Diabetes New Zealand Privacy Policy

Purpose

Diabetes New Zealand respects the confidentiality of the information we gather, and we are committed to upholding individual privacy.

Diabetes New Zealand will take all reasonable steps to ensure that individual information and the dissemination of that information is protected from misuse or unauthorised disclosure.

This policy sets out the commitment of Diabetes New Zealand to comply with obligations under privacy law (in particular the Privacy Act 2020) and any amendments or changes.

Our Commitment to the Privacy Act 2020

Diabetes New Zealand:

  • Keeps all personal information confidential and secure. Access to information is limited to those staff who require it to perform their duties.

  • Does not sell, rent, or lease personal information to any other party.

  • Keeps security measures in place to prevent unauthorised access or distribution.

  • Uses contact database information only for the purposes for which it was collected, generated, or for directly related purposes.

  • Respects the privacy principles stated in the Privacy Act 2020.

  • Takes reasonable steps to ensure that information held is accurate, complete, relevant and up to date.  

  • Stores personal information using secure electronic systems and takes reasonable steps to protect it from loss, unauthorised access, use, modification or unauthorised disclosure. Where personal information is downloaded or accessed locally for operational purposes, we take reasonable steps to ensure it is securely managed and deleted when no longer required.

  • Takes reasonable steps to ensure that individuals know why their data is being collected, who will receive it, whether giving it is compulsory or voluntary, and what will happen if they don’t choose to provide their information, for example they will not receive updates on activities in their local area.

  • Where Diabetes New Zealand collects personal information about an individual from a source other than that individual, Diabetes New Zealand will take reasonable steps to notify the individual of the collection by Diabetes New Zealand and the matters required by the Privacy Act 2020, unless an exception under that Act applies.

Individuals have the right to access and correct their personal information, and to opt out of participating in any of Diabetes New Zealand’s services. To find out more about how to do this, please ring +64 4 499 7145 or email info@diabetes.org.nz

Disclosure of personal information

Diabetes New Zealand will not disclose personal information to anyone other than the individual concerned unless:

  • Disclosure is for a purpose for which the information is obtained.

  • Disclosure is authorised by the individual concerned.

  • Disclosure is necessary to prevent or lessen a serious and imminent threat to public health and safety, or the individual’s life and health.

  • Disclosure is otherwise permitted or required by law.

Diabetes New Zealand may store or process personal information in New Zealand or overseas using third-party service providers. Diabetes New Zealand takes reasonable steps to ensure that those service providers protect personal information and handle it in accordance with applicable privacy obligations.

Purposes for which Diabetes NZ holds personal information:

Diabetes New Zealand may collect personal information directly from you when you use our website, contact us by phone, or correspond with us by letter or email. This information may include your name, address, telephone number, email address and payment information.

This information may be used by Diabetes New Zealand to provide its services, communicate with you, administer its activities, and keep you informed about matters that may be relevant or of interest to you.

Diabetes New Zealand primarily holds personal information for the following purposes:

We will only use and share your personal information for the purposes it was collected or generated, or directly related purposes. This may include but not be limited to: 

  • process any commercial transactions on the Diabetes New Zealand website.

  • help provide any other requested services.

  • provide information that might be of interest.

  • any fundraising, marketing, promotional, publicity, direct marketing or market research that we might undertake.

  • carry out our functions like - advocacy, support services, and raising funds to be able to continue providing our services.

  • any other purposes for which permission has been given.

Management of personal information

Diabetes New Zealand respects the confidentiality and the privacy of all individuals and organisations we deal with. Diabetes New Zealand treats breaches of privacy very seriously and will action breaches in accordance with its legal obligations and this policy. Diabetes New Zealand’s Chief Executive is responsible for ensuring the management of personal information is in accordance with this policy and privacy law.

In line with the Privacy Act 2020, Diabetes New Zealand has a data breach procedure and incident plan in place, including notifying affected individuals and the New Zealand Privacy Commissioner where required.

Storage of personal information

Safeguarding the privacy of information is important to Diabetes New Zealand, whether the interaction occurs in person, by phone, mail, over the internet or other electronic medium.

Diabetes New Zealand holds personal information in a combination of secure computer and network storage facilities and paper-based files and other records, and takes steps to protect the personal information we hold from misuse, loss, unauthorised access, modification or disclosure. Diabetes New Zealand may need to maintain records for a significant period of time.

Diabetes New Zealand retains personal information only for as long as it is required for the purpose for which it was collected, or as required by law. When personal information is no longer required, Diabetes New Zealand will take reasonable steps to securely destroy or de-identify that information.

Changes to confidentiality and privacy policy

If there are changes to this policy, the revised document will be published on the Diabetes New Zealand website: www.diabetes.org.nz

Any questions or concerns regarding privacy should be directed to +64 4 499 7145, 0800 DIABETES (0800 342 238) or info@diabetes.org.nz

Accountabilities

The Board of Diabetes New Zealand is responsible for establishing and overseeing Diabetes New Zealand’s commitment to managing confidentiality and privacy in accordance with this policy.

The Chief Executive of Diabetes New Zealand is responsible and accountable for the administration of this policy and the implementation of the necessary measures to ensure the commitments made by Diabetes New Zealand in this policy are being met.

All employees, volunteers, and contractors are required to maintain confidentiality and privacy of information in accordance with this policy.

Google Analytics and its Demographic and Interests reports

Diabetes New Zealand uses Google Analytics and its Demographic and Interests reports to determine which pages on our site attract the most interest, which content is of interest to which groups of people and to inform our content strategy so we can ensure we deliver the best quality content possible. We do this using a feature of your browser called a cookie to assign your computer a 'User ID'. Cookies do not contain information by which we can identify you – they only identify your computer to our servers. We do not use these cookies together with any other cookies to identify you. You can opt-out of Google Analytics by using the Google Analytics Opt-out Browser Add-On.

Donor Privacy Policy

What information we collect:

Diabetes New Zealand collects and uses various personal information from individuals that includes: name, amount donated, address, telephone numbers, e-mail address, comments and date of birth.

How we use that information:

Diabetes New Zealand will use contact information (e-mail, telephone number and address) of individuals for the following purposes:

  • Distribute receipts for donations

  • Thank donors for their donation

  • Inform supporters about upcoming fundraising and other activities of Diabetes New Zealand. Examples of this may include (but are not limited to); Inclusion in our direct mail appeals, telephone fundraising appeals, and invitation to donor events. Donors have the right to opt out of their details being used in this way and can contact info@diabetes.org.nz at any time to do so.

  • Advise volunteers of volunteer opportunities

  • Internal analysis and record keeping

NB: Staff and volunteers assume all donations are not to be publicly announced unless the donor explicitly indicates otherwise.

Comments provided in donor forms may be used in promotional materials or for service improvements with the donor’s consent or where comments have been de-identified. Donor comments received via email or telephone are kept strictly confidential.

Access and Correction of Information:

You have the right to access and request a correction to your personal information. To ensure that your recorded personal information is accurate and up-to-date, please notify us of any changes to your personal details as soon as possible, please phone +64 4 499 7145, or 0800 DIABETES (0800 342 238) or email info@diabetes.org.nz

Financial information:

All access to donor financial information is strictly limited to professional staff that need to process this data for our online payment processing. Diabetes New Zealand uses Flo2cash and Windcave for our online payment processing which have strong reputations for security and compliance.

Flo2cash Privacy Policy as per their website is: https://flo2cash.com/nz/privacy-policy

Windcave Payline Policy as per their website is: https://sec.windcave.com/pxmi3/privacy-policy