Last updated: 20 September 2026
HANA Communications Limited (“HANA Communications”, “we”, “us”, or “our”) is committed to protecting your privacy and handling your personal information in accordance with the New Zealand Privacy Act 2020.
This Privacy Policy explains how we collect, use, store, disclose and protect personal information when you visit our website, create or use an account, purchase services, contact us, or otherwise interact with HANA Communications.
1. Personal Information We Collect
We may collect personal information that is reasonably necessary to provide and manage our services, including:
- Name
- Organisation or business name
- Postal or service address
- Telephone and mobile numbers
- Email address
- Account login and registration information
- Records of correspondence with us
- Domain registration and service information
- Billing and transaction information
- Payment references and payment tokens supplied by our payment provider
- Cardholder name
- Card brand
- Truncated or masked card number
- Card expiry date
- Information relating to your use of our website and services
We do not intentionally collect more personal information than is reasonably required for the purposes for which it is collected.
2. How We Collect Personal Information
We may collect personal information when you:
- create or use a HANA Communications account;
- register, transfer or renew a domain name;
- purchase or use one of our services;
- make a payment;
- contact us by email, telephone or through our website;
- update your account or billing information; or
- otherwise provide information to us.
We may also collect limited technical information relating to your use of our website, including session information and information necessary to operate and secure your account.
If you provide us with personal information about another person, you should ensure that you are authorised to provide that information.
3. How We Use Personal Information
We may use personal information to:
- provide and administer the products and services you request;
- register, transfer, renew and manage domain names;
- administer customer accounts;
- process orders and payments;
- provide customer and technical support;
- communicate with you about your services, orders or account;
- maintain billing and transaction records;
- detect or prevent fraud, misuse or security incidents;
- improve our website and services;
- comply with legal, regulatory and contractual obligations; and
- carry out other purposes authorised by you or permitted by law.
Where we send optional marketing communications, customers may unsubscribe from those communications. Service-related and account-related communications may still be sent where necessary.
4. Payment and Credit Card Security
Online credit card payments are processed securely using Windcave PxFusion.
Windcave is a PCI DSS Level 1 Service Provider and complies with the Payment Card Industry Data Security Standard (PCI DSS) Version 4.01.
When you enter card details through our payment page, sensitive card information is submitted directly from your browser to Windcave for authorisation and payment processing.
HANA Communications does not store full credit card numbers or card security codes such as CSC, CVC or CVV.
Where you choose to save a card for future payments, HANA Communications may retain payment references or tokens supplied by Windcave together with limited card information such as:
- cardholder name;
- card brand;
- truncated or masked card number; and
- card expiry date.
These details may be used to identify a saved payment method without HANA Communications storing the full card number or card security code.
Payment information is transmitted using encrypted HTTPS connections.
5. Disclosure of Personal Information
We may disclose personal information where reasonably necessary to provide our services or where permitted or required by law.
This may include disclosure to:
- payment processors such as Windcave;
- domain registries and domain service providers;
- hosting, telecommunications and technology providers;
- suppliers and service providers acting on our behalf;
- professional advisers such as accountants, lawyers and auditors;
- debt collection agencies where appropriate; and
- government, regulatory or law enforcement authorities where required by law.
We do not sell personal information to third parties.
Where personal information is provided to third-party service providers, we seek to disclose only the information reasonably necessary for the relevant service.
6. Overseas Service Providers
Some of our service providers, registries, technology providers or payment-related organisations may process or store information outside New Zealand.
Where personal information is disclosed overseas, we will handle that disclosure in accordance with applicable requirements under the Privacy Act 2020.
7. Cookies and Website Sessions
Our website may use cookies and similar technologies to operate customer accounts, maintain logged-in sessions and improve the functionality of the website.
HANA Communications primarily uses session cookies so that the website can recognise that you have logged in and maintain your session while you use the site.
You may configure your browser to restrict or delete cookies, although doing so may prevent some account or website functions from operating correctly.
8. Security of Personal Information
We take reasonable technical and organisational measures to protect personal information against:
- loss;
- unauthorised access;
- misuse;
- modification;
- disclosure; and
- other unauthorised processing.
Information submitted through our website is transmitted using encrypted HTTPS connections.
Access to customer and account information is restricted to authorised persons where reasonably necessary for business, support, technical or administrative purposes.
No method of electronic storage or transmission can be guaranteed to be completely secure, but we take reasonable steps to protect the information we hold.
9. Retention of Personal Information
We retain personal information only for as long as reasonably necessary to:
- provide and administer services;
- maintain required business and transaction records;
- resolve disputes;
- comply with legal, tax, accounting or regulatory obligations; or
- protect our legitimate business and security interests.
Information that is no longer reasonably required may be deleted, anonymised or otherwise securely disposed of.
10. Accessing and Correcting Your Personal Information
Under the Privacy Act 2020, you may request access to personal information that HANA Communications holds about you and request correction of information that is inaccurate.
You may also update certain account information through your HANA Communications account.
To request access to or correction of your personal information, please contact us using the details below.
11. Privacy Breaches
If we become aware of a privacy breach, we will assess the incident and take appropriate steps to contain and respond to it.
Where a privacy breach meets the notification requirements of the Privacy Act 2020, we will notify the Office of the Privacy Commissioner and affected individuals as required by law.
12. Third-Party Websites
Our website may contain links to third-party websites.
HANA Communications does not control the privacy practices or content of third-party websites. When you leave our website, the privacy policies and terms of the relevant third party will apply.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our services, technology, business practices or legal obligations.
The current version will be published on this website together with its most recent update date.
14. Contact Us
If you have questions, requests or concerns regarding your personal information or this Privacy Policy, please contact:
HANA Communications Limited
Email: support@hanacom.co.nz
If you are not satisfied with how we have handled a privacy matter, you may also contact the Office of the Privacy Commissioner New Zealand.