·Terms and Conditions

11. Competition. This competition (Competition) is conducted by the Xero entity domiciled in the country where you reside (as set out in the table at the bottom of these terms and conditions) (Xero, we, our or us), and the prize drawing will be hosted by Exchange Insights Pty Limited (Exchange Insights). The Competition is open from 9:00am PDT on 13th May 2024 until 11:59pm PDT on 9th June 2024 (Competition Period). By entering the Competition, an entrant (Entrant, you or your) agree to be bound by these terms and conditions (Terms).

22. Eligibility. In addition to any other requirements in the Terms, this Competition is only open to residents of a Participating Country (defined below) who have reached the age of majority in their place of residence at the time of entry, and is a Xero customer with an active subscription. Employees of Xero or any of its affiliates, and their immediate family members are not eligible to participate in the Competition.

·The Participating Countries are:

• 1Australia;
• 2United Kingdom; and
• 3United States (excluding all United States territories and possessions).

33. Entry Method. Here's how you enter the Competition. You can:

• 1Enter via survey: complete the customer experience survey 2024 and tick the box to be entered into the competition and enter your email
• 2Enter via Email: email customerinsights@xero.com during the Competition Period stating that you wish to be entered into the Competition (the effective time and date for an email entry is the date and time of receipt of the email by Xero)

·(the Entry Criteria).

44. No purchase or payment necessary to enter or win. A purchase or payment will not affect your chances of winning a prize. You have not yet won. The odds of winning a prize depends on the number of entries received. Competition is void where prohibited by law. Eligibility for the Competition is subject to all applicable laws.

55. Limit of 1 entry(ies) per Entrant. Entries received other than during the Competition Period, duplicate entries, entries that are incomplete, illegible, damaged, irregular, or that do not conform to any condition of the Terms, and any entries received by automated means or means that will subvert the entry process will be void. Xero will determine in its sole discretion what constitutes a valid entry. Proof of submission will not be deemed to be proof of receipt of entry by Xero. Xero has no obligation to notify you if your submission is void.

66. Selection of Winners.

• 1On or about June 10th 2024, Exchange Insights will select 60 winner(s) from all the entries that meet the Entry Criteria (each a Winner) with 20 Winner(s) selected from each Participating Country. The Winner(s) will be selected by random drawing. We may publish the Winners on our website within 24 hours after the end of the Competition Period. All Winners are subject to verification by Xero.
• 2Exchange Insights will notify each Winner that they've won via email within 14 days after the end of the Competition Period and advise how the Prize (defined below) will be made available to them. If a Winner (a) cannot be contacted or does not respond within seven (7) days of the email being sent by Xero; (b) is unable to accept the Prize for any reason; or (c) fails to comply with the Terms or fails to execute any required Competition documentation (eg. a release form or similar document or other legal or tax-related documents) within the specified timeframe, they will be deemed to have forfeited the Prize and Xero reserves right, in its sole discretion, to withdraw Prize and select an alternative Winner. Xero will arrange for the Prize to be delivered to the Winner(s).

77. Prize. Each prize consists of a pre-paid Visa gift card with a retail value of $100 in your local currency (Prize). Each Winner will receive a Prize. There will be a total of 60 Prize(s) awarded, with 20 to be awarded in Australia, 20 to be awarded in the UK and 20 to be awarded in the United States. The Prize is non-refundable, cannot be replaced if lost or stolen and cannot be substituted or redeemed for cash. There will be no Prize substitutions, except by Xero who reserves the right to substitute the Prize for another prize of equal or greater value if the Prize is not available for any reason as determined by Xero in its sole discretion. The prize is provided on an "as is" basis and Xero does not warrant that the Prize will meet the Winner's requirements or that it will be suitable for any particular purpose. All implied conditions or warranties about the Prize under any applicable law are excluded to the extent permitted by law, including (without limitation) warranties of merchantability and fitness for purpose. Winner is solely responsible for any and all applicable taxes (and the reporting thereof), expenses, fees, charges or duties associated with acceptance or use of the Prize (and for understanding and abiding by such tax laws that may apply to receipt of the Prize). The odds of winning a Prize in each Participating Country depends on the number of entries that meet the Entry Criteria received in the Competition Period in the applicable Participating Country. Xero will not be obligated to award all Prizes if there aren't a sufficient number of entries that meet the Entry Criteria. This Competition is in no way connected or associated with Visa.

