Login
  • Home
  • Privacy Policy

Privacy Policy

enviPath is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you use the enviPath platform and related services (together, the "Platform").

1. Who We Are (Data Controller)

enviPath is operated by enviPath Limited, a legal entity established in New Zealand, with its principal place of business in Auckland, New Zealand ("enviPath", "we", "us", or "our").

For the purposes of applicable data protection laws, enviPath Limited is the data controller responsible for personal information processed through the Platform.

2. Information We Collect

2.1 Personal Information You Provide

We may collect personal information that you voluntarily provide when you:

  • Register for an account
  • Contact our support team
  • Participate in community forums or other community features (where available)

This may include your name, email address, institution affiliation, and research interests (if provided).

2.2 Usage and Technical Data

We automatically collect certain information when you visit, use, or navigate the Platform. This may include:

  • IP address, browser type, and device/operating system information
  • Pages or endpoints accessed and time spent
  • Referring/exit pages or URLs (where available)
  • Prediction queries, submitted data, and generated results, including associated metadata, for the purposes of platform functionality, performance monitoring, and research analysis
  • Log and diagnostic information (such as timestamps and error logs)

2.3 Cookies and Similar Technologies

We use cookies and similar technologies for essential functionality and, where applicable, analytics. For more details, see our Cookie Policy.

3. How We Use Your Information

We collect and use personal information only where necessary for legitimate and lawful purposes connected with operation and improvement of the Platform. These purposes include:

  • Providing, operating, and maintaining the Platform
  • Creating and administering user accounts, authentication, and access control
  • Responding to enquiries and providing support
  • Monitoring usage patterns and improving Platform functionality, performance, and usability
  • Ensuring Platform security, preventing misuse, and investigating suspected breaches
  • Conducting scientific research and statistical analysis using anonymised or aggregated data only, such that individuals are not identifiable in published outputs
  • Complying with legal obligations and responding to lawful requests

4. Legal Bases for Processing (EEA, UK, and Swiss Users)

Where the GDPR (or similar laws) applies, we process personal data on the following legal bases:

  • Performance of a contract (to provide access to the Platform and its services)
  • Legitimate interests (such as operating the Platform, improving functionality, conducting anonymised research, ensuring security, and maintaining service reliability)
  • Compliance with legal obligations (where applicable)
  • Consent (where required, for example for non-essential cookies)

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

5. Data Sharing and Disclosure

We do not sell personal information. We only share personal information in the following limited circumstances:

  • Service Providers: With trusted third-party providers who process data on our behalf for hosting, authentication, analytics, or technical support, subject to confidentiality and data protection obligations
  • Academic and Scientific Research: Using anonymised or aggregated data only, such that individuals cannot be identified
  • Legal and Regulatory Requirements: Where disclosure is required by law, or necessary to protect our legal rights or the rights and safety of others
  • Public Contributions: Content or data that you explicitly designate as public may be accessible to other users and the public (depending on Platform functionality)

We do not authorise third parties to use personal information for their own independent purposes.

6. International Data Transfers

The Platform is operated from New Zealand. Personal information may be processed or stored in New Zealand and other jurisdictions where we or our service providers operate.

New Zealand is recognised by the European Commission as providing an adequate level of protection for personal data. Where personal information is transferred to jurisdictions outside the European Economic Area, we take reasonable steps to ensure appropriate safeguards are in place.

7. Data Retention

We retain personal information only for as long as reasonably necessary to fulfil the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

  • Account information: retained for the duration of the user account
  • Usage and log data: retained for up to [X] months
  • Backup data: retained for up to [Y] months

You may request deletion of your account and associated personal information at any time, subject to legal or technical retention requirements (for example, security logs and backups retained for limited periods).

8. Data Security

We implement appropriate technical and organisational measures designed to protect personal information from loss, unauthorised access, misuse, alteration, or disclosure. However, no electronic transmission or storage method is 100% secure, and we cannot guarantee absolute security.

9. Your Rights and Choices

Depending on your location, you may have rights relating to your personal information, including:

  • Request access to personal information we hold about you
  • Request correction of inaccurate or incomplete information
  • Request deletion of personal information (where applicable)
  • Object to or restrict certain processing (where applicable)
  • Request data portability (where applicable)

New Zealand users have rights under the Privacy Act 2020 to request access to, and correction of, personal information.

To exercise your rights, please contact us using the details in the "Contact Us" section below. We may need to verify your identity before responding.

10. Third-Party Services

The Platform may integrate or link to third-party services (for example, community forums such as Discourse). Third-party services operate independently and have their own privacy practices. We encourage you to review their policies.

11. Children’s Privacy

The Platform is not intended for users under the age of 16. We do not knowingly collect personal information from children. If you believe that we have collected personal information from a child, please contact us so we can take appropriate steps.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and update the "Last updated" date. Changes take effect when posted.

13. Contact Us

For questions, requests, or concerns about this Privacy Policy or our handling of personal information, please contact us:

version: 1, Last updated: January 2026