Comp World — Privacy Policy

Effective 8 June 2026

1. Introduction

This Privacy Policy explains how Comp World — a product operated by Nexus Solutions NZ Limited (NZBN 9429051283896) ("Comp World", "we", "our", "us") — collects, uses, shares, stores, and protects your personal information when you use our mobile app, our website at compworld.co.nz, and our host portal (together, the "Service").

Comp World is based in New Zealand. We handle personal information in accordance with the New Zealand Privacy Act 2020 and its 13 Information Privacy Principles (IPPs). This policy should be read together with our Terms of Service.

Hosts and Comp World are separate. When you enter a competition, the competition host (the organiser) also receives and controls your information for the purpose of running their event, and is independently responsible for handling it lawfully. This policy covers how Comp World handles your information; a host's own use of your information is their responsibility.

2. Information We Collect

The personal information we collect depends on how you use the Service:

  • Account & profile information: name, email address, phone number, password (stored securely via our authentication provider), and the competitor or group/school profiles you create, including photos, date of birth, and school or studio affiliation.
  • Information about minors: where a competitor is under 18, we collect the minor's profile details (such as name, date of birth, school, and performance media) provided by a parent, guardian, or authorised adult. See Children's Privacy below.
  • Entry & performance content: the sections you enter, performance titles, partners and group members, backing-track audio, uploaded sheet music, and — where captured during an event — images, video, voice recordings, scores, placements, and judge written and audio feedback relating to a performance (including those of minors).
  • Payment information: entry-fee and optional-extra payments are processed by our payment provider (Stripe). Card details are collected and handled directly by Stripe — we do not store full card numbers on our systems. We retain transaction records such as amounts, dates, billing details you provide for invoices/receipts, and payment status. Hosts also provide bank/payout details to Stripe to receive payouts.
  • Host & business information: for hosts, the competition details, branding, sponsors, and the business/contact and payout-onboarding information needed to publish competitions and receive funds.
  • Location data: with your permission, approximate device location, used to show competitions nearest to you. You can turn this off in your device settings at any time.
  • Usage & device data: IP address, device model and operating system, app/browser type, unique device identifiers, push-notification tokens, pages or screens viewed, and timestamps.
  • Communications & form submissions: messages you send us (e.g. support requests), the contents of contact or data-deletion forms on our website, and notification preferences.

3. How We Collect It

  • Directly from you — when you create an account or profile, register for a competition, upload content, make a payment, sign a waiver, or contact us.
  • Automatically — when you use the app or website (usage, device, and approximate-location data as described above).
  • From other users — for example, when a parent or group manager enters a minor or adds you as a partner or group member, or when a host provides information about a competition you have entered.
  • From third parties — such as payment confirmations from Stripe and information from the Apple App Store or Google Play Store when you download the app.

Where we collect a minor's information, we do so on the basis that a parent, guardian, or authorised adult has provided it and consented on the minor's behalf (see Terms of Service).

4. How We Use It

  • To provide the Service: create and manage accounts, process entries, run competitions, build and update live schedules, play music, capture scoring and judging, and release results and report sheets.
  • To process payments: take entry-fee and optional-extra payments, issue invoices and receipts, and enable host payouts (via Stripe).
  • To communicate with you: send essential service messages, schedule and results notifications, host-to-competitor announcements, and respond to your enquiries.
  • To keep the Service secure: detect, prevent, and investigate fraud, abuse, spam, and unauthorised access (for example, our website forms use Cloudflare Turnstile to block automated spam).
  • To improve the Service: understand how features are used and fix problems.
  • For marketing (optional): tell you about events, features, and offers — only where permitted, and you can opt out at any time via the unsubscribe link or your settings.
  • To meet legal obligations: comply with applicable laws and respond to lawful requests.

5. Cookies & Local Storage

We use only the cookies and local/on-device storage needed to operate the Service — for example, to keep you signed in, remember your preferences, and (in the on-the-day tools) store competition data on your device so it works even if venue internet drops. Our website forms use Cloudflare Turnstile, which may set a token in your browser to tell humans from bots. We may use analytics tools such as Google Analytics on our host portal to understand how it is used and to improve the experience; where we do, these may set cookies and collect usage data, and you can opt out using your browser's cookie controls or Google's opt-out browser add-on. We do not use third-party advertising or cross-site tracking cookies.

