Legal & policies
Everything that governs how Pallara handles your institution's data, what we commit to, and what we ask of you. Written to be read, not to be survived.
Last updated 18 August 2026
Pallara is operated by PaaS HQ Limited. These documents apply to the Pallara platform at
pallara.app and every tenant portal served from it.
The documents
| Document | What it covers |
|---|---|
| Privacy policy | What personal information we collect, why, who we share it with, and the rights people have under the Privacy Act 2020. |
| Terms of service | The agreement between your institution and us — the service, fees, liability, term and termination. |
| Data processing terms | Our commitments when we process learner information on your institution's behalf. Forms part of the terms. |
| Sub-processors | Every third party that may process your data, what for, and where. |
| Security | How tenant isolation, encryption, access control, auditing and vulnerability reporting actually work. |
| Acceptable use | What the platform may and may not be used for. |
| Accessibility | Our accessibility commitment, current conformance and how to report a barrier. |
| Cookies | The cookies we set and why. There is no advertising or cross-site tracking. |
| API reference | Authentication, endpoints and limits for the tenant data API. |
Where responsibility sits
For learner information held in your tenant, your institution is the agency under the Privacy Act 2020 and we are its service provider. You decide what is collected and why; we hold and process it under your instructions and the terms below. Statutory reporting obligations to the Tertiary Education Commission, NZQA and the Ministry of Education remain your institution's — Pallara prepares and, where a connection is enabled, transmits those returns on your instruction.
For information about the people who buy and administer Pallara — your staff contact details, billing records, support correspondence — we are the agency and the privacy policy applies to us directly.
Getting hold of us
| Topic | Address |
|---|---|
| Privacy requests and complaints | [email protected] |
| Security reports and vulnerabilities | [email protected] |
| Contractual and legal | [email protected] |
| Everything else | Contact us |
Post: PaaS HQ Limited, 602 York Road, Midhirst 4394, New Zealand.