Privacy policy
E Tū Tāngata Charitable Trust Privacy Policy
Date of Implementation: 19/06/2026
Version: 3
Last Updated: 19/06/2026
1. Background
E Tū Tāngata Charitable Trust ("E Tū Tāngata", "we", "us", "our") takes your privacy seriously. We are committed to protecting your personal information and complying with the Privacy Act 2020 and the Information Privacy Principles ("IPPs") it sets out.
We encourage you to read this Privacy Policy carefully. Understanding how we collect, use, store, and disclose your personal information will help you make informed decisions when engaging with us.
This Privacy Policy applies to all personal information we collect through our website, programmes, services, resources, products, events, and other activities (together, our "Activities").
This Privacy Policy does not limit any rights you have under the New Zealand Privacy Act 2020 or any other applicable law.
2. Purpose
The purpose of this Privacy Policy is to ensure that everyone who interacts with E Tū Tāngata, whether as a participant, volunteer, donor, supporter, employee, contractor, or website visitor, understands:
● what personal information we collect;
● why we collect it and how we use it;
● who we share it with;
● how we keep it secure; and
● the rights you have in relation to your personal information.
3. Collection of personal information
We collect and hold personal information only to the extent necessary to enable us to administer and operate E Tū Tāngata as a charitable trust.
3.1 What we collect
Depending on the nature of your engagement with us, the personal information we collect may include:
● Identity and contact information: name, date of birth, country of residence, physical address, email address, landline and/or mobile number, and other contact details you provide to us.
● Family and household information: names of dependents and marital status (where relevant to programme participation or employment).
● Employment, volunteer, and vetting information: qualifications, work and volunteering history, references, and police vetting outcomes (collected only where required for your role or programme involvement).
● Financial information: donation history, purchase history, IRD number, and bank account information.
● Associated entity information: information about companies, trusts, or other entities you are associated with where relevant to your engagement with us.
● Communications and engagement data: information contained in correspondence with us, including: survey responses, programme feedback, and any other information you provide in the course of engaging with our Activities.
● Research and survey data: where you take part in surveys, interviews, focus groups, or other research we conduct, we collect your responses, any demographic information you choose to provide, and (where applicable) audio or video recordings of sessions you have consented to.
● Website and device data: your IP address, device identifiers, browser type, operating system, referring URLs, pages visited, time spent on pages, traffic patterns, and other usage data, collected through cookies and similar technologies (see section 10).
● Account and identifier data: when logged into our website or services, we may assign you a unique user identifier (such as a randomly-generated GUID) and associate your usage data with that identifier for analytics and service-improvement purposes (see section 10).
The specific categories collected will depend on how you engage with us. Not every individual will be asked for every category of information listed above.
3.2 How we collect it
We collect personal information directly from you when you, for example:
● request access to or participate in our Activities;
● become a customer, donor, programme participant, employee, volunteer, or contractor;
● subscribe to our communications or fill in a form on our website;
● contact our team by phone, email, post, or through our website;
● attend an event, training session, or workshop we run;
● participate in a survey, interview, focus group, or other research activity we run; or
● visit, browse, or interact with our website.
We may also collect personal information from third parties where you have authorised this or where the information is publicly available. For example, referees, police vetting providers, payment providers, or organisations that partner with us.
3.3 If you choose not to provide information
You are not obliged to provide personal information to us. However, if you choose not to, we may be limited in our ability to provide you with our Activities, respond to your enquiries, or fulfil our obligations to you.
4. Information you provide about other people
In some cases, you may provide us with personal information about another person (for example, a dependent, a colleague, a referee, or someone you have invited to engage with our Activities) ("User Data").
If you do, you must ensure that you are authorised to disclose that information to us. You must take reasonable steps to make sure the individual concerned is aware of, and where required consents to:
● the fact that their personal information is being collected by us;
● the purposes for which we will use that information;
● the categories of recipients to whom we may disclose it;
● their right to access and correct their information; and
● our identity and how to contact us.
By providing us with another person's information, you confirm to us that you have authority to do so.
