifier for the vistior’s session on the website. It is used to track the account’s activity on the website when the visitor has come to the website through a 6sense ads campaign. It will remain unique for the duration of the cookie.
-
In addition, the following information may be stored in local browser storage in connection with 6Sense:
- 6Sense Company Identification. Name: “_6senseCompanyIdentification” which contains metadata associated to web end-user’s IP/_gd_svisitor cookie;
- 6Sense Time-to-live. Name: “_6SenseTTL”. A value for the period of time that metadata provided by 6Sense (i.e. _6SenseCompanyDetails) should exist on a computer or network before being discarded.
-
You can find out more detailed information on how 6Sense processes personal information and contact it to delete your information or opt out of certain processing here.
Google Ads
-
We use the Google Ads platform to advertise and to understand the performance of our advertising for marketing and sales purposes (ad conversion data). To enable this, if you provide consent, we use cookies which may store information including:
- a unique identifier for you (as a visitor of our website); and
- a particular advertisement click that brought you to our website
- whether you take particular actions after clicking through from an advertisement, such as submitting a sales inquiry.
-
This information is shared with Google for them to provide us with ad conversion data. If you are otherwise identifiable by Google, for example because you are signed into a Google application or service, you may be identifiable to them and us in connection with ad conversion data related to you. You can read more about how Google uses information from websites like us that use Google’s services here.
-
You can opt-out by visiting the Google Ad Setting website here. To learn more about Google’s privacy practices you can read Google’s Privacy Policy and Terms website here.
Preventing bots and spam
-
Our website is protected by the hCaptcha anti-bot service, which checks whether the data entered on our website has been entered by a human or by an automated program. To learn more, you can read hCaptcha’s privacy policy and terms of service.
Preventing bots and spam
-
In addition to Pardot and Google Ads, which is described in the Cookies section above, we’ve made the conscious choice to pay for a privacy-first analytics tool called Matomo. To learn more, you can read about privacy-focused analytics and Matomo’s privacy policy.
-
-
How we use your personal information
- We have summarised below the ways MATTR uses personal information:
- Service delivery: First and foremost, we use your personal information to provide our customer and/or you with Services and Materials and to manage our relationship with you and our customers.
- Communicate with you: We may communicate with you in respect of the following (if you
wish to cease being the point of contact for one of our customers please let us know):
- providing you with information you’ve requested from us (like training or education materials) or other information we need to send to you;
- respond to you if you make an enquiry or apply for a job with us;
- sending you operational or service communications, like changes to our Services, release notifications, incident or security updates, assistance with using our Services or tailored communications based on your activity and interactions with us;
- asking you for feedback or to take part in any research we are conducting (which we may engage a third party to assist with).
- Support: We may provide technical support to customer representatives or individual users of our customers. This may include assisting with the resolution of technical support issues or other issues relating our Services, whether by email, in-app support or otherwise.
- Enhance and improve: We analyse and predict how our existing website, marketing campaigns, Services and Materials are used, develop and test new or improved features, tools, Services or Materials, marketing campaigns or promotions, optimise user experiences and make them more personalised to you or groups of users like you.
- Fraud prevention and system protection: We monitor use of our website, Services and Materials for the purpose of detecting and preventing fraudulent or malicious activity, and to make sure that everyone is using our Services fairly and in accordance with any applicable terms and conditions.
- Business development: We use personal information (including business contact data and Usage Data in respect of our websites) for business development purposes. This may include identifying the organisation you work for when browsing our website, assessing the likelihood that your organisation may purchase from us, identifying business opportunities, building a profile of categories of individuals or organizations likely to be interested in our products, and introducing members of our sales team to you, sending you tailored content, and recording our business development interactions or communications with you and other details we have learned about you in the course of those interactions.
- Marketing: Where we have your consent and/or otherwise in accordance with applicable law, we may use personal information (including contact data, Usage Data in respect of (i) our website and/or (ii) our Services and Materials) to send promotional communications that may be of interest to you and your organization, including by email and by displaying MATTR marketing communications on other organizations’ websites and applications, as well as on third-party platforms like Facebook, X, and Google subject to laws applicable in your jurisdiction. These communications are aimed at encouraging engagement and maximizing the benefits that you and your organization can gain from MATTR’s products and services, including information about new products and features, survey requests, newsletters, and events that we think may be of interest to you and your organization. We may also use personal information to analyse these communication efforts, build target audiences to ensure these communications are more effective and relevant to each recipient. You can opt out of marketing emails at any time, by clicking on the unsubscribe link and/or contacting us at privacy@mattr.global.
- Recruiting and hiring: We process personal information, such as contact details, job applicant, and biographical data, to assess job applications and to evaluate and improve our recruitment system, our application tracking and recruitment activities. We may also: (i) communicate with you regarding your application or opportunities at MATTR that appear over time that we believe may be of interest to you; and/or (ii) send you new hire and employee experience information. We may verify your information, including through confidential reference checks and, to the extent permitted in accordance with applicable law, carry out background checks.
- Comply with legal requirements: We process personal information to comply with applicable laws, regulations or legal processes, demonstrate such compliance, or to exercise, establish or defend our legal rights, respond to legal claims and undertake compliance programmes.
