Thank you for your interest in how we handle your personal information.
At Cubro Limited ("Cubro"), we're committed to providing you with the highest level of protection for your personal information and privacy. As a New Zealand company, we strive to be compliant with some of the most stringent privacy data protection laws in the world.
By providing your personal information to us, you acknowledge that you have read and understood this Privacy Policy ("Policy"). We may update this Policy from time to time to reflect changes in legal requirements, technology, or our operations. The latest version will be available on our website.
This Policy explains how we collect, use, and share your personal information and how we keep it safe. This includes the hardware and software that we use, and how we use cookies and other analytics tools through our websites.
We are committed to fulfilling our obligations under New Zealand privacy laws. We comply with those laws and this Policy at all times. We only share personal information if you have authorised us to do so or if we are otherwise authorised or required to do so (e.g. by law).
We take the protection of your privacy seriously. We have safeguards against malware, viruses, and other digital threats to our systems and the protection of your personal information is very important to us.
We may not be able to provide you with the full benefit of our products or services if you do not provide the personal information that we require.
Cubro is responsible for the protection of your personal information. If you wish to contact us regarding your personal information, you can do so in the following ways:
Anonymisation means the process of modifying personal information so that the identification of an individual is no longer possible.
Analytical tools are programs which analyse user behaviour.
Cookies are small text files that are stored on your computer or in your browser.
Devices are things like smartphones, tablets, PCs which are used to access apps or programs and information services.
IP address is an address within the computer network based on the Internet Protocol (IP). This address is assigned to the device and thus allows the device to be addressed and so accessed.
Personal information is information that relates to an identifiable natural, living person.
Pseudonymisation is the modification of personal information so that it is no longer possible to allocate it to a certain individual without additional supplementary information.
Web console is an Internet based software solution for managing your account or your settings.
We collect personal information in a variety of ways, including directly from you, through your use of our services, and indirectly from third parties.
Generally, the types of personal information that we collect from or about you depends on the circumstances in which the information is collected. Most of the data is collected in a pseudonymised or anonymised form.
We have described below examples of the types of personal information which may be collected, however this is not an exhaustive list.
Information when you visit our websites
When you visit one of our websites or access one of our online services, we may process information on the region you are visiting us from, information on your device, its operating system and browser, your user behaviour on our site during the current session, and whether you have visited us before. For this, we use cookies.
Registration information
To activate or use some of our products or services, you need to create an account. During the process of setting up your account, we will ask you for certain personal information such as your name, email address, possibly supplemented by additional information, such as your telephone number and address details.
Information from your communications with us
We use a Customer Relationship Management (CRM) system to manage:
This may include records of your engagement with us and any supporting information required to assist you.
Employment information
We may collect information about applicants for employment with Cubro to assess those applications for employment. We may collect information about Cubro employees and contractors relevant to their employment or contract with Cubro to fulfil Cubro’s responsibilities as an employer and contractor.
Usage information
When using our products and services, we collect and process personal information at various points. The respective collection and processing of personal information depends on the product used and the associated services and product features. In some cases, you may deliberately submit or provide us with files for verification. If these contain personal information, processing is carried out in accordance with the guidelines set out in this Policy. For example, with
Cubro Online Ordering, we provide a web console which you can use to manage your account and our services that you use. For this, we collect and process personal information at various points to help us optimise the services you use.
Payment information
Cubro offers secure online payment options via a third-party payment provider, Stripe New Zealand Limited ("Stripe"). Stripe's registered office is Quigg Partners, 36 Brandon Street, Wellington 6011. Stripe may process information overseas and applies its own privacy and security standards, including fraud detection and prevention measures. We recommend reviewing Stripe’s Privacy Policy.
When you make a payment using a Stripe-hosted payment link, your payment card details are processed directly by Stripe. Payment links provided to you are intended for your use only and should not be shared with others.
Stripe may collect the following personal information from you in order to process transactions:
Stripe may then transfer the personal information it collects from you to us.
Digital Integration
With our digital integration offering for operating theatres, you may authorise Cubro to have remote access to the system. This remote access is for the sole purpose of providing upgrades, updates, maintenance and troubleshooting operational issues.
We use digital integration data to enable the integrated features, improve the functionality and user experience of our services and provide relevant support for integrated features.
We maintain appropriate security measures to protect digital integration data. We also require our third-party integration partners to adhere to strict data security standards.