5. How we use your personal information
We use personal information for the purposes for which it was collected and for purposes related to those, including:
● delivering, administering, and improving our Activities;
● communicating with you about our Activities, events, fundraising, and updates;
● processing donations, purchases, and other payments;
● responding to your enquiries, requests, complaints, and feedback;
● operating, maintaining, and improving our website and the services we provide through it;
● conducting analytics, research, and reporting (including aggregated and de-identified analysis) to understand how our Activities are used and how we can improve them;
● conducting research to understand the impact of our Activities, evaluate our programmes, and inform future work, including by analysing survey, interview, and focus group responses;
● managing our employees, contractors, and volunteers;
● meeting our legal, regulatory, accounting, audit, and reporting obligations;
● personalising your experience; and
● any other purpose you authorise or that is permitted or required by law.
6. When we share your personal information
We will only disclose your personal information where it is necessary or appropriate for the purposes set out in this Privacy Policy, or where we are otherwise authorised or required to do so.
6.1 Service providers and processors
We share personal information with trusted third-party service providers who process information on our behalf to help us run E Tū Tāngata. These currently include, but are not limited to:
● Website hosting: Squarespace;
● Email and communications: Postmark, Google Mail;
● Customer relationship management (CRM): Genesis CRM;
● Payment processing: Stripe;
● E-commerce: Shopify;
● Analytics: Google Analytics (including enhanced measurement, Google Signals, and user-ID-based analytics features); and
● Other operational tools: Occasionally we may use other service providers for similar purposes.
These service providers are only permitted to use your personal information for the purposes for which we have engaged them, and are required to protect your information.
6.2 Other disclosures
We may also disclose your personal information:
● with your consent;
● with representatives of Members Schools, to the extent necessary for our Activities or development of our Activities where possible this will be de-identified;
● to professional advisers (such as lawyers, accountants, and auditors) where reasonably necessary;
● for legal or compliance purposes (for example, in response to a court order, subpoena, statutory request, or investigation);
● where we believe disclosure is necessary to prevent or address fraud, security issues, or harm to any person; and
● in connection with a merger, consolidation, restructure, sale of assets, or reorganisation of E Tū Tāngata, in which case appropriate confidentiality protections will be in place.
Where we are legally permitted to do so, we will let you know if we are required to disclose your personal information under legal compulsion.
6.3 Overseas disclosure
Some of our service providers (including those listed in section 6.1) are based outside New Zealand or store information on servers located overseas, including in Australia, the United States, and the European Union. Where we disclose personal information to an overseas recipient, we take reasonable steps to ensure the recipient is required to protect the information in a way that, overall, provides comparable safeguards to those in the New Zealand Privacy Act 2020, consistent with IPP 12.
7. Payment and credit card information
E Tū Tāngata does not store full credit card details on our own systems. Our staff cannot access your full card details. Where you make a payment or set up a recurring donation, your payment details are collected, encrypted, and stored by our chosen payment provider (such as Stripe) in accordance with applicable payment-card-industry security standards. This enables us to process payments and, where applicable, bill you on a recurring basis.
8. Research and survey participation
We conduct in-house research to better understand the people we work with, evaluate the effectiveness of our Activities, and inform our future work. This may include online or paper surveys, interviews, focus groups, and other forms of feedback gathering.
8.1 Participation is voluntary
Participation in our research is always voluntary. You can choose not to take part, decline to answer any specific question, or withdraw from a research activity at any time without giving a reason and without any negative consequence to your relationship with E Tū Tāngata.
8.2 Information we collect through research
The information we collect through research depends on the activity, but may include your responses to questions, any demographic information you choose to provide, and (where you have specifically consented) audio or video recordings of interviews or focus group sessions.
8.3 How we use research data
We use research data to:
● evaluate and improve our Activities;
● understand the experiences and outcomes of those who engage with our Activities;
● produce internal and external reports, presentations, and publications; and
● support funding applications, accountability reporting, and other organisational purposes.
If we publish or share research findings outside E Tū Tāngata, we will use aggregated and de-identified information by default. We will not publish information that identifies you personally without your specific, informed consent.
