KiwiNode Privacy Policy

Last Updated: February 2026
Company: Kiwy Limited (“Kiwy”, “we”, “our”, or “us”) (NZBN: 9429053406897)
Service: KiwiNode Hosting (“KiwiNode”, “Service”)

Kiwy respects your privacy and is committed to protecting your personal data. This policy explains how we collect, use, store, and protect your information when you use KiwiNode services.

0. Data Controller

Kiwy Limited (NZBN: 9429053406897), registered in New Zealand, is the Data Controller responsible for personal data processed through KiwiNode.
Contact: [email protected]

1. Information We Collect

1.1 Personal Information

Includes your name, email address, billing address, phone number, and payment information when registering or purchasing services.

1.2 Technical Information

We automatically collect IP addresses, browser type, device information, operating system, and access times when using our services.

1.3 Usage Data

Information on how you interact with KiwiNode, including pages visited, features used, and server usage metrics.

1.4 Cookies and Tracking

We use cookies and similar technologies to improve user experience and analyze site usage.

2. How We Use Your Information

We use the collected data to:

Provide, maintain, and improve hosting services
Process payments and manage billing
Communicate about your account, services, and support
Send important updates, security alerts, and administrative messages
Detect, prevent, and address technical issues and security threats
Analyze usage patterns and improve user experience
Comply with legal obligations and enforce Terms of Service

2.1 Legal Basis for Processing (Applicable Law)

We process personal data under:

Contractual necessity (providing services)
Legitimate interests (security, fraud prevention, service optimization)
Legal obligations (tax, compliance)
Consent (marketing emails, non-essential cookies)

3. Data Storage and Security

3.1 Storage Location

Data is stored on secure servers with physical and digital security measures.

3.2 Security Measures

We use encryption, firewalls, and access controls to protect your information from unauthorized access or disclosure.

3.3 Data Retention

Account and billing data retained while active and for a reasonable period after closure
Security and access logs retained up to 12 months (longer if required by law or investigation)
Backups retained according to operational requirements

3.4 Security Monitoring & Abuse Prevention

We process technical data to detect fraud, abuse, DDoS attacks, and unauthorized access.

3.5 Access to Customer Server Content

We do not access server content unless required for troubleshooting (with your permission) or to comply with legal obligations. Logs may be collected for operational and security purposes.

4. Information Sharing and Disclosure

We do not sell your personal information. We may share data with:

Service providers (payment processors, hosting providers, analytics, email services)
Legal authorities when required by law
To protect Kiwy or users' rights, property, or safety
In business transfers, mergers, or acquisitions
With your explicit consent

4.1 Service Providers and Subprocessors

Subprocessors only receive information necessary to perform their services. A list is available upon request.

4.2 Data Breach Notification

In case of a breach affecting personal data, we will notify you and relevant authorities in accordance with applicable laws.

5. Your Rights and Choices

Access and Correction: Update your account information anytime
Data Portability: Request a copy of your data in a structured format
Deletion: Request account and personal data deletion, subject to legal obligations
Marketing Communications: Opt-out via unsubscribe links or account settings

6. Cookies Policy

Cookie Consent: Users presented with a consent banner for non-essential cookies
Types of Cookies: Essential, analytics, and preference cookies
Managing Cookies: Control cookies through browser settings; disabling may affect functionality

7. Third-Party Services

KiwiNode may integrate with or link to third-party services. We are not responsible for their privacy practices. Review their policies before sharing information.

8. Children's Privacy

Services are not intended for individuals under 13 (or under other ages where applicable). We do not knowingly collect data from children. If discovered, we will delete it.

9. International Data Transfers

Personal data transferred outside New Zealand will use safeguards like Standard Contractual Clauses or equivalent lawful measures.

9.1 Account and Service Deletion

Deleting an account does not automatically delete active server data or backups. Billing records may be retained for legal compliance. Temporary backups may persist as part of routine operations.

10. Changes to This Privacy Policy

We may update this policy to reflect legal or operational changes. Notifications are provided via our website. Continued use after updates constitutes acceptance.

11. Contact Us

Questions or requests regarding this privacy policy can be sent to [email protected] or submitted via our support system.