Cubro will not save any patient personal information (e.g. patient records, case information, or operating notes).
Processing purposes
We may process your personal information for the following purposes:
Where you have consented for us to
Your consent is required for the processing of certain personal information. In these circumstances, we will inform you expressly and get your consent.
Storage and deletion periods
Any personal information that falls within the scope of this Policy is collected and held by us or trusted third parties we may engage to store information on our behalf. We will take reasonable steps to protect your personal information from misuse, interference, corruption, loss or unauthorised access, modification or disclosure, including through physical, electronic and procedural safeguards.
We will only keep your personal information for as long as it is required for the purposes for which it was collected. If personal information is no longer be required for the purpose it was collected, it will be anonymised and/or deleted in accordance with legal regulation.
Should you wish to have your personal information deleted, please note that due to technical restrictions it may take up to 180 days to permanently delete your personal information from the live systems. It is not possible to restore your personal information once it has been deleted.
We use cookies and similar technologies to:
Where required, we will obtain your consent before using non-essential cookies, such as those used for analytics or marketing purposes. You may withdraw or modify your consent at any time through your browser settings or any cookie preferences tool made available on our website.
You can control or disable cookies through your browser settings, though some functionality may be affected.
In addition to our own systems, we also use the following third-party tools for marketing purposes and to make your visit to our websites or the use of our products/services more user-friendly.
Google Analytics 360
We use Google Analytics 360, a web analysis service from Google (Google Inc.). Google Analytics uses cookies that enable us to analyse your use of our websites.
The data generated by cookies about your use of our website and may involve the transfer of personal information to servers in the USA. Prior to this, however, Google will shorten your IP address if it originates in a member state of the European Union or in other signatory states to the Agreement on the European Economic Area and thus make it anonymous (Google's anonymise IP process). The entire IP address is transferred to a Google server in the USA and saved there only in exceptional cases.
Google uses this data to evaluate your use of the website, to generate reports on website activities for Cubro, and to provide other services associated with website and internet use. Google can transfer this information to third parties, where appropriate, if legally mandated or if Google contracts with third parties to process such data. Google will not associate your IP address with other Google data.
You still have the option to prevent Google from collecting data generated by cookies and relating to your use of the website (further information on Google Analytics can be found here.)
Adobe Analytics (Omniture)
We use Adobe Analytics by Adobe (Adobe Systems, Inc.). The program uses cookies tracking pixels, which are either retrieved from your device or stored there and enable an analysis of your use of our website and online services. This process collects and saves data based on pseudonyms. These profiles are used to analyse visitor behaviour on our services and to adapt our offerings and design based on user needs.
Without your express consent, the pseudonymised usage profiles will not be merged with other personal information that we may have received from you. Adobe does not process your IP address and only saves it in a shortened form. You may also opt-out of the collection and storage of your information by Adobe here.
For more information about Adobe Systems' Privacy Policy, click here.
Hotjar
We use Hotjar, a web analytics service provided by Hotjar. Hotjar uses cookies to process information including standard internet log information and details of visitors' behavioural patterns upon visiting our site. This is done to provide you with a better experience, and to facilitate the use of certain functions. Cookies are small data files transferred onto computers or devices by sites for record-keeping purposes and to enhance functionality on our site. Hotjar stores this information in a pseudonymised user profile. Hotjar does not process this information to identify individual users or to match it with further data on an individual user.
For more information about the cookies we make use of in conjunction with Hotjar, please visit Cookie information. You may opt-out of the collection and storage of your information by Hotjar at any time by following the instructions under the following link: Opt-out here
For more information about the software used and Hotjar’s Privacy Policy, just go here.
Remarketing
We may use remarketing services to advertise on third party websites to you after you visit our website. We manage this through a variety of remarketing services and ad exchanges which use cookies to inform, optimise and serve ads based on your past visits to our website.
For example, we use Google AdWords, provided by Google Inc, and Facebook Custom Audiences, Facebook Dynamic Ads and Facebook Pixel, provided by Facebook Inc, to deliver targeted advertisements to individuals who visit our website.
The remarketing services we use offer you the opportunity to opt out of their tracking systems. You can read about the information they collect and how to opt through each remarketing service’s own privacy policy. Additionally, you can exercise your choice to opt out through the following link: https://optout.aboutads.info/?c=2&lang=EN.
