Privacy Policy

New Zealand: how this board handles your information

• This board is operated by Beyond Peaks LLC (Beyond Peaks合同会社), 1-44-5 Kamiikedai, Ota-ku, Tokyo 145-0064, Japan. We are responsible for the personal information you give us here, and for it we follow New Zealand's Privacy Act 2020 as well as the Japanese law described in the rest of this policy.
• Where it is stored: your account, profile, documents and applications are stored in Japan, on our database in Tokyo. Some service providers process data in other countries, as described in sections 8 and 11. When you create an account or join this board, you agree to your information being held in Japan.
• Who sees it: an employer or recruitment agency sees your details only when you apply to one of their roles, and only the details shown to you before you send. A recruitment agency may pass your application to the employer it is recruiting for.
• Work rights: on this board you tell employers your work rights yourself, and they confirm them with you. We do not assess visas or give immigration advice, and the Japanese visa tools in sections 3 and 7 are not offered here.
• Your rights: you can ask to see the personal information we hold about you and ask us to correct it. Write to info@beyondpeaks.jp; we reply within 20 working days.
• Complaints: if you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.

1. Who We Are

Queenstown.Jobs ("we", "us", "our") is operated by Beyond Peaks LLC (Beyond Peaks合同会社), a limited liability company established in Japan ("Beyond Peaks"). Beyond Peaks is the business operator handling personal information (個人情報取扱事業者) under Japan's Act on the Protection of Personal Information ("APPI") and the data controller for the purposes of laws such as the EU/UK General Data Protection Regulation ("GDPR") where those laws apply. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at queenstown.jobs and related services, including our other regional job boards, which share the same infrastructure. You can contact us about anything in this policy at info@beyondpeaks.jp.

2. Information We Collect

We collect the following categories of information, depending on how you use the platform:

• Account information: your name, email address, and authentication data (such as a password or one-time login codes).
• Candidate profile information: nationality, date of birth, address or current location, phone number, photo, languages, work experience, education, desired roles and start date, and your resume/CV and other documents you upload.
• Visa and immigration information: your residence status, visa situation, work eligibility details, and information you provide when using our visa or work-readiness tools (including answers you give in guided chat conversations). We treat this information with heightened care — see Section 3.
• Employer information: company name, description, addresses, contact details, logo, information about representatives who manage the account, verification details, and billing information for paid services.
• Application information: when you apply for a job, we create a snapshot of the profile details you choose to submit (name, contact details, nationality, education, visa situation, photo, and resume) so the employer receives an accurate record of your application as of that moment.
• Reviews and community content: review text, ratings, your chosen display name, and the email address used to verify your review (your email is never displayed publicly).
• Communications: messages exchanged with employers or candidates through the platform, and correspondence with us.
• Consent records: a log of the consents you give or withdraw (what you consented to, the version of the text, and when).
• Billing records: invoices and payment status for paid employer services. Payment is currently by invoice (such as bank transfer); if we accept card payments, they are processed by a dedicated payment provider (such as Stripe), and full card numbers are never stored on our systems.
• Technical and usage data: IP address, browser and device information, pages visited, features used, cookies, and analytics identifiers.

3. Visa and Immigration Data

Information about your residence status and visa situation is provided by you voluntarily and is used only to operate the features you request — such as indicating your work eligibility to employers you apply to, or generating informational work-readiness assessments. Our visa tools are informational only: they do not make immigration decisions, and no assessment result has any legal effect. We never use nationality as a factor to score or rank candidates.

4. Purposes of Use

We use your personal information for the following purposes:

• To operate the platform: hosting candidate profiles, employer directories, job listings, applications, reviews, and messaging.
• To deliver applications to employers and, where you opt in to scouting, to make your profile visible to registered employers.
• To provide informational visa and work-readiness tools you choose to use.
• To offer you, where you specifically opt in, use of your candidate profile on our other destination job boards, so you do not have to re-enter your details. Each destination is a separate, independently revocable opt-in, and we tell you where your data would go before you choose.
• To verify accounts, moderate reviews and content, and keep the platform safe and trustworthy.
• To send service notifications (such as application status updates) and, with your consent, optional communications.
• To translate platform content between English and Japanese so both audiences can use the service.
• To invoice and collect payment for paid employer services.
• To analyze aggregate usage and improve the platform.
• To comply with legal obligations and respond to lawful requests.
• We will not use your personal information for purposes beyond these without informing you or obtaining your consent as required by law.

5. AI-Assisted Processing

Some features use artificial intelligence to process the information you provide:

• Resume extraction: when you upload a resume, AI may extract structured details (experience, education, languages) to help fill in your profile. You can review and correct the results.
• Job matching: AI may suggest jobs that fit your profile. Suggestions are informational and do not affect your ability to apply to any job.
• Translation: reviews and other content may be machine-translated between English and Japanese.
• Work-readiness assessments: our guided visa tools use a rules-based engine, supported by AI, to produce informational assessments only.
• AI providers (currently Anthropic and OpenAI) process this data as our service providers under contract and are not permitted to use your personal information to train their general-purpose models.
• No decision that produces legal effects or similarly significant effects on you is made solely by automated means.

