Last updated: 4 November 2026
This Privacy Policy explains how RUC ON RAILS LIMITED handles personal information in connection with RUCSPY at https://rucspy.co.nz. It covers the website, its public data tools and downloads, and communications about the Site.
RUCSPY is a free research site. It does not require an account, accept payments or sell RUC. This policy describes the Site's current functionality and applies alongside the Privacy Act 2020 (New Zealand).
1. Who Is Responsible
RUC ON RAILS LIMITED owns and operates RUCSPY. Its company number is 9362845, its NZBN is 9429053041746 and its registered address is 26 Hobson Street, Suite 15587, Auckland, 1010, New Zealand. References to we, us or our mean that company.
Our Privacy Officer can be contacted at [email protected]. RUCSPY is independent of NZTA. Other RUC on Rails websites and third-party services have their own privacy policies.
2. Public Data and Personal Information
The RUC sales dataset is published by NZTA in aggregated form. RUCSPY does not provide individual vehicle identifiers, owner identities or vehicle movement histories. Aggregate sales figures are distinct from personal information about visitors to this website.
Personal information means information about an identifiable individual. Technical information such as an IP address may be personal information depending on the circumstances.
3. Information You Provide
If you email a question, correction or privacy request, we receive the information you include, such as your name, email address, organisation and message. Please provide only what is needed for your enquiry and avoid sending sensitive information or another person's personal information without authority.
The Site currently has no registration, checkout, recruitment application, newsletter subscription or contact-submission form. You can browse and download data without sending us an enquiry. If you choose not to provide contact details or information needed to understand an enquiry, we may be unable to respond fully.
4. Website Requests and Security Information
Delivering a website requires technical requests. Our hosting and security providers may process IP addresses, requested page addresses, timestamps, browser or device information, referring pages, error information and security signals. We may access technical records where needed to operate the Site, investigate a fault or respond to abuse.
We use information for these purposes only as reasonably necessary. We do not use this Site to build advertising profiles, make automated decisions with legal effects on individuals or sell personal information.
5. Requests Sent Directly to NZTA
When you use the live explorer or download source records, your browser sends requests directly to NZTA's public ArcGIS service, provided using Esri technology. The receiving service can see your IP address, the data query and normal request information. These requests include the selected sales period and category filters.
Those requests are not routed through a RUCSPY data proxy. NZTA and its service providers handle information they receive under their own applicable policies. Visiting a linked source page also takes you to that provider's website.
6. Browser Storage, Shareable Links and Downloads
The Site temporarily holds successful data responses in your browser tab's memory to avoid repeating requests. This cache expires after approximately 15 minutes and is not an account or a persistent profile maintained by us.
Filters can appear in the page URL so you can bookmark or share a view. Anyone receiving that URL can see those selections, and your browser history or technical request logs may retain the URL. Do not put personal or confidential information into URL parameters.
Download files are assembled in your browser and saved to your device. You control the files and any subsequent sharing or storage. RUCSPY does not keep a personal download library for you.
7. Cookies and Analytics
The current RUCSPY application does not set advertising or analytics cookies, use persistent local storage for tracking, or include behavioural analytics or session-recording tools. Fonts are served with the Site rather than requested from a separate font service.
RUC Pass product placements are served as part of this Site. Links to RUC Pass include fixed source and placement labels so the destination can identify the referring page location. Those labels do not include a visitor identifier or your selected sales data filters. We do not record promotional impressions or clicks on RUCSPY. The destination site has its own privacy policy.
Hosting or security services may use technical mechanisms, including essential cookies where needed to secure or deliver the Site. You can manage cookies and stored website data through your browser, although blocking essential features may affect access.
If optional analytics, marketing trackers or interaction recording are introduced, we will update this policy and provide any notice, choices or consent required before using them.
8. How We Use and Share Information
We use personal information to respond to enquiries and corrections, handle privacy requests, operate and protect the Site, diagnose problems and comply with legal obligations. We do not automatically add correspondents to marketing lists or share their information across our brands for unrelated purposes.
Information may be handled by hosting, security and email providers, professional advisers, or authorities where required or permitted by law. Providers acting on our behalf are expected to use it for the relevant services and protect it appropriately. We may share information internally where necessary to resolve an enquiry, with your authority or on another lawful basis.
If we collect personal information indirectly, we will comply with applicable notification requirements, including Information Privacy Principle 3A where it applies, subject to statutory exceptions. The Site does not undertake general collection of visitor profiles from other sources.
9. Overseas Processing
Hosting, email and other service providers may process information outside New Zealand. Where a disclosure is subject to Information Privacy Principle 12, we will use a lawful basis and take reasonable steps to ensure comparable safeguards, or obtain informed authorisation where that basis is appropriate.
A provider acting solely as our agent may process information on our behalf without that processing being treated as an overseas disclosure. We remain responsible for information handled by our agents as required by law. Direct requests to independent NZTA or Esri services are also subject to those services' policies.
10. Security and Retention
We take reasonable technical and organisational steps to protect personal information from loss, misuse and unauthorised access, alteration or disclosure. No internet service can guarantee complete security.
We retain communications and relevant operational records only for as long as reasonably necessary for their purpose, legal obligations or resolving a dispute. Retention periods vary with the purpose of the records and the operational and security settings of the provider.
When information is no longer needed, we will take reasonable steps to delete or de-identify it. Residual copies may remain temporarily in backups or legally required records. If a privacy breach causes or is likely to cause serious harm, we will notify the Privacy Commissioner and affected people as required by the Privacy Act 2020.
11. Access, Correction and Complaints
You may request access to personal information we hold about you and ask for correction. Contact our Privacy Officer at [email protected]. We may need reasonable information to verify your identity before releasing records.
We will respond as soon as reasonably practicable and ordinarily make a decision within 20 working days, subject to lawful extensions or exceptions. If we decline a requested correction, you may ask us to attach a statement of correction to the information.
Please contact us if you have a privacy concern. You may also complain to the Office of the Privacy Commissioner at any time.
12. Children and Young People
The public research tools do not require age or identity information. If a communication concerns a child or young person, we will take particular care that collection and use are fair and appropriate. Contact us if you believe personal information about a child has been supplied unnecessarily.
13. Business Changes and Policy Updates
If ownership or operation of the Site changes, relevant personal information may be disclosed or transferred where lawful and necessary, subject to appropriate confidentiality and privacy protections.
We may update this policy when the Site, its providers or legal requirements change. The revision date identifies the current version. We will provide further notice or obtain authorisation where required. Changes do not retrospectively authorise an unrelated use of information already collected.
Contact
RUC ON RAILS LIMITED
Company Number: 9362845
NZBN: 9429053041746
26 Hobson Street, Suite 15587, Auckland, 1010, New Zealand
Email: [email protected]