We are committed to protecting your privacy online and complying with the Privacy Act 2020 (the “Act”). This policy (together with our Haulr App Terms of Use) sets out the basis on which any personal data we collect from you, or that you provide us with will be processed by us when you use the Haulr App (the App). Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.

The App is operated by Haulr Limited, also referred to as “We” and “Us”.

1Information We May Collect from You

We may collect and process the following data about you:

• Account and vehicle information:
  • The information (including your first name, surname, phone number and email address) that you provide by setting up an account through the App, in registering for our newsletter, in entering into any transaction through the App, or otherwise by contacting us.
  • Information about your vehicle including dimensions and load.
  • Error Reports you submit about bridge or restriction data, and any documents you upload, including your profile photo, driver licence and certificates.
• App Activity: We will automatically collect the following information while you use the App:
  • Location data: The App uses GPS location continuously during active trips to deliver proximity-based bridge restriction warnings (i.e. alerts at set distances before a restricted bridge). This is necessary for the performance of the App’s key functions, which are to support route planning and alert users about upcoming bridge restrictions. This data is collected both when the App is in the foreground and also on the background while a trip is active. Background location data is required to deliver proximity-based bridge restriction warnings and maintain Live Tracking even when the App is not the active screen on your device. Users can revoke location permissions at any time through their device settings, though this will limit the App's core functionality.
  • Tokens and session IDs only as necessary to provide the App.
  • Device records: a hashed device identifier (not an IMEI or advertising identifier), your device type (iOS or Android), the IP address recorded when the device first registers or signs in, and, if you enable notifications, a push notification token. We do not collect your device model, app version, analytics or crash reporting data.
  • Live Tracking: Live Tracking is active only while you have an active overdimension load in the App. Other OD Pro Users can see your approximate position during that load. You choose whether your name is displayed alongside your position, and you can change that choice at any time in your account settings.

• Communications: When you sign up for an account, you are opting in to receive certain legal and administrative emails from us, which are necessary for the provision of the App. You may also choose to sign up to receive certain marketing or additional emails. You can manage your preferences in terms of receipt of these communications through your account settings. You cannot, however, opt out of receiving certain legal or administrative notices from us.
• Information provided to us from other sources: We may receive information about you from third parties in the course of making available the App to you, including enterprise fleet account holders (for example, your employer), our sub-contractors and our payment providers. Where we collect information about you from someone else, we will take reasonable steps to make you aware of that collection, as required by the Act.

2Use of Information

We will only use information held about you as necessary to provide you with the App’s functionality or as otherwise required by law. More specifically we will use it in the following ways:

Information you give to us

We use this information to:

• make the App available to you;
• provide you with information about routes including weight and height restrictions;
• administer your account with us;
• disclose to lawful authorities when required to do so by law;
• notify you about changes to the App; and
• ensure that the App is presented in the most effective manner for you.

Information that we collect about you

We use this information to:

• identify you as a user of the App;
• administer the App;
• ensure that the App is presented in the most effective manner for you;
• measure and understand the effectiveness of certain features of the App;
• improve the App and route data;
• provide location-based services to you such as bridge restriction warnings, live tracking and to allow other users to view your approximate location; and
• allow firms who are fleet account holders to view drivers’ locations;
• analyse completed route data.

Information we receive from other sources

We will combine this information with information you give to us and information that we collect about you. We will use this information and the combined information for the purposes set out above (depending on the types of information we receive).

3Email Communications

If you create an account on the App, and sign up for any of our newsletters or alerts, we may send you information about products or services we believe may interest you.

You can unsubscribe from receiving our newsletter and other correspondence and/or by clicking the "Unsubscribe" link featured within our correspondence. Alternatively, you can edit your personal information or manage notification subscriptions by updating your account settings within your user profile.

4Where We Store Your Personal Data

The personal information we collect is stored with our service providers in the following locations: your profile and Live Tracking information is held in Google Cloud Firestore in the United States; our bridge, route and restriction database is held in Sydney, Australia; and our application servers and server logs are held by our hosting provider. We will take reasonable steps to ensure that any transfers of your data comply with applicable data protection and privacy laws, and we implement reasonable technological and organisational measures so that once transferred outside of New Zealand your data is treated securely and in accordance with this privacy policy.