88. General Conditions.

• 1Depending on how you enter the Competition, internet access, phone (including mobile), service, network, data and usage charges or any other rates imposed by your Internet or phone (including mobile) service providers may apply.
• 2Xero's decisions on all matters relating to this Competition will be final and we will not be obligated to discuss such decisions.
• 3Xero reserves the right, in its sole discretion, to modify, suspend or terminate the Competition and/or Competition Period for any reason whatsoever (including but not limited to, those events or circumstances beyond our reasonable control), without liability. In the event of suspension or termination of the Competition, Xero may award the Prize from among the entries that meet the Entry Criteria received up to the time of the suspension or termination.
• 4Any attempt to undermine the legitimate operation of this Competition or violate these terms may be a violation of law, and should any such attempt be made, Xero reserves the right to seek remedies and damages to the fullest extent permitted by law. Neither Xero nor its affiliates nor any of their respective directors, officers, employees, representatives and agents (Representatives) are responsible for (a) any theft, alteration, destruction or unauthorized access to entries; (b) problems downloading or uploading any Competition-related information or data to or from any website or platform; (c) any other technical problems, failures or malfunctions of any kind, including but not limited to those that may limit your ability to enter or participate in this Competition; or (d) technical, human error or unauthorized intervention that may occur in the administration of the Competition or processing of entries.
• 5By entering the Competition you consent to the use of your name, image and brand for Xero's and its affiliates' promotional use without further payment or compensation to you.
• 6By entering the Competition you consent to Xero and it's affiliates' collection, use and disclosure of your personal information for the purposes of administering the Competition which includes but is not limited to, using your personal information to communicate with you in relation to the Competition and publishing or making available to the public or to other Entrants, details of the Competition, including your name and location (if you are a Winner). You acknowledge and agree that your personal information will be used by Xero in accordance with Xero's privacy policy, a copy of which may be viewed online at https://www.xero.com/legal/privacy/. You can object to your details being published or made available, or reduce the amount of information published or made available, by emailing customerinsights@xero.com.
• 7By participating in this Competition, you (i) acknowledge that this Competition is in no way sponsored, endorsed, administered by or associated with any third party platform that we may use to advertise the Competition, and you release such platforms of any claims or damages related to this Competition. Xero is also not liable for any claims or damages related to your use of such platforms and related application registrations or downloads; and (ii) agree to comply with all applicable laws and regulations and confirm that your participation in the Competition or acceptance of the Prize doesn't violate such laws or any contract between you and any third party.

99. Limitation of Liability and Indemnity. To the extent permitted by law, Xero and its affiliates and each of their respective Representatives (the Released Parties), shall not be liable in any way (including, without limitation, in negligence) for any loss or damage whatsoever suffered (including, without limitation, direct, indirect or consequential loss) or for any loss or damage or personal injury suffered or sustained in connection with the Competition, or acceptance, possession, or use or misuse of the Prize. Other than liability we can't exclude by law, the Released Parties' aggregate liability in connection with the Competition is limited to NZD$100. By participating in the Competition, you agree to indemnify and hold harmless the Released Parties against any and all losses, costs (including legal costs), expenses, demands, damages or liability that they suffer, directly or indirectly as a result of any non-compliance by you with any of the Terms or participation in the Competition and/or in connection with the acceptance of the Prize, and use of entries by Xero.

1010. Severability. If there's any part of these terms that either one of us is unable to enforce, we'll ignore that part but everything else will remain enforceable.

1111. Copy of Terms. Copies of these Terms are available on Xero's website (www.xero.com). If you have any questions regarding the Competition, please contact Xero at: customerinsights@xero.com.

1212. Xero Entity and Governing Law. The following table sets out, for the Participating Country you are a resident of, the details of the applicable Xero entity and the laws that govern these Terms: Country: Australia

·Xero Entity and Address: Xero Australia Pty Limited 1/6 Elizabeth Street Hawthorn Melbourne VIC 3122 Registration Number: 160661183 Law: Victoria, Australia Country: United Kingdom

·Xero Entity and Address: Xero (UK) Limited Bank House 171 Midsummer Boulevard Milton Keynes, MK9 1EB Registration Number: 06071722 Law: England Country: United States

·Xero Entity and Address:

·Xero, Inc. 1615 Platte Street Suite 400 Denver, CO 80202 Registration Number: Not applicable Law: California, USA

·Last updated: 11 February 2025 Download PDF | See archived versions

·Table of contents

11. Who are we?

·When we say "Xero", "we", "our" or "us", we mean the Xero group of companies. Our headquarters are in New Zealand, but we operate and have offices all over the world. See our contact us page for more information.

·We provide an easy-to-use global online platform for small businesses and their advisors. At the core of our platform is our beautiful cloud accounting software. To find out more about what we do, see our about us page.

