Privacy Policy - NistCheck

1. Information We Collect

We only collect the minimum information required to provide and support the NistCheck service. Note that this information is only used by the platform to provide the service and not by NistCheck personnel for any other purpose.

This may include:

• Account information: Name, email address, and login credentials you provide when creating an account.
• Service usage information: Information related to your use of the platform (e.g., configuration, security settings, or inputs you provide as part of using the service).
• Technical information: Standard log data such as browser and device type are collected automatically to ensure the service functions securely.

We do not collect sensitive personal information.

2. How We Use Information

We use your information exclusively for:

• Delivering, maintaining, and improving the NistCheck service.
• Authenticating and managing user access.
• Providing support and responding to enquiries.
• Ensuring system security and integrity.
• Complying with legal or regulatory requirements.
• Measuring and improving the effectiveness of our NistCheck service, marketing campaigns and advertising activities.
• Communicating with you in regard to the NistCheck service, product updates and or any other relevant marketing activities.

We do not sell information to third parties or use personal information for unrelated third-party advertising purposes.

3. Sharing of Information

We do not sell, rent, trade, or otherwise disclose your personal information to third parties. The only exceptions are:

• If required by applicable law, regulation, or legal process.
• To protect the security or integrity of the service, in accordance with applicable law.

4. Cookies and Tracking

NistCheck uses strictly necessary cookies to enable secure login and core functionality of the service.

This may include the use of third-party analytics services such as Google Analytics 4 (GA4) and advertising platform tracking pixels where appropriate. These tools help us to understand website traffic, conversions and user engagement and do not provide us with sensitive personal information.

You may manage your cookie preferences through your browser settings, however some features of the service may not function properly if cookies are disabled.

5. Third Party Security

Currently NistCheck used Google reCAPTCHA services to protect the website. For more information, please refer to the Google Privacy Policy and Terms of Service apply.

6. Data Retention

We retain personal information for as long as reasonably necessary to:

• Provide our services and respond to enquires
• Maintain accurate customer and business records
• Support sales and marketing follow-up activities
• Comply with applicable legal, tax and regulatory obligations.

Contact form submissions and sales enquires may be retained for customer service, sales engagement and compliance purposes.

7. Data Security

The platform has been built using modern security architecture principles and components. We have conducted multiple rounds of security assessments and due diligence including penetration testing, risk assessments, risk management processes, security framework alignment assessments such as OWASP, NIST CSF and government frameworks.

We implement reasonable and appropriate technical and organisational measures to protect your information against unauthorised access, alteration, disclosure, or destruction.

8. Your Rights

Depending on your location, you may have the right to:

• Access, update, or correct your personal information.
• Request deletion of your information.
• Restrict or object to certain types of processing.
• Request a copy of your information in a portable format.

To exercise these rights, contact us at the details below.

9. International Users

NistCheck is operated from New Zealand (personnel) and the United States (Azure platform). If you access the service from outside these regions, your information may be processed and stored in jurisdictions that may not align with the data protection specified in your home country.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Updates will be effective when posted on this page, with the revised effective date.

11. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us at: