Introduction Your privacy is important to the Nateva Group^[1]. (Nateva). Nateva is referred to in this Privacy Policy as we, our or us. This Privacy Policy explains:

• how we collect personal information;
• the kind of personal information we collect;
• how we protect your personal information;
• how we use, and may share, your personal information;
•  how we use cookies;
•  the basis on which we provide links to third party websites;
• how you can access and amend your personal information;
• how long we hold personal information; and
•  who you can contact for further information.

It sets out various rights that you have in relation to that personal information.  Please take a moment to read and understand this Privacy Policy. We may change this Privacy Policy from time to time by uploading a revised policy onto our website at https://nateva.co.nz/ (Website).  The changes will apply from the date that we upload the revised policy, and by continuing to hold a contract with us, use any of our products or services or provide your products and services to us, and use the Website, you consent to any such changes. You can choose not to provide us with, or allow us to collect, the requested personal information, but if this is the case, we:

• may not be able to provide you with any, or all, of our products or services (including access to our sites, or enter into a commercial arrangement with you);
• may not be able to make payments owing to you;
• may not be able to complete our counterparty due diligence on you (resulting in our inability to enter into a commercial arrangement with you); and
•  in the case of a job applicant, we may not be able to consider your application for employment.

How we collect personal information We collect personal information about you, including:

• in the course of providing our products and services to you, or discussing such products and services with you;
• in the course of doing business with you (for example, if you provide goods or services to us);
• when you enter properties owned or managed by us;
• when you use our Website;
• when you contact us for information about our products or services (eg by telephone, Website, mail or email);
• when we undertake ‘know your client’ checks with third parties in order to provide our products and services to you;
• when you have an account or contract with us and update your account information; and
• when you contact us for any other purpose including in relation to a job application.

The kind of personal information we collect The personal information we collect may include:

• contact information; such as your name, address (physical, mail and email) and telephone numbers;
• identification verification information, such as your driver’s licence and passport numbers, NZETR account details;
• images of your likeness captured by cameras;
• bank account details;
• information related to your contractual relationship with us, such as if you are an independent contractor, your wage and time records, emergency contact information, bank account details;
• if you have submitted a job application, information related to your job application such as your previous employment details and CV; and
• information about your presence on our sites, such as your name, times of entry and exit.

We may also collect any other personal information you may choose to provide to us, or that you authorise other persons (including your representatives) to provide to us. If you are an employee of another entity and you are carrying out work on our sites, we may be required to collect, and you authorise us to collect, some of your personal information from you or your employer.  This information may include identification information, wage and time records, times of entry and exit, emergency contacts and presence on our sites, for health and safety purposes and other business purposes (such as payment obligations to your employer). Protecting your personal information We are committed to ensuring the security of personal information and takes reasonable and appropriate steps, including through the implementation of security and privacy measures and processes, to protect your personal information and to minimise the risk of it being misused, lost, accessed without authorisation, modified or disclosed. How we use, and may share, your personal information We may use your information for purposes related to our business and our relationship with you, including the following purposes:

• considering and progressing business opportunities to buy or lease land/forests;
• selling land/forests and trading carbon credits in accordance with any agreement with you;
• to manage and enforce our contracts with you (including to supply, and invoice for, products and services ordered by you, and to collect payment);
• to manage your customer account and transactions, including the performance of any contract we may have with you;
• to provide you with the products and services that you purchase from us;
• to communicate with you (including to respond to your requests for information);
• where you are a contractor, to manage our relationship with you, including reference checks and payment information;
• to manage access to our sites;
• to manage health and safety on our sites;
• for property security and forest management;
• to conduct credit checks / sanctions checks / know your client checks in accordance with our internal policies regarding counterparty due diligence when entering contracts with third parties;
• to undertake debt recovery and enforcement activities and to participate in the credit reporting system;
• for marketing, business development, administration, audit, research and statistical analysis;
• to help us improve the products and services that we offer and to develop new products and services;
• to provide you with information relating to our products and services;
• if you are applying for a job with us, to consider and progress your job application and conduct background checks;
• to identify and prevent harm to us or others;
• to comply with relevant laws and regulations; and
• for any specific purpose which we notify you of at the time your personal information is collected.

If we need to use your personal information for a new purpose, where required by law, we will obtain your express authorisation before doing so. We may disclose personal information about you:

• to our third-party contractors or service providers (such as hosting providers and payment processors, data storage and processing providers, sanctions searching services, know your client (counterparty due diligence) services and our professional advisers).  These third parties only handle and process your personal information on our behalf and do not use or disclose your personal information for their own purposes;
• to our related companies, affiliates and representatives;
• to regulators, if we are requested to do so in the course of legal proceedings or other investigations, or as otherwise required by law;
• to other third parties to the extent reasonably required to carry out any of the purposes for which we may use your personal information (as outlined above), including a credit checking or credit reporting service; or
• to any other person with your authorisation or where we are otherwise permitted to do so by applicable law.

How we use cookies We may use “cookies” and collect session information to provide you with access to tailored information and products on the Website. A cookie is a small data file that the Website sends to your browser, which may then store it on your system for later retrieval by the Website. Cookies record information about your online preferences and allow us to tailor the Website to your interests. Information supplied by cookie and session information can help us to analyse the profile of the Website’s visitors and help us to provide you with a better user experience. Users have the opportunity, using their browser settings, to set their devices to accept all cookies, to notify them when a cookie is issued, deleted, or not to receive cookies at any time. If you reject cookies, you may still use our Website, but your ability to use some of their features or functionality may be limited. For further information on cookies and how to switch them off see www.allaboutcookies.org. The basis on which we provide links to third party websites The Website, any direct marketing, or other communications we have with you may contain links to third-party websites. Unless expressly stated otherwise, these websites have not been developed by and are not controlled by us. They are provided for your convenience only, and do not imply that we check, endorse, approve or agree with the privacy practices of the third-party websites linked to. We encourage you to be aware when you leave our website and to read the privacy statements of each and every third-party website you visit. How you can access and amend your personal information You have the right to contact us to access your readily retrievable personal information that we hold and to request a correction to your personal information. Before you exercise this right, we will need evidence to confirm that you are the individual to whom the personal information relates.  We reserve the right to charge you a reasonable amount for providing copies of any personal information you request, to take into account the time, cost and effort involved. If you request a correction and we think the correction is reasonable and we are reasonably able to change the personal information, we will make the correction. If we do not make the correction and you have provided us with a statement of correction, we will take all steps reasonable in the circumstances to ensure that such statement of correction will always be read with the relevant personal information. How long we hold personal information We will not keep your personal information for longer than is necessary to achieve the purposes for which we may lawfully use it. Who you can contact for further information To contact us, including to exercise any of your rights set out in this Privacy Policy, please use the following contact details: Email Address:  [email protected]