22. What does this notice cover?

·This notice describes how we process personal data. When we say "personal data" we mean information that relates to you, and from which you can be identified. Personal data includes your name, email, address, telephone number, bank account details, payment information, support queries, community comments and so on. In some countries, personal data can also include information about your device, such as your IP address and device type.

·This notice applies to personal data we collect across all our websites and apps, in connection with any services we provide. It also applies to personal data we collect from third party data sources, and through surveys, events, customer support, competitions, promotional programmes and training. For this notice, we'll just call them our "services".

33. What this notice doesn't cover

·This notice doesn't apply to personal data that our subscribers (people who create and pay for subscriptions to our services) or their invited users (people other than subscribers who have been invited to use our services by a subscriber) enter into our services about their own customers, suppliers, employees or other third parties. In those cases, our subscribers control that personal data and we process it only as a service provider (or "processor") on their behalf. If you're not a subscriber and have questions about this type of personal data, you'll need to contact the subscriber that controls it.

·If you provide us with any personal data about other people, you should make sure you are permitted to do so before sharing it with us.

44. Personal data we collect and how we get it

·The personal data we collect depends on how you interact with us. We collect personal data:

• ·When you provide it to us directly. This includes when you visit our websites, use our services, or provide personal data directly through other interactions with us. For example, we ask for your billing information when you sign up for a subscription or trial, and collect your contact information and any other details you share when you ask for support, or take part in training and events. You don't have to provide us with personal data, but if you don't it might mean you can't use parts of our services.
• ·Automatically. We collect some personal data about you automatically when you visit our websites or use our apps and services. For example, we collect data about the pages you look at and the links you click on.
• ·From third parties. Although we collect the majority of personal data about you directly or automatically, sometimes we might collect it from other sources. For example, from trusted third parties and service providers that help us deliver our services (such as providers of email, marketing, analytics, financial, credit and payment services) and from social media platforms.

·Personal data categories and sources

·We've summarised the categories of personal data we collect and their sources, below.

·Identity and contact data such as your name, email address, telephone number, address or social-media handle. We source this directly from you, automatically or from third parties.

·Account data such as your login and profile information, including your password, and subscription details. We source this directly from you or from third parties.

·Payment data such as truncated credit or debit card details, bank account details, payment method, billing address and other details of services that you have received from us. We source this directly from you, automatically or from third parties.

·Communications data such as feedback on our services and other communications with us or with our service providers, competition and survey entries, chat, email or call history, and call recordings if you consent to them. We source this directly from you, automatically, or from third parties.

·Marketing and advertising data such as interests based on your use of our services, survey responses, promotions you enter, communication preferences, preferences for particular services, and subscription details. We source this directly from you, automatically or from third parties.

·Device data such as data collected using tags and pixels, including your IP address, ISP, the browser you use to visit our websites, device type and location, operating system, device identifiers and advertising identifiers. We source this automatically.

·Service usage data such as information about your use of and interaction with our services, including third party services you have integrated. This includes page views and searches, login information, clicks, content interaction, length of visits, and other functional information on service performance. It also includes service utilisation, such as features you buy and use, as well as (if you are a subscriber) how you manage organisations and invited users within your subscription. We source this automatically.

·Uploaded content such as any personal data in photographs, videos or audio recordings that you upload on our websites, apps, services or social media (where you allow us). We source this directly from you or from third parties.

·Sensitive personal information such as health data, or trade union membership details that you may provide to us. Note that we don't generally require or request sensitive personal information to operate our services. We source this directly from you.

55. How we use your personal data

·We use your personal data to operate our services, and to manage our relationship with you. We'll otherwise only use your personal data for:

• ·The purposes in this notice or that we explain to you when we collect your personal data.
• ·Other purposes that are related to the ones in the first dot-point where permitted by law.

·Purposes for using personal data

·We've set out more information about the specific purposes for which we use your personal data below.

·To deliver our services. For example, to sign you up to our services, manage your trial or subscription, facilitate purchases of services, and provide, maintain and deliver our services (including using AI/ML) in accordance with our terms of use. This includes monitoring, troubleshooting, data analysis, testing, system maintenance, reporting and hosting of data.

·The categories of personal data we use for this purpose are: identity and contact data, account data, payment data, communications data, device data, and service usage data.

·To communicate with you about our services. For example, we may send you service updates, invoices, technical notices, security alerts, support messages and responses to your enquiries. We may contact you through a variety of channels, for example, by email, telephone, SMS and in-product communications.

