This is version 4.0 of our privacy policy, effective 2 September 2026. How we protect the information described here is set out on our security page.
Hi, we’re RedSeed. We are committed to protecting the personal information provided to us, or otherwise collected by us. This privacy policy sets out how we collect and use your personal information, who we may disclose it to, and how you can access or correct it. This privacy policy also explains how we handle personal information that our customers process through our platform.
In this Privacy Policy:
- “RedSeed”, “we” and “us” means RedSeed Limited (New Zealand Company Number 1908611, 1/262 Tuam Street, Christchurch 8011, New Zealand) and RedSeed Training Pty Ltd (ABN 42 607 498 804, 2/6-8 Waterloo St, Narrabeen NSW 2101, Australia).
- “Personal information” means any information about an identifiable individual and may include names, addresses, contact details and communications with us.
- “Platform” means the RedSeed manager-to-learner platform and related services.
- “Privacy Act” means the New Zealand Privacy Act 2020.
Personal information we handle
The personal information we collect and use for our own purposes includes:
- identity and contact details, such as your name and email address;
- account information, such as your user profile, login and authentication information and settings;
- technical and usage information, such as your IP address, device and browser information, login information and information about how you use our website and Platform;
- billing and transaction information, such as subscription details, invoices, payment status and transaction identifiers;
- information you provide when you contact us for support or provide feedback;
- recruitment information, such as information contained in your resume, application, cover letter and interview notes, if you apply for a role with RedSeed; and
- any other personal information that you provide to us or authorise us to collect.
We also process personal information on behalf of your employer, training provider or other organisation that provides your access to our Platform (referred to here as “our customer”).
Our customers may use our Platform and services to collect, store or otherwise process personal information about you. Where we process personal information on behalf of our customers, we use it only to provide the services requested by that customer and not for our own purposes. Our customer decides what personal information is collected through the Platform and how it is used. Our customer is responsible for informing you as to how it collects and uses personal information through the Platform and for meeting any notification and consent requirements relating to any such collection.
The personal information we process on behalf of our customers may include:
- account and organisational information, such as your name, email address, role, location and information about your organisation or team;
- learning and assessment information, such as your training activity, answers, assessment results, course progress and survey responses;
- coaching and meeting information, such as coaching feedback, meeting agendas, notes and action items and, where enabled, meeting recordings and transcripts; and
- calendar and scheduling information, where a connected calendar is used to arrange coaching meetings.
How we collect personal information
We collect personal information in a number of ways, including:
- directly from you, when you create or update your account, contact us for support, provide feedback, or otherwise provide information to us;
- automatically, when you access or use our website or Platform. This may include technical and usage information about your device, browser, IP address and how you interact with our website and Platform. We may collect this information using cookies and similar technologies;
- from our customers and other people using the Platform, for example when your employer or training administrator creates your account and enrols you in training, or when a manager or coach records feedback, creates coaching notes, meeting agendas or action items about you. When a coaching meeting is recorded, we may also collect personal information about people who participate in, or are referred to during, the meeting;
- from third parties such as authentication and security service providers, and from calendar or other connected services where you or your coach connect them to the Platform.
You are not generally required by law to provide personal information to us. However, if you do not provide information we need to create or manage your account or provide a particular service or Platform feature, you may not be able to use that part of the Platform.
Children
Our website and Platform are primarily intended for use in a business and workplace context, and are not directed at anyone under the age of 18. We do not knowingly collect personal information about anyone under the age of 18.
How we use personal information
We use personal information that we collect and use for our own purposes to:
- operate, maintain and secure our website and Platform;
- create and manage accounts and verify your identity when you sign in;
- administer subscriptions, billing and transactions;
- communicate with you about your account, our services, security matters and changes to the Platform;
- respond to support requests, feedback and enquiries;
- detect and prevent fraud, misuse, security incidents and breaches of our terms;
- understand how our website and Platform are used and improve functionality and services;
- manage our legal, regulatory and business affairs;
- process job applications; and
- send you marketing communications where you have agreed to receive them or as otherwise permitted by law.
