PRIVACY POLICY

Startup Dunedin

Last updated: 4 April 2024


  1. INTRODUCTION

    1. Startup Dunedin, an incorporated charitable trust, (“we” or “us”) is committed to respecting your privacy at all times. This Privacy Policy describes what personal information or data we collect, and how we use, store and disclose the personal information we collect, to ensure we comply with our obligations under the Privacy Act 2020. 

    2. By providing your personal information or using our products/services, you agree to this Privacy Policy. If you provide information about any other person, then you must have authorisation from that person to provide such data to us. We urge you to read our Privacy Policy carefully.

    3. Our Privacy Policy outlines what personal data we collect, how we collect it, and how we process, use and disclose personal data. Generally we only process personal data where:

      1. we have your specific, informed consent; or

      2. we need to process your personal data: 

        1. to perform a contract with you; 

        2. to comply with laws or regulations; or

        3. for our legitimate interests (rarely, and only if consistent with your fundamental rights and freedoms in relation to personal data).

    4. This Privacy Policy may change at any time and we will tell you about any changes by posting an updated policy on our website. These changes will take effect from the date we post it, so please ensure you review our Privacy Policy from time to time. By using our website or any product/service offered by us, you will be accepting these changes.

  2. WHAT INFORMATION WE COLLECT

    1. We may obtain information about you from various sources, including through your general interactions with us and through your use of our services and website. 

    2. The types of personal information we may collect through your general interactions with us include your:

      1. name, contact details, date of birth and other contact information;

      2. driver licence details, student ID, or other form of identification;

      3. conversations with our staff, agents or other persons;

      4. email communications, and your written or verbal interactions with us or our agents;

      5. number of visits to our websites;

      6. use of our social media platforms; and 

      7. other information such as service preferences.

    3. When you use our website, the data we collect depends on the authentication method used but may include, without limitation, profile information (e.g. from your Facebook profile, Twitter profile, or other social media profiles) and information voluntarily entered by you on our website (e.g. name, gender, birthdate, email address, phone number).

  3. HOW WE COLLECT INFORMATION 

    1. We will usually collect personal information in a number of ways, including directly from you when you interact with us over the phone, via email or letter, via our website, when you meet with our staff or agents, or where you use our services. 

    2. We may also use cookies and similar tracking technologies to track the activity on our website and hold certain information. You may disable cookies by changing the settings on your browser, although this may mean that you cannot use all of the features of the website.

    3. We (and any authorised third parties in accordance with this Privacy Policy) may also collect personal information:

      1. when you apply for employment, contracting, volunteering or governance opportunities with us;

      2. when you submit your personal details to participate in competitions and promotions or to subscribe to any of our communications;

      3. through the use of cookies, web beacons and usage monitoring software when you use our website;

      4. from a local or national government department, or law enforcement agency;

      5. from our business partners that offer you products or services; and

      6. from publicly available sources of information, such as telephone directories and websites.

    4. When we receive personal information from a third party, we will process that data in accordance with this Privacy Policy.

    5. Where required by law, we obtain your prior opt-in consent at the time of collection for the processing of:

      1. personal information for marketing purposes; and

      2. personal information that is “sensitive” under any applicable laws.

    6. If you choose not to provide your personal information to us, we may not be able to:

      1. provide you with the product or service you want;

      2. respond to your requests;

      3. manage or administer your services;

      4. personalise your experience with us; or

      5. verify your identity or protect against fraud.

  4. WHY WE COLLECT THE INFORMATION 

    1. We, and any third parties in accordance with this Privacy Policy, may use your personal information for any one or more of the following purposes, to pursue our “legitimate interests”: 

      1. to provide, administer and communicate with you on our products, services and promotions;

      2. to tailor experiences to you and report back to you on your experience;

      3. to help us develop, market, improve, manage or review our services;

      4. to conduct client surveys in order to improve our services;

      5. to enforce our terms and conditions;

      6. to comply with applicable legal requirements, industry standards and our policies, and as part of the investigation and analysis of incidents;

      7. to respond to queries, complaints or to provide you with our general customer service;

      8. to comply with requests made by a court or governmental or other public authority, for example, in connection with legal proceedings or the prevention or detection of fraud and crime;

      9. to notify you of services, special offers, opportunities, products or benefits that are being offered by us; and

      10. to generate statistical information and reports on the use of our products and services.