6. Sharing With Employers

When you apply for a job, the application snapshot described in Section 2 is shared with that employer. If you opt in to scouting, the profile details you choose to make visible can be viewed by registered employers so they can contact you about opportunities; you can switch scouting off at any time in your profile settings. Employers are contractually required to use candidate information only for recruitment purposes and to keep it confidential.

7. Sharing for Visa Support

If you request visa support, we share the minimum necessary details with a partner licensed immigration specialist (行政書士, administrative scrivener) only after obtaining your explicit, recorded consent. You may withdraw that consent at any time, which stops further sharing.

8. Service Providers

We use a small number of service providers to run the platform. They process personal information only on our instructions and under contracts consistent with applicable data protection law:

• Supabase — database, authentication, and file storage (Tokyo region).
• Vercel — web hosting and content delivery.
• Resend — transactional email delivery (verification codes, notifications).
• Google Analytics — aggregate usage measurement (see Section 10).
• Anthropic and OpenAI — AI processing described in Section 5.
• Base44 — the legacy application platform that continues to host some of our boards during our infrastructure migration (see Section 16).

9. Other Disclosures

We do not sell your personal information. Beyond the sharing described above, we disclose personal information only: when required by law or a competent authority; where necessary to protect life, safety, or property; to enforce our terms or protect our legal rights; or in connection with a merger, business transfer, or succession, in which case the recipient remains bound by this policy and we will notify you of any material change.

10. Cookies and Analytics

We use essential cookies to keep you signed in and remember your preferences. We also use Google Analytics to understand how the platform is used; this involves cookies and the collection of technical data such as your IP address and device information by Google on our behalf. We do not use third-party advertising cookies. You can limit analytics through your browser settings or Google's opt-out tools; essential cookies are required for the platform to function.

11. International Data Transfers

Our primary database infrastructure is located in Japan (Tokyo), but some of our service providers store or process data outside Japan — including in the United States (for example, our hosting, email, analytics, and AI providers). Where personal information is transferred outside Japan, we take the measures required by the APPI, including contracts requiring the recipient to protect your data to a standard equivalent to the APPI. Further information about the countries involved and the safeguards in place is available on request at info@beyondpeaks.jp.

12. Data Retention and Deletion

We keep your personal information while your account is active. You can request deletion of your account at any time; deletion requests are processed after a short grace period (currently 14 days, so you can change your mind), after which your personal information is deleted or irreversibly anonymized. Note that: application snapshots already delivered to an employer are held by that employer under its own legal obligations; review content may be retained in anonymized form; and we may retain limited records where the law requires it (for example, billing and tax records). Residual copies in encrypted backups are purged on our normal backup cycle.

13. Security

We protect your information with measures including encryption in transit, access controls and least-privilege administration, row-level database security, and time-limited signed links for private files such as resumes. Our infrastructure providers maintain independent security certifications such as SOC 2 and ISO 27001. No method of transmission or storage is completely secure, and we cannot guarantee absolute security, but we review our safeguards regularly and will notify you and the relevant authorities of any data breach as required by law.

14. Your Rights

You can exercise the following rights at any time by contacting info@beyondpeaks.jp or using your account settings:

• Request disclosure of the personal information we hold about you, including records of third-party provision (APPI).
• Correct, complete, or update inaccurate information.
• Request deletion of your account and personal information, or cessation of use or third-party provision.
• Opt out of scouting visibility at any time in your profile settings.
• Withdraw any consent you have given (including visa-support sharing and optional communications) without affecting prior lawful processing.
• Request a copy of your data in a portable format.
• If the GDPR applies to you, you also have the rights of access, rectification, erasure, restriction, portability, and objection, and the right to lodge a complaint with your supervisory authority.
• You may also lodge a complaint with Japan's Personal Information Protection Commission (PPC).
• We will verify your identity before acting on a request and respond without undue delay.

15. Children

The platform is not intended for individuals under 18 years of age, and we do not knowingly collect information from children. If you believe a minor has provided us personal information, contact us and we will delete it.

16. Platform Migration

In order to serve more users and expand access to more destinations in Japan and beyond, we are upgrading our job boards from the Base44 platform to infrastructure we operate directly (built on Supabase and Vercel, with candidate identity and consent managed in our Watari system). Beyond Peaks remains the operator and responsible party for your personal information throughout; migration does not change the purposes of use or your rights, and your existing consents and consent records move with your account. Our services may in future be operated jointly with, or succeeded by, an affiliated entity under common control (for example, a dedicated Watari company). Any such change would take the form of a business succession under applicable law: the purposes of use would not change, the successor would be bound by this policy, your consent records would travel with your account, and we would notify you before the change takes effect. We will update Section 8 as providers change.

17. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date above shows the current version. We will notify registered users of material changes by email or platform notification before they take effect.

18. Contact Us

Beyond Peaks LLC (Beyond Peaks合同会社) operates this platform from Japan. For questions, requests, or complaints about this Privacy Policy or your personal information, contact us at info@beyondpeaks.jp. We aim to respond promptly to all privacy inquiries.