When we process personal information for our customers, this may include:
- creating and administering user accounts, training enrolments and access to the Platform;
- delivering training and assessments and recording progress and results;
- providing coaching features, including meeting agendas, notes, feedback and action items;
- scheduling coaching meetings and connecting them to calendars;
- recording and transcribing coaching meetings, where this feature is enabled;
- generating AI-assisted summaries, recommendations, coaching feedback and other outputs, where these features are enabled;
- providing reports and other Platform functionality requested by the customer; and
- providing customer support, troubleshooting, security and other systems necessary to operate the Platform for that customer.
Where AI-assisted features of the Platform are enabled, personal information may be provided to third-party AI service providers to generate the outputs requested. We require those providers to process that information only for the purposes of providing the relevant services to RedSeed and our customers, and not to use it to train general-purpose AI models.
Lawful bases for processing
Where the EU General Data Protection Regulation (EU GDPR) or UK General Data Protection Regulation (UK GDPR) applies to personal information we collect and use for our own purposes, we rely on one or more of the following lawful bases:
- Contract – where processing is necessary to perform our contractual obligations to you;
- Legitimate interests – where processing is necessary for our legitimate interests or those of another person, including responding to support requests, maintaining and securing our software, systems and services, providing software updates and preventing fraud, misuse or other unlawful activity, provided those interests are not overridden by your rights and interests;
- Legal obligations – where processing is necessary for us to comply with a legal or regulatory obligation; and
- Consent – where we ask for your consent to process personal information for a particular purpose. Where we rely on consent, you may withdraw it at any time, although this will not affect processing carried out before you withdraw your consent.
Who we share personal information with
We may share your personal information with, or allow it to be processed by:
- companies in the RedSeed group in New Zealand and Australia;
- our customer where that customer provides your access to our Platform;
- service providers that process personal information for us and help us provide, operate and support our Platform and services, including providers of hosting and storage, authentication and security, calendar, transcription and AI services, email delivery, analytics, customer support tools and recruitment services;
- our professional advisers, including lawyers, accountants and auditors;
- regulators, government agencies, courts and law enforcement authorities where disclosure is required or authorised by law;
- a buyer or prospective buyer of all or any part of our business or assets and their professional advisers; and
- other third parties where reasonably necessary to establish, exercise or defend our legal rights.
Overseas processing and disclosure of personal information
Your personal information is processed in New Zealand and Australia, and we also use service providers in the United States and the United Kingdom.
Where an overseas service provider processes personal information only on our behalf and does not use or disclose it for its own purposes, RedSeed remains responsible for that information. We assess the privacy and security arrangements of the service providers we use and require appropriate contractual, confidentiality and security protections.
A current list of third-party service providers that process personal information, including their purpose and the countries in which they process information, is available from your account team or from us on request.
Where we disclose personal information to an overseas recipient for its own purposes, we only do so where permitted by applicable privacy laws and, where required, take reasonable steps to satisfy ourselves that the recipient is subject to privacy protections that are comparable to those under New Zealand law.
Where UK or EU data protection laws apply, we use approved transfer mechanisms where required, such as an adequacy decision or appropriate contractual safeguards.
Security of personal information
We take reasonable technical and organisational steps to protect personal information against loss, unauthorised access, use, modification or disclosure. These measures include encryption, access controls, tenant isolation, two-factor authentication and staff-access logging.
Access to personal information held by us is restricted to persons who require access for legitimate business purposes.
While we take reasonable steps to protect personal information, no method of transmission or storage is completely secure.
If a privacy breach occurs or is suspected, we will assess and respond to it in accordance with applicable privacy laws, including any requirements to notify affected individuals or relevant privacy regulators. Where the affected information is processed on behalf of our customer, we will also notify that customer where required under our agreement with them.
Retention of personal information
We will retain your personal information only for as long as reasonably required for the purposes for which we may lawfully use that information.