·The categories of personal data we use for this purpose are: identity and contact data, account data, payment data, communications data, device data, service usage data, and uploaded content.

·For quality assurance, training and record-keeping. For example, we may review communications with you for customer support, quality assurance and training purposes, and related record-keeping.

·The categories of personal data we use for this purpose are: Identity and contact data, account data, payment data, communications data, device data, service usage data, and uploaded content.

·For security management. For example, to address threats and fraud, and protect you, our business and people, we may use malware and other monitoring tools to detect suspicious activity and block unauthorised access.

·The categories of personal data we use for this purpose are: identity and contact data, account data, payment data, communications data, device data, location data, service usage data, and uploaded content.

·For compliance management. For example, to ensure compliance with our terms of use and related internal reporting.

·The categories of personal data we use for this purpose are: identity and contact data, account data, payment data, communications data, service usage data, device data, and uploaded content.

·To improve our services. For example, we analyse collected data to improve our websites, apps and services, to develop new products and services, and inform other business decisions by understanding customer behaviour (including using AI/ML).

·The categories of personal data we use for this purpose are: identity and contact data, account data, payment data, communications data, marketing and advertising data, device data, service usage data, and uploaded content.

·For marketing communications. For example, to contact you about services, promotions, competitions and events we think may be of interest, including those of our affiliates and partners. We may contact you through a variety of channels, for example, by email, telephone, SMS and in-product communications.

·The categories of personal data we use for this purpose are: identity and contact data, account data, communications data, marketing and advertising data, device data, service usage data, and uploaded content.

·To personalise content. For example, we may provide local or otherwise targeted content and information for customers, and to tailor the content served on our websites and apps, and via our services.

·The categories of personal data we use for this purpose are: identity and contact data, account data, marketing and advertising data, device data, and service usage data.

·For personalised advertising. For example, we may personalise, target, and deliver advertising on our websites and apps, and via third party websites and other online services. We may also identify audiences and individuals like you to better tailor our marketing campaigns and communications, and measure the effectiveness of our campaigns and adjust our methods.

·The categories of personal data we use for this purpose are: identity and contact data, account data, marketing and advertising data, device data, and service usage data.

·To run competitions, sweepstakes or surveys. The categories of personal data we use for this purpose are: identity and contact data, account data, communications data, marketing and advertising data, and uploaded content.

·For legal and regulatory compliance. For example, to comply with any legal and regulatory obligations which apply to us, including responding to requests under data protection or other applicable laws.

·The categories of personal data we use for this purpose are: identity and contact data, account data, payment data, communications data, device data, service usage data, and uploaded content.

·To manage legal claims. For example, to preserve our legal rights, and defend and bring claims to protect our interests.

·The categories of personal data we use for this purpose are: identity and contact data, account data, payment data, communications data, device data, and service usage data.

66. Cookies and similar tracking technology

·We use cookies and similar tracking technology ("cookies") to collect and use personal data about you, including to serve interest-based advertising. For more information about the types of cookies we use and why, and how you can control them, please see our cookie notice.

77. How we share your personal data

·There will be times when we need to share your personal data with third parties. We'll only share your personal data with:

• ·Other companies in the Xero group of companies who enable us to provide you with our services or who otherwise use personal data for the purposes in this notice.
• ·Third party service providers and partners who also enable us to provide you with our services or who otherwise use personal data for the purposes in this notice. For example, we may share your personal data with service providers that assist us with billing, customer support, hosting and storage, data analytics, security, marketing and email services. We won't share your mobile telephone number or SMS opt-in consent status with these third parties for their own marketing purposes without your explicit consent.
• ·Third party services that you integrate with on our websites and apps, or through our services, for example, an app on the Xero App Store. Note that your personal data will be managed by the provider of those services according to their own terms and privacy policy.
• ·Regulators, law enforcement bodies, government agencies, courts or other third parties where we think it's necessary to comply with applicable laws or regulations, to exercise, establish or defend our legal rights, or to protect your interests or those of any other person. Where possible and appropriate, we'll notify you of this type of sharing.
• ·Actual or potential buyer (and its agents and advisers) in connection with any proposed purchase, merger or acquisition of any part of our business.
• ·Other people where we have your consent or where permitted by law.

·Also, if you've been invited to use our services by a subscriber, we may share data relating to your use of our services with that subscriber.

88. Personal data retention

·We'll retain your personal data for as long as we've a relationship with you and for a period of time afterwards where we have an ongoing business or legal need to keep it. For example, to comply with legal, tax, or accounting requirements. After that, we'll make sure it's deleted or anonymised.