6. How We Share It

We do not sell your personal information. We share it only as needed to run the Service:

  • With competition hosts and other participants: when you enter a competition, the host receives the information needed to run it, and certain information (such as your name, entry number, performance details, and released results) may be visible to other participants and spectators — for example on schedules, stage displays, and the public live-schedule page.
  • With our service providers (sub-processors): trusted third parties who process information on our behalf, under contract, to deliver the Service:
    • Stripe — payment processing and host payouts.
    • Amazon Web Services (AWS) — secure cloud hosting, databases, and file storage (audio, images, documents).
    • Google Firebase — account authentication and push notifications (Firebase Cloud Messaging).
    • Twilio SendGrid — transactional and notification emails.
    • Google Maps Platform — location and mapping features.
    • Cloudflare — bot/spam protection (Turnstile) on our website forms.
    • Netlify — hosting of our marketing website.
  • For legal reasons: where required by law or a valid request from an authority, or to protect the rights, safety, or property of users, the public, or Comp World.
  • In a business transfer: if Comp World is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction (you will be notified of any material change).

7. Sending Information Overseas

Some of our service providers store or process information outside New Zealand. Our primary cloud storage (AWS) is located in Australia — the Asia Pacific (Sydney) region (ap-southeast-2). Other providers, such as Stripe, Google/Firebase, SendGrid, and Cloudflare, may store or process information in the United States or other countries. Where we disclose personal information to an overseas party, we take reasonable steps to ensure it is protected by comparable safeguards to those under the New Zealand Privacy Act 2020, as required by Information Privacy Principle 12.

8. Children's Privacy

Comp World is used to run dance, singing, music and drama competitions in which many competitors are children. We take the privacy of minors seriously.

  • Accounts must be created and managed by an adult. A minor's information (including name, date of birth, school, and performance media) should only be provided by a parent, guardian, or authorised adult, who consents on the minor's behalf to its collection and use as described in this policy.
  • Performance media (such as audio, images, or video) and results relating to a minor may be visible to the host, judges, and — where the host makes results or schedules public — to other participants and spectators, consistent with how live competitions operate.
  • Hosts are responsible for handling participants' personal information (including minors') lawfully and only for running their competition, as set out in our Terms of Service.
  • A parent or guardian may request access to, correction of, or deletion of a minor's information at any time (see Your Privacy Rights).

9. How We Store & Protect It

We take reasonable technical and organisational measures to protect personal information against loss, misuse, and unauthorised access, disclosure, or alteration. These include encryption of data in transit, storage with a reputable cloud provider (AWS), access controls and authentication, and delegating card payments to Stripe so we do not hold full card numbers. No system can be guaranteed completely secure; you are responsible for keeping your account credentials confidential and notifying us of any suspected unauthorised access.

10. How Long We Keep It

We retain personal information for a minimum of 10 years from the date of collection. We keep competition entries, scores, and results for at least this long so that competitors can look back on their performance history and progress over time — performers often compete for 10 years or more — and we may retain information for longer where necessary to operate the Service, resolve disputes, or comply with our legal, tax, and accounting obligations. Consistent with Information Privacy Principle 9, when we no longer need personal information we will delete it or de-identify it.

11. Your Privacy Rights

Under the New Zealand Privacy Act 2020 you have the right to:

  • Access the personal information we hold about you (IPP 6).
  • Request correction of information that is inaccurate, out of date, incomplete, or misleading (IPP 7). You can update much of your information directly in the app or host portal.
  • Opt out of marketing at any time via the unsubscribe link in emails or your notification settings.
  • Control location access through your device settings.
  • Request deletion of your personal information by submitting a request at compworld.co.nz/request-to-delete-data or emailing us. We will verify your identity before acting on a request, and will then delete or de-identify your information except where we are required or permitted to retain it — including for the minimum retention period and for legal, tax, or record-keeping purposes (see section 10).

To exercise any of these rights, contact us using the details below. We may need to verify your identity, and we will respond within the timeframes required by the Privacy Act 2020.

12. Third-Party Links

The Service may link to third-party websites or services (for example, the App Store, Google Play, or a host's own site). We are not responsible for the privacy practices of those third parties — please review their privacy policies.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on our website and update the "Effective" date above. Where changes are material, we will take reasonable steps to notify you. Your continued use of the Service after an update means you accept the revised policy.

14. Contact & Complaints

If you have any questions, requests, or concerns about this Privacy Policy or how we handle your personal information, please contact us:

Nexus Solutions NZ Limited (Comp World) 14B Percy Road, Papamoa Beach, Bay of Plenty 3118, New Zealand support@compworld.co.nz

If you are not satisfied with our response, you have the right to complain to the Office of the Privacy Commissioner (New Zealand) at privacy.org.nz.