Privacy Policy
Righted Holdings Limited (New Zealand company number 9434558, NZBN 9429053721129) (“Righted”, “we”, “us”) is committed to protecting your privacy. This policy is drafted for compliance with the Privacy Act 1988 (Cth) (Australian Privacy Principles) and the Privacy Act 2020 (New Zealand).
The short version
You tell us what happened to you. We keep it private. Nothing you share is shown to anyone outside Righted unless you say yes to sharing it with a specific group (a litigation funder and law firm considering your type of claim) — and you can change your mind at any time. We never sell your personal information to advertisers, and we never share it with the company you have a grievance against without your explicit permission.
Who we are
Righted is a platform that helps people who have been wronged by companies record their grievance and, if they choose, join with others in the same situation so that litigation funders and law firms can consider taking the group's claims forward. We are not a law firm and do not give legal or financial advice.
What we collect
- Identity and contact details: name, email, phone, state/region.
- Your grievance: what happened, when, which company, estimated losses, and supporting documents you upload (correspondence, statements, complaint reference numbers).
- Sensitive information, only with your explicit consent: some grievances involve health information (for example, a disability insurance claim) or information about a deceased family member. We ask for your explicit consent before collecting this, and we record that consent.
- Technical data: device and usage information, cookies (see “Cookies” below).
Why we collect it (purposes)
- To record and organise your grievance.
- To group similar grievances together (“clusters”) so they can be considered for group legal action. Until you opt in (below), your information appears to prospective funders only in anonymised, aggregated form (for example: “1,200 people report delayed payouts from Fund X”).
- To contact you about the progress of your grievance and any opportunity to join a group claim.
- To operate, secure, and improve the platform.
When we share your information
- With a specific consortium, only after you opt in. If a litigation funder and law firm take on a cluster your grievance belongs to, we will ask you — clearly and specifically — whether you want to share your submission with that named consortium. Nothing identifying you is shared until you say yes. You can revoke this consent at any time through your account, and we will notify the consortium, which must cease using your information except where the law requires otherwise.
- With service providers who help us run the platform (hosting, email), under contracts that limit what they can do with it.
- Where the law requires (for example, a court order).
- Never with the company your grievance is about, unless you separately and explicitly agree.
Because we may receive a fee when a funder acquires access to a cluster, the Australian Privacy Act applies to us regardless of our size, and we treat it as applying to all users.
Overseas disclosure
Righted is a New Zealand company serving users in New Zealand and Australia. Your information may be stored or processed in New Zealand, Australia, or other locations where our hosting and email providers operate. Where information crosses the Tasman, both countries' privacy laws continue to protect it, and we take reasonable steps to ensure any recipient handles it consistently with the Australian Privacy Principles and the NZ Information Privacy Principles.
How long we keep it
We keep your submission while your account is active or while a related group claim is on foot. If you delete your account and no legal proceeding requires retention, we delete or de-identify your information within 90 days. Consent and revocation records are retained for 7 years as evidence of lawful handling.
Security
Information is encrypted in transit and at rest, access is limited to staff who need it, and we log access to submissions. No system is perfectly secure; if a data breach is likely to cause you serious harm, we will notify you and the relevant regulator as required by the Notifiable Data Breaches scheme (Australia) and the Privacy Act 2020 (New Zealand).
Your rights
You may ask us to access, correct, or delete your personal information, or withdraw a consent, at any time: email privacy@joinrighted.com. You can also manage consents and download or delete your data from your account dashboard. We respond within 30 days.
Cookies
We use essential cookies to run the site and analytics cookies to understand usage. We do not use your grievance information for advertising.
Complaints
Contact us first at privacy@joinrighted.com — see our Complaints Policy. If you are not satisfied, you may complain to the Office of the Australian Information Commissioner (oaic.gov.au) or the NZ Office of the Privacy Commissioner (privacy.org.nz).
Changes
We will post changes here and, for material changes, notify you by email. Prior versions are available on request.