Auckland City Mission – Te Tāpui Atawhai (”the Mission”, “we”, “our” or “us”) is committed to safeguarding the privacy of you, our Supporters’, personal information. This Supporter Privacy Policy outlines what personal information we collect when you make a financial or goods donation or sign up to receive our newsletter, the purpose of collecting it and how we disclose it. The policy is all in accordance with the Privacy Act 2020 (Privacy Act).

The Mission is extremely grateful to those who support us and takes all necessary steps to ensure the personal information you provide us is used only for the purposes intended and stored securely.

By donating or signing up to receive our newsletter whether by using our website, over the phone, by letter or email or in person, you are deemed to have accepted this policy.

We may change this policy from time to time and if we do, we will post the updated policy on our website. We encourage you to check our website periodically to ensure you are aware of the terms of our current policy.

1.       What personal information we collect and how we collect it

We collect only personal information required for processing, legal and regulatory purposes.  We collect this directly from you when you make a donation or sign up to receive our newsletter or make contact with the Mission. We may also collect personal information about you from third party sources, including third party fundraising platforms, payment platform providers and our other service providers.

The information we collect may include:

• personal information about you such as your first and last name, mailing address, telephone number, and e-mail address
• information about your donations and other transactions with us, including the amount of those donations and transactions and your credit card number and debit card number
• in some circumstances, we may also collect your demographic information, including your age, location and ethnicity. We only use this information to help us understand the make-up of our donor database and predict patterns of donations
• phone calls for quality control or staff training purposes. If a call you make to us, or that we make to you, is to be monitored and recorded, you will be informed of this at the time of the call
• emails to or from you for quality control and a record of information disclosed
• website usage information through tracking your individual click behaviour
• technology solutions such as “cookies” to provide you with better access to tailored information when you visit our website and to better serve you when you return to it
• aggregated website traffic information collected by our web server or third-party systems we subscribe to. This information does not identify you personally and is not linked to the personally identifiable information you may have provided.
• images recorded on CCTV footage in and around some of our premises to help reduce anti-social behaviour and to promote community safety.

2.      Why we collect your personal information

We will only use and disclose your personal information for the purposes for which it was collected (or otherwise as required or authorised by law). This may include using your personal information for these purposes:

1. to process and receipt payments received by us,
2. to undertake customer service activities, such as responding to any queries, comments or complaints you may have,
3. to measure the performance of our email campaigns and improve their relevance and content,
4. safety and security purposes,
5. associated funding, administration, staff training and quality improvement purposes,
6. to comply with relevant laws and regulations;
7. to present you with targeted digital advertisements on third party social media platforms;
8. to help us understand the make-up of our donor database and predict patterns of donations;
9. where you have made a donation, we may contact you to confirm how your donation has been used; and
10. any other purposes for which you give us permission.

From time to time, we may also contact you for market research purposes or to provide you with information about our events, news, services or special promotions that we consider may be of interest to you. This may include information about our programmes, research funding, special events, and donor and fundraising programmes. We will only send you such information about our events, news, services or special promotions by email or text message where you have consented to receiving such messages.

If you do not want all your personal information to be collected, please omit any that you wish to keep private when interacting with us. However, if you choose not to provide us with any personal information we have requested, we may be unable to process your request.  In particular, some information (such as your name and contact details) is required when you donate online so we can process your payment and issue a tax-receipt. If you prefer to donate anonymously, please contact us.”

How we share or disclose your information

We are very conscious of the generosity of our supporters and will take all practical and reasonable steps to ensure that the persons and organisations to whom we disclose personal information are bound to protect the privacy of that personal information. Please note that some of the persons to whom we disclose personal information may be situated outside New Zealand.

For the purposes we have described, we may disclose your personal information to third parties in the following ways.

1. Where it is directly related to the purpose for collection of the information. In addition, we only share your personal information with any other third parties if legally required or authorised to do so, for example, where you give your permission, or it falls within one of the exceptions contained in the Privacy Act.
2. When we employ third parties to provide us with services or perform functions on our behalf. Our agreements with them protect the information that we provide them from any unauthorised use. They have access to the limited personal information needed to perform their functions, but may not keep, use or disclose it for other unauthorised purposes. Examples of third parties include print service providers, mail houses, and payment platforms;
3. Aggregated data (not personally identifiable information) may be shared with third parties such as advertisers or business partners to inform them of the types of people who support us.
4. To companies who host or maintain data centres, service platforms and other infrastructure and systems on behalf of us, where your personal information is processed and/or stored.
5. Providing limited amounts of your anonymised personal information to social media platforms (including Facebook and Instagram) to be used solely for the purpose of presenting targeted digital advertising to you on those third-party platforms.

Our website and systems may also be on servers located outside of New Zealand or based in the cloud. Note the transfer of personal information to an offshore data processor (e.g. a cloud storage provider) who does not use the personal information for its own purposes will (usually) not constitute an overseas disclosure.

3.      What if you do not provide us with the personal information requested

Providing us with your personal information we request from you, ensures we can adequately respond to your correspondence, process your donation and provide a receipt, or otherwise deal with any requests or enquiries you have submitted. If we do not have your personal information, we are unable to always communicate appropriately with you.

4.      Data security

We take commercially reasonable steps to ensure your personal information, including credit and debit card details, is protected from misuse, loss, interference and unauthorised access, modification or disclosure. For example, whenever we ask for your financial details online, security-encrypted response forms are used, and your information is held in secure servers. Collecting your credit card and debit card information also follows the PCI DSS (Payment Card Industry Data Security Standards) protocol, i.e. we meet all PCI DSS requirements to ensure that we process, store or transmit credit card and debit card information securely.

However, data protection and security measures are never completely secure and, despite the measures we have put in place, we cannot guarantee the security of your information. It is up to you to notify us as soon as possible of any security breaches. If you do not wish to make your financial contribution online, please contact us to receive a hard-copy form or make a donation over the phone. Please do not include any credit card or debit card information in an email to us as this is not secure.

5.      How long we hold personal information

We keep all personal information that we collect (on both our active systems and our archive systems) for only as long as is needed to achieve the purpose for which we collected it.

6.      How you can access and correct your personal information

You may request confirmation of whether or not we hold any personal information about you, and you may request access to your personal information that we hold by emailing us at [email protected] or otherwise contacting us at the addresses provided below. Once we have verified your identity, we will provide you with such confirmation and access unless one of the grounds for refusal under the Privacy Act applies.

You may request the personal information we hold about you to be corrected by emailing us at [email protected]. If we agree your record of personal information is to be corrected, we will do this and provide you with your amended record if requested. To keep your information accurate please notify us of any changes as soon as possible.

If we do not correct your personal information, we will notify you about why we won’t correct it, that you may supply a correction statement which we will attach to the information noting that the correction was sought but not made, and that you have a right to complain to the Privacy Commissioner about our refusal. We will deal with requests to access and correct personal information in accordance with the Privacy Act – note privacy principles 6 and 7.

7.      Who you can contact for further information

If you have questions or comments about this policy, or you wish to access or make changes to your personal information, please contact our Fundraising Team at [email protected].