We respect your privacy and will take all reasonable steps to keep your personal information confidential. However, we may disclose your personal information if required in connection with the purposes described in this Policy. This may include disclosure where:
Personal information that we collect is either held by us on our systems and storage facilities or is held by third-parties on our behalf. Some information we hold will be stored in secure cloud-based databases on our behalf by third parties based overseas including payment processors (such as Stripe). The use of these services, and the transfer of information overseas (if applicable) will not relieve us of our obligations under the Privacy Act 2020 and this Policy.
We may share personal information with the following recipients or categories of recipients for the aforementioned reasons:
We may share anonymised and aggregated information (which is not capable of identifying you) with our contractors, affiliates, business partners and other third parties.
In providing and managing our customer products, we also contract with other businesses to provide services to us and we may disclose personal information to them to enable them to provide those services.
We require these service providers to adhere to our confidentiality requirements and to the requirements of the Privacy Act 2020.
We use a global IT infrastructure including computers, cloud-based servers, networks, and software solutions of international companies to provide our services. Some of our service providers, including payment processors such as Stripe, may store or process personal information overseas. Stripe and its partners may process personal information in multiple jurisdictions, including the United States and other countries where privacy and data protection laws offer a different level of protection from those in New Zealand.
In certain specific cases your personal information may be forwarded to third countries based on your express consent. In these countries, the same level of privacy and data protection is not always governed by and established in law as in New Zealand.
For this reason, we have taken a number of measures in accordance with relevant standards and legislation to ensure the highest possible protection of your personal information. These include:
When we disclose personal information to third parties based offshore, we will take reasonable steps to ensure that the recipient is subject to privacy protections which provide comparable safeguards to the Privacy Act 2020, or otherwise obtain your express authorisation prior to the disclosure.
Browsers used to access our products offer you a number of options and settings. These are usually explained to you when you first install or use them. It is quite possible that by changing the settings, certain Cubro services may no longer function properly.
If you have given us your consent to process certain data, e.g. to receive a newsletter or third-party offers, you have the right to revoke this consent - also in part - at any time. You can do so by contacting us directly.
In the case of direct advertising, you have a general right to object without having to provide information on the particular situation. Please inform us of your objection in writing (e.g. email) or by telephone.
You have various rights in connection with your personal information, subject to possible legal restrictions, which include rights to access and correct your information.
Right to access information
If you would like to know what personal information we hold on you, please contact us directly. Following your request, we will send you information about the data we have via email. The provision of this information may take some time, depending on the scope of your request. If we are unable to provide access, reasons for the inability to access the information will be provided to you. Where reasonable, consideration can be given to the use of an intermediary who would allow sufficient access to mutually satisfy our needs.
Right to correct your information
You may request correction of your personal information if it is inaccurate, incomplete, or out of date. We will take all reasonable steps to ensure that your information is corrected in accordance with applicable law.
Lodging a complaint
If you have a concern about how we have handled your personal information, we encourage you to contact us first so we can attempt to resolve the issue.
If you are dissatisfied with our efforts in connection with privacy and data protection, you have the right to lodge a complaint with the New Zealand Privacy Commissioner. For more information, visit the Privacy Commissioner’s website (click here), or call 0800 803 909.
We have put in place safeguards to ensure that we meet the requirements of privacy legislation to protect your personal information. These are continuously checked and, if necessary, adapted. The objective is to protect your data against accidental or intentional manipulation, partial or total loss, destruction, or unauthorised knowledge or access by third-parties.
To transfer data between our websites, our applications and backend systems, communication is encrypted using the latest SSL (Secure Socket Layer) procedure.
We protect the systems and processing by a series of technical and organisational measures. These include data encryption, pseudonymisation and anonymisation, logical and physical access restriction and control, firewalls and recovery systems, and integrity testing.
Our employees are regularly trained in the sensitive handling of personal information and are obliged to observe data secrecy in accordance with legal requirements.
We will only collect personal information from individuals under the age of 16 with parental or guardian consent.
Public information
Remember that the data you send to forums, such as our web based social media facilities, will be classified and treated as information that is ‘manifestly made public’. If you are active in our forums, there is a risk that others may find and use the information you provide. Be careful and handle your personal information in a responsible manner when online in a public forum.
Last Updated: 22nd July 2026