In particular:
- training and coaching records are retained for as long as our customer reasonably requires for its own business purposes;
- support correspondence may be retained for up to 12 months after the relevant issue has been raised or resolved, where reasonably required for support, business records or dispute resolution purposes;
- a limited record of subscription or transaction events may be retained for up to 7 years where required for tax, accounting or other legal record-keeping purposes; and
- we may retain personal information for as long as necessary to comply with legal obligations, maintain security, prevent fraud, establish or defend legal claims or resolve disputes.
In accordance with our retention practices, your personal information will be deleted or anonymised when we no longer need it.
Your privacy rights
Under the Privacy Act you have the right to ask us whether we hold personal information about you, to request access to that information and to ask us to correct it.
If your request relates to personal information that we process on behalf of our customer, we may refer your request to that customer, as they determine how that information is used.
We may require you to verify your identity and provide enough information to us to identify the information you are requesting.
You can make an access or correction request or raise any concerns about our handling of your personal information by emailing privacy@redseed.com.
We will respond to access and correction requests as required by the Privacy Act. If you are not satisfied with our handling of your request or another privacy concern, you may also make a complaint to the New Zealand Office of the Privacy Commissioner on 0800 803 909.
EU and UK privacy rights
Where the EU GDPR or UK GDPR applies and we determine how and why your personal information is processed, you may have additional rights, subject to applicable law, including the right to:
- request access to the personal information we hold about you;
- request correction of inaccurate or incomplete personal information;
- request deletion of your personal information in certain circumstances;
- request that we restrict the processing of your personal information in certain circumstances;
- object to our processing of your personal information based on our legitimate interests in certain circumstances, and object at any time to the use of your personal information for direct marketing;
- receive personal information you have provided to us in a structured, commonly used and machine-readable format, and request that it be transferred to another organisation where the right to data portability applies;
- withdraw consent at any time where we rely on your consent to process personal information; and
- exercise any rights that apply to decisions made solely by automated means that have legal or similarly significant effects on you, including, where applicable, the right to contest the decision and request human intervention.
You may exercise these rights by contacting us at privacy@redseed.com.
Some of these rights are subject to exceptions and will not apply in every circumstance.
If you are located in the European Economic Area, you have the right to lodge a complaint with the data protection supervisory authority in the country where you live or work, or where you consider an infringement has occurred.
If you are located in the United Kingdom, you can raise a complaint with us and also lodge a complaint with the UK Information Commissioner’s Office.
Cookies and analytics
We use cookies and similar technologies when you use our website and Platform. These technologies may collect information such as your IP address, device and browser information, pages viewed, how you reached our website, and information about how you use our website.
We use these technologies to:
- operate and secure our website and Platform, including keeping you signed in and preventing misuse;
- remember your settings and preferences;
- understand how our website and Platform are used and improve performance; and
- measure our marketing and show RedSeed advertising on other websites based on your previous interactions with us.
Some of these technologies are provided by third parties, such as analytics and advertising providers. Where required by law, we obtain your consent before using cookies or similar technologies. You can change or withdraw your choices at any time through our cookie settings. You can also control cookies through your browser settings, although disabling certain cookies may affect how our website or Platform works.
You can opt out of marketing emails at any time by using the unsubscribe link in the relevant communication.
Changes to this privacy policy
We may update this Privacy Policy from time to time to reflect changes to our products or services, our information handling practices, or applicable law.
We will publish the updated Privacy Policy on our website with a revised effective date. Where a change materially affects how we collect, use or disclose your personal information, we will take reasonable steps to notify you of that change.
How to contact us
If you have a query about this Privacy Policy, wish to exercise a privacy right or have a concern about how we handle personal information, please contact us at:
- Email: privacy@redseed.com
- Post: Privacy Officer, RedSeed Limited, 1/262 Tuam Street, Christchurch 8011, New Zealand
This Privacy Policy was last updated on 2 September 2026 (v4.0).