Terms of Service

3.1 Access to the Service is by invitation only. Accounts are created by HSCA administrators or authorised organisation administrators.

3.2 You are responsible for maintaining the confidentiality of your login credentials and for all activity that occurs under your account.

3.3 You must notify HSCA immediately if you become aware of any unauthorised use of your account.

4.1 Access to the Service is subject to a subscription agreement between your organisation and HSCA Ltd. Subscription fees are as agreed in your client agreement.

4.2 HSCA reserves the right to suspend access to the Service if subscription fees are not paid within the agreed terms.

4.3 Add-on features (such as the SSSP Builder or NZ-hosted data sovereignty tier) are subject to additional fees as specified at the time of activation.

5.1 You agree to use the Service only for lawful purposes and in accordance with these Terms.

5.2 You must not use the Service to submit false, misleading, or fraudulent health and safety records.

5.3 You must not attempt to gain unauthorised access to any part of the Service or to another organisation’s data.

5.4 You must not use the Service in any way that could damage, disable, or impair the Service or interfere with other users.

6.1 Safety Portal is operated by Health & Safety Consultants Auckland Limited (“HSCA”, “we”, “us”) and is hosted using third-party cloud infrastructure services.

6.2 Your data, including all health and safety records, personnel information, incident reports, documents, and other content submitted to Safety Portal (“Your Data”), is stored on servers operated by the following third-party providers:

• (a) Supabase Inc. — database, file storage, and authentication services. Data is stored in the ap-southeast-2 region (Sydney, Australia), operated on Amazon Web Services (AWS) infrastructure.
• (b) Vercel Inc. — application hosting and content delivery. Application code is served from global edge locations. No persistent personal data is stored by Vercel.

6.3 By subscribing to Safety Portal, you acknowledge and consent to Your Data being stored and processed in Australia (Sydney) on AWS infrastructure operated by Supabase Inc.

6.4 AWS Sydney (ap-southeast-2) holds the following certifications relevant to data security and privacy: ISO 27001, SOC 1 Type II, SOC 2 Type II, and PCI DSS Level 1.

6.5 HSCA takes reasonable steps to ensure that all third-party providers handling Your Data are bound by appropriate data processing agreements and maintain security standards consistent with the New Zealand Privacy Act 2020.

6.6 HSCA does not sell, share, or disclose Your Data to any third party except as required to provide the Safety Portal service, or as required by law.

6.7 If you require Your Data to be stored in New Zealand, please contact us at info@healthandsafetyconsultantsauckland.co.nz to discuss a data sovereignty arrangement. HSCA may offer NZ-hosted infrastructure at an additional cost.

6.8 You may request a copy of Your Data or deletion of Your Data at any time by contacting us. HSCA will comply with such requests within the timeframes required by the New Zealand Privacy Act 2020.

7.1 The Service, including its design, software, AI models, and content, is owned by HSCA Ltd and is protected by intellectual property laws. You may not copy, modify, or distribute any part of the Service without our written consent.

7.2 Your Data remains your property. By using the Service, you grant HSCA a limited licence to store, process, and display Your Data solely for the purpose of providing the Service to you.

8.1 Safety Portal includes AI-powered features that generate summaries, assessments, and recommendations. This content is advisory only and does not constitute legal or professional health and safety advice.

8.2 You are responsible for reviewing all AI-generated content before relying on it for health and safety decisions. HSCA is not liable for decisions made based on AI-generated output.

9.1 Either party may terminate the subscription agreement in accordance with the terms of the client agreement.

9.2 HSCA reserves the right to suspend or terminate access to the Service immediately if you breach these Terms.

9.3 On termination, you may request an export of Your Data. HSCA will retain Your Data for 90 days after termination before deletion, unless otherwise agreed.

10.1 To the maximum extent permitted by New Zealand law, HSCA’s total liability for any claim arising from the use of the Service is limited to the subscription fees paid by you in the three months preceding the claim.

10.2 HSCA is not liable for any indirect, incidental, or consequential loss arising from your use of the Service.

10.3 The Service is provided as a tool to support your health and safety obligations. Compliance with the Health and Safety at Work Act 2015 and other applicable legislation remains your responsibility.