Diabetes New Zealand Privacy Policy

Purpose

Diabetes NZ respects the confidentiality of the information we gather, and we are committed to upholding individual privacy.

Diabetes NZ will take all reasonable steps to ensure that individual information and the dissemination of that information is protected from misuse or unauthorised disclosure.

This policy ensures that Diabetes NZ complies with obligations under the relevant privacy legislation (in particular the Privacy Act 2020) and any future amendments or changes.

Our Commitment to the Privacy Act 2020

Diabetes New Zealand:

  • Keeps all personal information confidential and secure. Access to information is limited to those staff who require it to perform their duties.

  • Does not sell, rent, or lease personal information to any other party (unless required by law).

  • Keeps security measures in place to prevent unauthorised access or distribution.

  • Uses contact database information only for the purpose that the information has been gathered.

  • Respects the privacy principles stated in the Privacy Act 2020.

  • Regularly checks that information held is accurate, complete, relevant, up to date, and gives individuals the opportunity to amend or remove their personal information from our records

  • Keeps personal information on a secure cloud based server. Information is not stored at a local level. When it is required to download information to facilitate operations as above, the downloaded data is deleted immediately after use.

  • Takes reasonable steps to ensure that individuals know why their data is being collected, who will receive it, whether giving it is compulsory or voluntary, and what will happen if they don’t choose to provide their information, for example they will not receive updates on activities in their local area.

Individuals have the right to access and correct their personal information

Individuals have the right to access and correct their personal information, and to opt out of participating in any of Diabetes New Zealand’s services. To find out more about how to do this, please ring +64 4 499 7145 or email admin@diabetes.org.nz.

Disclosure of personal information

Disclosure will not identify the individual.

Diabetes NZ will not disclose personal information to anyone other than the individual concerned unless:

  • Disclosure is for a purpose for which the information is obtained.

  • Source of information is publicly available.

  • Disclosure is authorised by the individual concerned.

  • Disclosure is necessary to prevent or lessen a serious and imminent threat to public health and safety, or the individual’s life and health.

  • Disclosure is required for the maintenance of the law under current legislation, for example, following a request from:

    • NZ Customs

    • NZ Police

    • Work and Income

    • Ministry of Social Development

    • Inland Revenue.

Personal information may be hosted with a service provider. In this situation Diabetes NZ agreements with the service provider must ensure personal information is protected from unauthorised disclosure.

Purposes for which Diabetes NZ holds personal information:

Diabetes NZ may collect personal information about you (such as your first and last name, mailing address, telephone number, email address, credit card number, directly from you, when you use the website, phone, correspond by letter or email.

This information will not be disseminated or misused to the detriment of Diabetes NZ or its members. It may be used by Diabetes NZ to send information and updates about products and services that may be of interest to people on the database.

Diabetes NZ primarily holds personal information for the following purposes:

  • To process any commercial transactions on the Diabetes NZ website. Information will be destroyed once the transaction is complete unless users give consent for it to be retained on our secure server.

  • To help provide any other requested services.

  • To provide information that might be of interest.

  • For any marketing, promotional, publicity, direct marketing or market research that we might undertake.

  • For any other purposes for which permission has been given.

Management of personal information

Diabetes NZ respects the confidentiality and the privacy of all individuals and organisations we deal with. Diabetes NZ treats breaches of privacy very seriously and will action breaches in accordance with its legal obligations and this policy. Diabetes New Zealand’s Chief Executive is responsible for ensuring the management of personal information is in accordance with this policy and the relevant privacy legislation.

In line with the Privacy Act 2020, Diabetes NZ has a data breach procedure and incident plan in place, including notifying affected individuals and the New Zealand Privacy Commissioner where required.

Storage of personal information

Safeguarding the privacy of information is important to Diabetes New Zealand, whether the interaction occurs in person, by phone, mail, over the internet or other electronic medium.

Diabetes NZ holds personal information in a combination of secure computer and network storage facilities and paper-based files and other records, and takes steps to protect the personal information we hold from misuse, loss, unauthorised access, modification or disclosure. Diabetes NZ may need to maintain records for a significant period of time, however when Diabetes NZ considers the information is no longer needed, any details that will identify the individual or the records will be securely destroyed.

Changes to confidentiality and privacy policy

In the event that there are changes to this policy, the revised document will be published on the Diabetes NZ website: www.diabetes.org.nz.

Any questions or concerns regarding privacy should be directed to +64 4 499 7145, 0800 DIABETES (0800 342 238) or admin@diabetes.org.nz.

Accountabilities

The Board of Diabetes NZ is responsible for establishing and overseeing Diabetes New Zealand’s commitment to managing confidentiality and privacy in accordance with this policy.

The Chief Executive of Diabetes NZ is responsible and accountable for the administration of this policy and the implementation of the necessary measures to ensure the commitments made in this policy are being met within their organisation.

All employees, volunteers, and contractors are responsible for ensuring that confidentiality and privacy of information is maintained in accordance with this policy.

Google Analytics and its Demographic and Interests reports

Diabetes NZ uses Google Analytics and its Demographic and Interests reports to determine which pages on our site attract the most interest, which content is of interest to which groups of people and to inform our content strategy so we can ensure we deliver the best quality content possible. We do this using a feature of your browser called a cookie to assign your computer a 'User ID'. Cookies do not contain information by which we can identify you – they only identify your computer to our servers. We do not use these cookies together with any other cookies to identify you. You can opt-out of Google Analytics by using the Google Analytics Opt-out Browser Add-On.

Donor Privacy Policy

What information we collect:

Diabetes New Zealand collects and uses various personal information from individuals that includes: name, amount donated, address, telephone numbers, e-mail address, comments and date of birth.

How we use that information:

  • Diabetes New Zealand will use contact information (e-mail, telephone number and address) of individuals for these purposes only:

  • Distribute receipts for donations

  • Thank donors for their donation

  • Inform supporters about upcoming fundraising and other activities of DNZ. Examples of this may include (but are not limited to); Inclusion in our direct mail appeals, telephone appeals, and invitation to donor events. Donors have the right to opt out of their details being used in this way and can contact admin@diabetes.org.nz at any time to do so.

  • Advise volunteers of volunteer opportunities

  • Internal analysis and record keeping

NB: Staff and volunteers assume all donations are not to be publicly announced unless the donor explicitly indicates otherwise.

Comments given in donor forms may be used in promotional materials or for service improvements while comments sent to us via email, fax or telephone are kept strictly confidential.

Access and Correction of Information:

You have the right to access and request a correction to your personal information. To ensure that your recorded personal information is accurate and up-to-date, please notify us of any changes to your personal details as soon as possible, please phone +64 4 499 7145, or 0800 DIABETES (0800 342 238) or email admin@diabetes.org.nz.

Financial information:

All access to donor financial information is strictly limited to professional staff that need to process this data. Diabetes New Zealand uses Direct Payment Solutions (DPS) for our online payment processing with world-class security, compliance procedures and strong reputation.

Find out more about DPS and their data-handling policies at: www.paymentexpress.co.nz