Privacy Policy and Data Processing Addendum

BusEnable Limited
Last updated: 22 June 2026

Introduction

BusEnable Limited (“BusEnable”, “we”, “us”, “our”) is committed to protecting personal information in accordance with the Privacy Act 2020 (New Zealand) and applicable international data protection laws, including GDPR and UK GDPR standards where relevant.

This Privacy Policy explains how we collect, use, store, and protect personal information in connection with:

  • the BusEnable platform

  • applications built on Dynamics 365, Dataverse, and Power Apps

  • deployments via Microsoft AppSource / Marketplace

  • our website and support services

Roles and Responsibilities

Customer (Data Controller)
The customer organisation determines:

  • what personal data is collected

  • how it is used

  • who can access it

  • how long it is retained

BusEnable (Data Processor)
BusEnable processes personal data:

  • on behalf of the customer

  • under customer instructions

  • to provide and support the BusEnable platform

For direct interactions (e.g. support enquiries), BusEnable may act as the data controller.

Information We Collect

We may process:

Customer Data

  • names and contact details

  • job titles and organisational roles

  • service requests, workflows, approvals

  • attachments, comments, communications

Technical Data

  • login and identity data (Microsoft Entra ID)

  • system logs and audit records

  • device, browser, and IP information

  • performance and diagnostic data

Business Contact Data

  • contact details from enquiries or support interactions

How We Use Information

We use personal information to:

  • deliver and operate the BusEnable platform

  • manage workflows, requests, and approvals

  • authenticate users and control access

  • provide support and troubleshooting

  • monitor performance and security

  • comply with legal and contractual obligations

We do not sell personal information.

Platform and Hosting

BusEnable is delivered as:

Dynamics 365 apps on Dataverse and Power Apps

  • Data is stored in the customer’s Microsoft Dataverse environment

  • Hosting is provided by Microsoft Azure

  • Data location is controlled by the customer’s tenant settings

Data Sharing

We may share information with:

  • Microsoft Corporation (platform provider)

  • authorised staff and service providers

  • the customer organisation

  • regulators if required by law

Product Development and Support Providers

BusEnable uses:

  • CoDigital Limited

  • Infrazone Limited

to support product development and technical operations.

These providers:

  • operate under BusEnable’s direction

  • may access data only where necessary

  • are bound by confidentiality and data protection obligations International Data Transfers

    Data may be processed in:

    • New Zealand

    • Australia

    • United States

    • United Kingdom and European Union

    We apply safeguards such as:

    • contractual protections

    • Standard Contractual Clauses where required

    • reliance on Microsoft compliance frameworks

Security

We use industry-standard protections including:

  • role-based access controls

  • secure authentication

  • encryption in transit and at rest

  • logging and monitoring

  • restricted support access

Security is shared between:

  • Microsoft (platform)

  • the customer (tenant configuration)

  • BusEnable (application controls)

Data Retention

  • Customer data is retained according to customer policies

  • BusEnable retains limited operational data for:

    • security

    • support

    • legal compliance

Your Rights

You may have rights to:

  • access your information

  • request correction

  • request deletion

  • restrict or object to processing

  • request data portability

If your data sits within a customer system, contact that organisation first.

Data Breaches

BusEnable maintains incident response processes and will notify customers without undue delay if a breach affecting customer data occurs.

Cookies

We may use cookies to:

  • maintain sessions

  • analyse usage

  • improve user experience

Children

BusEnable services are not intended for children.

Updates

We may update this policy from time to time. The latest version will always be published here.

Contact

BusEnable Limited
📧 support@busenable.com
📍 Level 2, 40 Lady Elizabeth Lane, Wellington 6011, New Zealand

Data Processing Addendum

BusEnable acts as a Data Processor on behalf of customers.

Purpose of Processing

  • service management

  • workflow automation

  • record handling and reporting

Subprocessors

  • Microsoft Corporation

  • CoDigital Limited

  • Infrazone Limited

Security

  • access controls

  • encryption

  • audit logging

Customer Responsibilities

Customers are responsible for:

  • lawful data collection

  • tenant configuration

  • access permissions

  • retention policies

Data Transfers

Where required, transfers rely on:

  • contractual safeguards

  • Standard Contractual Clauses

End of Service

  • data remains in the customer’s Microsoft environment

  • BusEnable ceases access