99. Security

·Security is a priority for us when it comes to your personal data. We're committed to protecting your personal data and have appropriate technical and organisational measures in place to make sure that happens. For more information, check out Xero's security pages.

·If you want more detailed information, we've produced a Service Organisation Control (SOC 2) report, which is available on request. The SOC 2 report was produced after an independent auditor's examination of our service controls.

·To keep up to date on known phishing and other scams targeting our community, and for information on how to protect yourself from them, sign up to our security noticeboard.

1010. International transfers

·When we share personal data, it may be transferred to and processed in countries other than the country you live in-such as Australia, New Zealand and the United States-due to the location of our teams and data hosting locations. These countries may have laws different to the ones that apply in your country. Rest assured, when we transfer personal data to another country, we put safeguards in place to protect your personal data.

1111. Your rights

·It's your personal data and you have certain rights relating to it. When it comes to marketing communications, you can ask us not to send you these at any time. Just follow the unsubscribe instructions in the marketing communication or make your request using the details in the 'How to contact us' section.

·You also have rights to:

• ·Know whether and what personal data we hold about you, and to correct it if it's inaccurate or out-of-date.
• ·Request a copy of your personal data, or ask us to restrict processing your personal data or delete it.
• ·Object to our continued processing of your personal data.
• ·Not be subject to wholly automated decisions that have legal or significant effects upon you, and to challenge the decision and request a human review.

·You can exercise these rights at any time by making a request using the details in the 'How to contact us' section.

·If you're not happy with how we are processing your personal data, please get in touch with us using the 'How to contact us' section. We'll review and investigate your complaint, and get back to you within a reasonable time frame. You can also complain to your local data protection authority. They will be able to advise you how to submit a complaint.

1212. Updates to this notice

·We may update this notice from time to time. If we make a material change, we'll make sure we let you know, usually by sending you an email or posting a notice on our websites and in our apps.

1313. How to contact us

·We're always keen to hear from you. If you're a current user of our services, you can get in touch via our privacy at Xero page. For everyone else, you can contact us at legalnotices@xero.com.

1414. Additional information if you're in the EEA or UK

·If you're in the European Economic Area ("EEA") or United Kingdom ("UK"), this section applies to you in relation to the personal data we process under this notice.

·Controllers and representative

·UK Controller. If you're in the UK, Xero (UK) Limited is the controller of your personal data. Xero (UK) Limited's address is 5th Floor 100 Avebury Boulevard, Milton Keynes, MK9 1FH, United Kingdom.

·EEA Controller. If you're in the EEA, Xero (NZ) Limited is the controller of your personal data. Xero (NZ) Limited's address is 19-23 Taranaki Street, Te Aro, Wellington, 6011, New Zealand.

·EU Representative. Xero (NZ) Limited's EU representative is Xero Denmark A/S. Xero Denmark A/S's address is Kuglegårdsvej 7, 1434, Copenhagen K, Denmark.

·Legal bases for processing personal data

·Below, we've set out the legal bases we rely on to process your personal data for the purposes in this notice (for a description of each purpose, see the 'How we use your personal data' section):

·Contractual necessity. We need certain personal data to provide and support the services we provide under our terms of use.

·We rely on this legal basis: to deliver our services, and to communicate with you about our services.

·Consent. We may ask for your consent (separately from any contract between us) before we process your personal data, in which case you can voluntarily choose to give or deny your consent.

·We rely on this legal basis: to improve our services, for marketing communications, to personalise content, for personalised advertising, and to run competitions, sweepstakes or surveys.

·Legitimate interest. We may process your personal data for our or a third party's legitimate business interests. We'll only do this when we're confident that a legitimate interest exists and the processing is needed to achieve it. We'll also make sure your privacy rights are appropriately protected and don't override the legitimate interest we've identified.

·We rely on this legal basis: for quality assurance, training and record-keeping, for security management, for compliance management, to improve our services, for marketing communications, to personalise content, for personalised advertising, and to manage legal claims.

·Legal obligation. There may be cases when we must use your personal data to comply with laws or to fulfil certain legal obligations.

·We rely on this legal basis: for security management, for compliance management, for legal and regulatory compliance, and to manage legal claims.

·International transfers of personal data from the EEA and UK

·If you're in the EEA or UK, we'll only transfer your personal data to countries that provide adequate protection for EEA and UK personal data (like New Zealand), or to countries where we have appropriate safeguards in place with the recipient to protect your personal data, for example, by entering into "standard contractual clauses" or equivalent terms approved by the relevant authorities. For more information, please contact us using the details in the 'How to contact us' section.