Privacy Policy

Last updated: November 2026

1. About this policy

Information Strategy Group Limited (NZ company number 9472665) (“we”, “us”, “our”) operates Ollie and the website ollie.company. This policy explains how we collect, use, disclose and protect personal information.

We comply with the Privacy Act 2020 (New Zealand) and, where it applies to us, the Privacy Act 1988 (Australia).

2. Information we collect

2.1 Information you give us

When you contact us, for example by email, we collect your name, contact details and anything you choose to tell us.

2.2 Information collected automatically

Our website is hosted by Cloudflare, which processes technical information such as IP addresses and browser details to deliver the website and protect it from misuse. We do not currently use analytics or advertising cookies. If we introduce analytics, we will update this policy before doing so.

2.3 Information we process for customers

When a business uses Ollie, we process information on that business’s behalf to provide the service. Depending on how the business uses Ollie, this may include:

• business and financial records, such as sales, bank transactions, invoices and supplier details;
• employee information, such as names, contact details, rosters, timesheets and pay records;
• messages handled for the business, such as emails, team chat, customer reviews and social media messages; and
• security camera footage relating to specific transactions, such as cancellations and discounts.

3. How we use personal information

We use personal information to:

• respond to enquiries and communicate with you;
• provide, support and improve Ollie;
• keep our website and services secure; and
• meet our legal obligations.

We do not sell personal information or use it for advertising.

4. Customer data

For information we process on behalf of a business that uses Ollie, that business decides what Ollie can access and is responsible for telling its employees and customers how their information is used. We use that information only to provide Ollie to that business and in line with our agreement with it.

If you are an employee or customer of a business that uses Ollie, please contact that business about your information. We will help it respond to your request.

5. Disclosure

We may disclose personal information to:

• service providers that help us operate Ollie, such as hosting, data storage, email and AI processing providers, who may only use it to provide services to us;
• professional advisers, such as lawyers and accountants;
• a buyer or successor if all or part of our business is sold or restructured; and
• government agencies or others where required or permitted by law.

Our main service providers are Cloudflare (website hosting and network security), OpenAI and xAI (AI processing), and Google (email services).

Ollie also connects to services that a customer chooses to link, such as its email, team chat, social media, rostering, payroll, accounting, reservation, point-of-sale and security camera systems. Those services are provided to the customer under their own terms.

6. Overseas storage and processing

Some of our service providers store or process information outside New Zealand. Where we send personal information overseas, we take reasonable steps to ensure it is protected in a way that is comparable to the protections under New Zealand law.

Our AI service providers are based in the United States, and information sent to them for processing is handled there.

7. Security

We take reasonable steps to protect personal information against loss, unauthorised access, use, modification and disclosure, and we limit access to personnel who need it. Passwords and access tokens for connected services are stored encrypted.

8. Retention

We keep personal information only for as long as it is needed for the purposes described in this policy or to meet legal requirements. When a business stops using Ollie, we delete or return its information in line with our agreement with it.

9. Access and correction

You may request access to, or correction of, the personal information we hold about you by contacting us at [email protected].

10. Complaints

If you have a concern about how we have handled your personal information, please contact us first so we can try to resolve it. If you are not satisfied, you may complain to the Office of the Privacy Commissioner (New Zealand) or the Office of the Australian Information Commissioner.

11. Changes to this policy

We may update this policy from time to time. The updated policy will be posted on this page with a new “last updated” date.

12. Contact us

Information Strategy Group Limited
Email: [email protected]