    2. We may use your personal information for additional purposes related to the purposes listed above and will provide specific notice at the time of collection. We will not, however, use your personal information other than for a purpose that:

      1. you would reasonably expect; 

      2. is made known to you;

      3. is required or permitted by law; or

      4. is otherwise authorised by you.

    3. By providing your email address, you consent to us sending you information connected with the above collection and use purposes via email.

    4. If data is aggregated or de-identified so it cannot identify you or any other individual, we may use it for any business purpose.

  5. WHO WE SHARE INFORMATION WITH

    1. We may share information with our staff and advisers where they “need to know” that information. We may also disclose information to our service providers and contractors who perform services on our behalf, where permitted under this Privacy Policy.

    2. We may disclose information about you to law enforcement authorities or other government officials: 

      1. if we are required to do so by law;

      2. if we believe disclosure is necessary or appropriate to prevent physical harm or financial loss; or 

      3. in connection with an investigation of suspected fraudulent or illegal activity.

    3. We also reserve the right to disclose personal information we have about you in the event we sell or transfer all, or a portion of, our business or assets or subsidiaries or related companies. If such a sale or transfer occurs:

      1. we will use reasonable efforts to direct the purchaser to use personal information you have provided to us in a manner that is consistent with our Privacy Policy; and 

      2. following such a sale or transfer, you may contact the entity to which we transferred your personal information with any enquiries concerning the processing of that information.

    4. In all other cases, we will not disclose personal information we collect about you, except as disclosed to you, and authorised by you, at the time the information is collected.

  6. HOW WE PROTECT AND RETAIN INFORMATION

    1. We implement and maintain appropriate administrative, technical and physical safeguards designed to protect the personal information you provide against accidental, unlawful or unauthorised destruction, loss, alteration, access, disclosure or use. 

    2. We generally store the personal information we collect in New Zealand, or overseas via cloud-based services, including the United States, the United Kingdom and various countries within the European Union.  

    3. If needed to provide our services, we may potentially store your data securely on servers owned by other technology providers located in New Zealand or overseas.

    4. We only keep your identifiable personal information for as long as and to the extent that we need it to reasonably meet the purposes for which we collect it (as set out in this Privacy Policy). The length of time we retain your identifiable personal information is also affected by:

      1. any legal requirements we are subject to with respect to your personal information; and

      2. any consent given by you to retain such personal information.

  7. YOUR RIGHTS AND CHOICES 

    1. We offer you certain choices about what personal information we collect from you, how we use that information, and how we communicate with you. You also have certain rights, including the rights to: 

      1. not provide personal information to us;

      2. refrain from submitting information directly to us;

      3. ask us not to share your personal information with third parties;

      4. withdraw any consent you previously provided to us; or

      5. object at any time on legitimate grounds to the processing of your personal information.

    2. In some circumstances, taking these actions may mean that you cannot take advantage of our products and services. You do not need to provide us with some information that we automatically collect (e.g. some cookies), but we may need this information to provide you with full functionality of our products and services.

    3. You can request access to, and correction or deletion of, your personal information held by us. We will process all requests for access, correction or deletion within a reasonable time. If you would like to ask for a copy of your information, or to have it corrected, please contact us at hello@startupdunedin.nz.

    4. The right to access personal information may be limited in some circumstances by legal requirements. In order for us to process your request, we will need to verify your identity. In the event that we refuse you access to your personal information, we will provide you with an explanation for that refusal. These reasons may include where:

      1. access would have an unreasonable impact on the privacy of other individuals;

      2. the information relates to legal proceedings relating to you;

      3. the information would reveal our commercially-sensitive trade secrets; or

      4. we are prevented by law from disclosing the information or providing access.

  8. QUESTIONS AND COMPLAINTS

    1. If, at any time, you have questions, concerns or comments about this Privacy Policy or our privacy practices, please contact us by e-mail at hello@startupdunedin.nz.

    2. If you wish to complain about any breach or potential breach of this Privacy Policy, please contact us via the contact details below and we will make every effort to resolve your complaint internally. If we do not resolve the complaint to your satisfaction, you may apply to the Privacy Commissioner.

    3. For more information on how you may lodge a complaint with the Privacy Commissioner, please contact the Commissioner on 0800 803 909, at enquiries@privacy.org.nz or at https://www.privacy.org.nz/about-us/contact/.