- Other purposes in our legitimate interests: We process personal information for other purposes not expressly set out above where it is within the legitimate interests of our business operations and management, including but not limited to, for operational purposes and workflow automation, business intelligence, regulatory, and audit functions, protecting personal property or safety.
- We have summarised below the ways MATTR uses personal information:
-
Disclosure of your personal information
- We may disclose personal information in the circumstances set out below.
- Intended purpose. We may disclose personal information to third parties where required/requested by you as part of providing the Services and Materials or is otherwise necessary for us to handle the personal information for the purpose it was collected.
- Service providers. We may disclose all categories of personal information to our suppliers and service providers for various business purposes, including, but not limited to, auditing interactions with users, debugging our websites, products and services, security purposes, internal research and gleaning insights through machine learning, short-term uses such as credit verification, payment processing, IT services, quality control and safety, in-person and virtual event management, as well as to perform other services on our behalf. We also use a range of service providers and suppliers who process personal information on our behalf as our agent or as a data processor, including the following: https://learn.mattr.global/docs/terms/data-sub-processors.
- Affiliates and professional advisers. We disclose personal information to our affiliates and subsidiaries for business purposes. For example to our group companies as part of providing the Services or Materials or supporting our back office functions. We will also disclose your personal information to our professional service providers (for example, our auditors, insurance providers, financial service providers, and legal advisors) as needed for us to run our business.
- Advertising and marketing. In some circumstances we share personal information, such as Usage Data and/or contact data, with third-party advertising and marketing providers, to allow us to better reach our customers and prospective customers, and to sell our products and services, to the extent permitted by laws applicable in your jurisdiction. In some circumstances, we may ask you to consent to directly disclosing your personal information with these third parties prior to sharing your personal information, such as via a consent banner on our website.
- Job applications. When you apply for a job at MATTR, we disclose your personal information, including applicant data, biographical information, and other personal information we possess to our affiliate companies for business reasons, such as human resource management and internal reporting; our service providers for business reasons, such as the recruitment platform, to verify references and to manage background checks; and law enforcement or government authorities, or as otherwise necessary to comply with law or as needed for the recruitment and human resources process.
- Law, legal process and fraud prevention. We may disclose personal information:
- as otherwise set out in this Privacy Policy or any other agreements or documentation that apply to our processing of your personal information (including the MATTR Customer Agreement, any applicable Service Terms and the Service Level Agreement);
- to regulators, law enforcement bodies, government agencies, courts or other third parties if required to comply with applicable laws, regulations or legal processes, demonstrate such compliance, or to exercise, establish or defend our legal rights (but we’ll try to notify you about these kinds of disclosures if possible);
- to prevent, detect, investigate or mitigate security concerns, including fraud;
- as required for us to carry out a corporate transaction, such as a merger or sale of assets of all or part of our company (this may include, where you are a customer representative, disclosing your personal information to an actual or potential buyer and its agents and advisors); or
- otherwise with your consent.
- We may disclose personal information in the circumstances set out below.
-
International Transfers of your personal information
- When we do disclose your personal information as set out above, it may be transferred to, and processed in, a country different to where you are located. These countries may have laws that are different to what you are accustomed to. Where this is the case, we put in place appropriate safeguards as required by applicable law to ensure your personal information remains protected.
- We may also transfer your personal information to our group companies in other parts of the world in the context of using it in accordance with this policy (in particular to our corporate headquarters in New Zealand, where many of our personnel and back office functions are located).
- For individuals in the European Economic Area (EEA) or Switzerland this means that your data may be transferred outside of the EEA or Switzerland. For further information, please contact us using the details set out in the “How to contact us” section below.
-
Security
- Security is a priority for us when it comes to your personal information. We maintain an information security programme (including the adoption and enforcement of internal policies and procedures) designed to protect personal information against misuse, identify reasonably foreseeable and internal security risks and minimise security risks. For more information about the security of your personal information, you can contact us.
-
Retention
- The length of time we keep your personal information depends on the type of personal information and whether we have an ongoing business need to retain it (for example, to provide a requested Service to our customer or to comply with applicable legal or tax requirements). We’ll retain personal information only for as long as is necessary.
-
Your rights
- Depending on where you are located and what privacy laws apply, you have a number of rights with respect to our use of your personal information.
- These may include a right to access or correct your personal information, opt out of marketing emails or other services or object to any processing of your personal information. If you are in the European Union, you have additional rights, which we will ensure we comply with.
- You can exercise these rights, and any other rights you may have under applicable data protection and privacy laws, at any time by making a request to us via email to privacy@mattr.global.
- If you’re not happy with how we are collecting, using or disclosing your personal information, please let us know by contacting us. Your requests may be subject to certain conditions or grounds for refusal, as set out under applicable data protection and privacy laws. We will review and investigate your complaint and try to get back to you within a reasonable timeframe.
-
Changes
- We will update this Privacy Policy from time to time. When we do so we will publish the updated version on our website.
-
How to contact us
- We’re always keen to hear from you. If you’re curious about what personal information we hold about you or have a question or feedback for us on this Privacy Policy, please contact our Privacy and Data Protection Officer at privacy@mattr.global.
Previous versions
Privacy policy
- MATTR Privacy Policy - 10 November 2022 (archived)
- MATTR Privacy Policy - 9 December 2021 (archived)
- MATTR Privacy Policy - 25 March 2021 (archived)