All information you provide to us is stored on our third party service providers’ secure servers. Where we have given you (or where you have chosen) a password which enables you to access certain parts of the App, you are responsible for keeping this password confidential.

The transmission of information via the internet is not completely secure. We will do our best to protect your personal data, however, we cannot guarantee the security of your data transmitted to the App; any transmission is at your own risk.

Once we have received your information, we will use reasonable security safeguards to protect it against loss and against unauthorised access, use, modification and disclosure.

We only keep your information for as long as required for the purpose for which it was obtained. Different kinds of information are held for different periods: location data is deleted 12 months after the trip it relates to has ended; trip history is deleted after 24 months; and billing and tax records are kept for 7 years, as New Zealand tax law requires. We may keep some information for longer where we are required to by law, or where we need it to resolve a dispute or enforce our Terms of Use.

If a privacy breach occurs that has caused, or is likely to cause, serious harm, we will notify the Office of the Privacy Commissioner and the affected individuals as soon as practicable, as required by the Act.

5Disclosure of Your Information

We may disclose your personal information to other third parties in the circumstances set out below:

• If we or a substantial part of our assets are acquired by a third party, your personal data may be one of the transferred assets.
• If we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply the Terms of Use of the App, to protect our rights, property, or safety or other users of the App.
• If you use the App under an enterprise fleet account, we disclose your location to the fleet account holder (for example, your employer) while you have an active trip. They cannot see your location outside an active trip, and they do not have access to your trip history.
• We may share aggregated or de-identified information that does not identify you, for example statistics about route usage or the frequency of bridge restriction warnings.
• We may share information submitted as part of third party promotional activities only when you agree the specific terms and conditions of the promotion by opting in to the promotion.

In addition, we will share your information with the third party processors who supply us with the following services to enable us to provide the App:

• Stripe Inc for enterprise fleet accounts.
• HERE Technologies for map tiles, address and bridge search, and truck route calculation. HERE receives your search text, map-centre coordinates, departure and destination coordinates, your GPS coordinates while a route is being recalculated, and your vehicle height, width, length and gross weight.
• Google Cloud Firestore for storing your profile and Live Tracking information, and Firebase Cloud Messaging for push notifications.
• Supabase for our bridge, route and restriction database.
• Apple and Google for subscriptions purchased through their app stores.

Some of the third parties to whom we disclose your personal information are foreign persons or entities for the purposes of the Act (for example, they may be companies incorporated outside New Zealand). Before we disclose your personal information to a recipient outside New Zealand, we take reasonable steps to satisfy ourselves that the recipient is required to protect it in a way that, overall, provides comparable safeguards to those under the Act, for example through our contracts with that recipient. Where that is not the case, we will make the disclosure only with your authorisation, and you authorise us to do so on the understanding that those recipients may not be subject to privacy laws that provide comparable safeguards to those under the Act.

6Children’s Privacy

The App is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from individuals under 18. If we become aware that we have collected such information, we will take steps to delete it promptly.

7External Links

The App may, from time to time, contain links to and from the websites of third parties. If you follow a link to any of these websites, please note that these have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.

8Access to Information and Right to Erasure

You have a legal right to a copy of all personal information about you held by us. Your rights of access and correction can be exercised in accordance with the Act.

You are also entitled to require us to erase your account and your data. You can delete your account directly within the App through your account settings or by emailing us.

Some information is kept after your account is deleted where we are required to keep it by law, for example billing and tax records, or where it no longer identifies you. Apple and Google keep their own records of purchases made through their app stores.

Email support@haulr.co.nz with your requests.

9Changes to Our Data Protection and Privacy Policy

Any changes we may make to our data protection and privacy policy in the future will be posted on this page and, where the changes are material, the changes will be notified to you by email.

This privacy policy was last updated on 7 October 2026

Contact

Please email us at support@haulr.co.nz if you are unsure about any of the information listed above or have further questions or comments regarding this privacy policy.

Our Privacy Officer is Raquel Wheatley and can be contacted at privacy@haulr.co.nz.

If you are not satisfied with how we have handled a privacy request or complaint, you can make a complaint to the Office of the Privacy Commissioner at www.privacy.org.nz.