PRIVACY POLICY
Version 1.1 Effective June 2026
- Purpose
Community Solutions NZ Limited Partnership (NZBN 9429046675552) and its related bodies corporate (together âCSNZâ, âWeâ, âOurâ or âUsâ) is committed to respecting and protecting the privacy of personal information provided to Us, or otherwise collected by Us, offline or online, including through our Services (âServicesâ) in accordance with the Privacy Act 2020 and the Information Privacy Principles.
- Scope
This Policy applies when CSNZ collect, store, use, or disclose the personal information of any individual.
âPersonal informationâ is defined in the Privacy Act 2020 as information about an identifiable individual.
- Collection of Personal Information
The types of Personal Information We may collect are:
- Name
- Address (mailing or street address)
- Contact details (such as phone, mobile, email address);
- Date of birth;
- Industry;
- Employment Status;
- Business Name (if applicable);
- Payment details (via our third-party payment processor â We do not have access to payment details stored by the payment processor);
- Preferences and/or opinions;
- Details of products or services We may have provided to you;
- Any donation or contribution made by you to our clients;
- Interaction data including information you may provide to Us when you contact us by phone or email; and
- Any other personal information requested by Us and/or provided by you or a third party.
- Use of Personal Information
CSNZ may collect, store, use and disclose Personal Information for the following purposes:
- To process your donation or contribution to one of our clientâs causes;
- To contact and communicate with you;
- For analytics, market research and business development, including to operate and improve Our Services;
- For internal record keeping, administrative purposes, invoicing and billing purposes;
- To comply with Our legal obligations;
- If you have applied for employment with Us, to consider your employment application;
- If you have been engaged by a sub-contractor to provide services to Us; and
- If otherwise required or authorised by law.
- Storage and security of Personal Information
We will endeavour to take all reasonable steps to keep secure any Personal Information collected and keep this information accurate, up-to-date, complete and relevant. We implement appropriate technical and organisational measure to help protect the security of Personal Information; however, please note that no system is ever completely secure. We have various policies and/or processes including but not limited to pseudonymisation, encryption, access and retention policies to guard against unauthorised access and unnecessary retention of Personal Information in Our systems.
The Personal Information We collect is stored in various ways, including electronic form using third party data storage providers. All information stored electronically is password and multi-factor authentication protected on secure servers that are protected and controlled facilities. This service may be performed on Our behalf and data may be hosted by Our selected date storage providers, as detailed in clause 6 below.
We ensure only those necessary will have access to your Personal Information. We aim to ensure that all Personal Information is securely protected from misuse, loss, and unauthorised access, medication or disclosure by way of maintaining:
- Physical security by preventing unauthorised access to our premises;
- Computer network security, including password security and multi-factor authentication;
- Communication security; and
- Deidentifying or destroying Personal Information that is no longer needed.
- Disclosure of Personal Information to third parties
We may disclose Personal Information where disclosure is one of the purposes for which it was collected (or a directly related purpose), or to the individual concerned. We may disclose to:
- Our clients, for whom We collect data and Personal Information;
- Our employees, contractors and/or related entities;
- Third party service providers for the purpose of enabling them to provide their services, including (without limitation) software providers, CRM providers, administrative processing providers, customer support and messaging providers, IT system providers, professional advisors and payment system operators. Our third party service providers to whom we may share your Personal Information are:
- Kornastone Services Limited of 36 Ireland Street, Freemans Bay, Auckland 1011
- Yellow Tree Technology Ltd of 68-78 Newtownards Road, Belfast Northern Ireland
- Indigo8 Corporate Services Pty Ltd of Suite 1.04, 40 Ricketty Street, Mascot NSW Australia
- Anyone to whom Our business or assets (or any part of them) are, or may (in good faith) be transferred; and
- Courts, tribunals, regulatory authorities and law enforcement officers, as required by law;
- Third parties, including agents or sub-contractors, who assist Us in providing information, products or services.
- Disclosure overseas
We may store Personal Information outside of New Zealand. Where CSNZ disclose Personal Information to the third parties listed above, these third parties may also store or access Personal Information outside of New Zealand, in secure data centres located in Australia, Singapore, Malaysia and Dublin. Some countries to which Personal Information is disclosed may not have comparable privacy laws to those of New Zealand. In these cases, CSNZ will ensure that the recipients protect the Personal Information in accordance with or otherwise complies with the Privacy Act 2020.
- Your rights and controlling your Personal Information
Please read this Privacy Policy carefully. If you provide Personal Information to Us, you understand that CSNZ will collect, hold, use and disclose Personal Information in accordance with this Privacy Policy.
Access and correction: Individuals may request access to the Personal Information that CSNZ hold about them and also request correction of any inaccuracies. Requests should be sent to the privacy officer via the contact details at the end of this Privacy Policy. Please allow 30 days for such a request to be processed. An administrative fee may be payable to cover costs associated with the provision and/or correction of such information. There are certain circumstances where We may not be required or permitted to allow an individual to access to or correction of their personal information; the reason for such a refusal will be provided.
Complaints: Individuals may make a complaint, to do so, please send full details of your complaint and preferred contact method to the privacy officer via the contact details at the end of this policy. We may contact you to obtain further information or to verify your identity. We will investigate your complaint and respond to you within 30 days, detailing the outcome of our investigation and any further steps to be taken by either party. Individuals also have the right to contact the Privacy Commissioner if they believe an action of CSNZ may interfere with their privacy rights.
- Changes to this Policy
We may vary, alter, amend, or replace this Privacy Policy at any time, at our absolute discretion. We will publish any changes on our website https://communitysolutions.nz/privacy-policy/
- Contact
All correspondence should be addressed to The Privacy Officer.
Mailing Address: PO-Box. 68254, Victoria St West, Auckland 1142
Telephone: 09 338 8602
Email: sarah@communitysolutions.nz