Privacy Policy

Last updated: 23 June 2026

1. Who we are

Reefline is operated by NexArch Ltd, a company registered in New Zealand. In this policy, "we", "us", and "our" refer to NexArch Ltd.

If you have questions about this policy, contact us at lee@nexarch.co.nz.

2. What information we collect

Information you provide

  • Account details — name, email address, phone number, and organisation name when you sign up or request a demo.
  • Operational data — information you enter into the platform such as crew records, passenger manifests, equipment records, incident reports, waiver submissions, and booking details.
  • Communications — messages you send us via email or the contact form.

Information collected automatically

  • Device and browser information — browser type, operating system, and device identifiers.
  • Usage data — pages visited, features used, and timestamps.
  • Log data — IP addresses, access times, and referring URLs.

Information from third parties

We may receive information from payment processors when you subscribe to a paid plan. We do not store full payment card details.

3. How we use your information

We use the information we collect to:

  • Provide, maintain, and improve the Reefline platform.
  • Process your account registration and manage your subscription.
  • Respond to your enquiries and provide customer support.
  • Send service-related communications such as subscription reminders and security alerts.
  • Comply with legal obligations, including health and safety record-keeping requirements.
  • Detect, prevent, and address technical issues or security incidents.

We do not sell your personal information to third parties. We do not use your data for advertising purposes.

4. Legal basis for processing

We process your information on the following grounds:

  • Contract — to provide the services you have signed up for.
  • Legal obligation — to comply with applicable laws, including the New Zealand Privacy Act 2020.
  • Legitimate interest — to improve our services, ensure security, and communicate with you about your account.

5. How we store and protect your data

Your data is stored on Amazon Web Services (AWS) infrastructure in the Asia Pacific (Sydney) region. We use encryption in transit (TLS) and at rest (AES-256). Access to production systems is restricted to authorised personnel.

Operational records such as manifests, incident reports, and waivers are stored with cryptographic integrity chains to ensure they cannot be altered after creation.

6. Data retention

We retain your account information for as long as your account is active. Operational records (manifests, incidents, waivers, equipment logs) are retained for the life of your account to meet regulatory record-keeping obligations.

If you close your account, we will delete your personal information within 90 days, except where we are required by law to retain it.

7. Your rights

Under the New Zealand Privacy Act 2020, you have the right to:

  • Access the personal information we hold about you.
  • Request correction of inaccurate information.
  • Request deletion of your personal information, subject to legal retention requirements.

To exercise these rights, email us at lee@nexarch.co.nz. We will respond within 20 working days.

8. Sharing your information

We may share your information with:

  • Infrastructure providers — AWS for hosting and data storage.
  • Payment processors — to process subscription payments.
  • Regulatory authorities — where required by law (e.g. WorkSafe NZ, Maritime NZ).

We require all third-party providers to handle your data in accordance with this policy and applicable privacy laws.

9. Cookies

We use essential cookies to maintain your session and authentication state. We do not use third-party tracking or advertising cookies.

10. International transfers

Your data is primarily stored in the AWS Asia Pacific (Sydney) region. Some ancillary services (such as email delivery) may process data in other AWS regions. All transfers are covered by AWS's data processing agreements and security standards.

11. Changes to this policy

We may update this policy from time to time. We will notify you of material changes by email or through the platform. Your continued use of the service after changes take effect constitutes acceptance of the updated policy.

12. Contact

If you have any questions or complaints about this policy or our handling of your personal information, contact us at:

NexArch Ltd
Email: lee@nexarch.co.nz

You also have the right to lodge a complaint with the Office of the Privacy Commissioner at privacy.org.nz.