8.4 Withdrawal of research data
You can ask us to withdraw your individual research data at any time before it has been aggregated, de-identified, or published, by contacting our Privacy Officer (see section 15). After your data has been aggregated, de-identified, or published, it may not be practicable to remove your contribution.
8.5 Storage of research data
Research data is stored securely and is accessible only to E Tū Tāngata staff, contractors, or research partners who need access to carry out the research and reporting purposes described above. Where research is conducted in partnership with an external organisation (such as a university or evaluation provider), we will tell you about this at the time you are invited to participate.
9. Storage, security and retention of your information
9.1 Security
We take reasonable steps to protect personal information from loss, unauthorised access, use, modification, disclosure, or other misuse. These steps include physical, technical, and administrative safeguards appropriate to the sensitivity of the information. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee security.
9.2 Retention
We retain personal information for as long as is reasonably necessary to fulfil the purposes for which it was collected, including to provide our Activities, meet our operational needs, and comply with our legal, compliance or reporting obligations. If personal information is no longer required, we will take reasonable steps to securely destroy or de-identify it.
9.3 Privacy breaches
If we become aware of a privacy breach involving your personal information that has caused, or is likely to cause, serious harm, we will notify you and the Office of the Privacy Commissioner as required by the Privacy Act 2020.
10. Cookies, analytics, online tracking
10.1 What cookies are
We use analytics tracking on our website “cookies”. A cookie is a small text file stored on your device when you visit a website. Cookies do not, on their own, identify you personally, but they can identify your device and record information about your interaction with our website. Our website uses cookies and similar technologies (such as web beacons, pixels, and local storage).
We use a combination of "persistent cookies" (which remain on your device for a set period) and "session cookies" (which expire when you close your browser).
10.2 Types of cookies we use
● Strictly necessary cookies are required to operate our website and provide services you have requested. These cannot be disabled.
● Performance and analytics cookies collect information about how visitors use our website (such as which pages are most visited, time spent on pages, and any errors encountered), so we can improve how the website works.
● Functionality cookies remember your preferences (such as language or region) to provide enhanced features.
● Targeting and advertising cookies may be used to deliver advertisements relevant to your interests, measure the effectiveness of advertising campaigns, and limit the number of times you see a particular advertisement. These cookies may share information with third parties, including advertisers.
10.3 Google Analytics
We use Google Analytics, a web analytics service provided by Google LLC ("Google"), to help us understand how our website is used and to improve our Activities. Google Analytics uses cookies and similar technologies to collect information such as your IP address, device identifiers, browser type, pages visited, time spent on the website, and referring URLs.
We use the following Google Analytics features:
● Enhanced measurement: automatic tracking of interactions such as page views, scrolls, outbound link clicks, site searches, video engagement, and file downloads.
● Google Signals: where you are signed in to a Google account and have enabled ads personalisation, this allows for cross-device reporting, demographic and interest reporting, and remarketing.
● Advertising features and remarketing: we may use Google Analytics in combination with Google's advertising services to show you relevant advertising on Google and partner websites.
● User-ID analytics: where you log in to our website, we may assign your session a unique, randomly-generated identifier (such as a GUID) that does not in itself contain your name, email, or other directly identifying information. We share this identifier with Google Analytics to analyse how individual users (rather than just devices or sessions) engage with our Activities over time. The identifier may be linked back to you internally because we hold the mapping between your account and the identifier.
Information collected by Google Analytics may be transmitted to and stored on Google servers located outside New Zealand, including in the United States. Google's use of this information is governed by Google's own privacy policy, available at https://policies.google.com/privacy.
You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on (https://tools.google.com/dlpage/gaoptout) or by managing your cookie preferences as described below.
10.4 Managing cookies and your choices
Where we display a cookie consent banner on our website, you can use it to accept, decline, or manage your preferences for non-essential cookies. Refusing or deleting cookies may affect the functionality of our website. E Tū Tāngata does not currently respond to browser "Do Not Track" signals.
You can also opt out of interest-based advertising from many participating advertising companies through the following resources:
● Digital Advertising Alliance (DAA) – http://optout.aboutads.info/
● Network Advertising Initiative (NAI) – http://optout.networkadvertising.org/
● Your Online Choices (EDAA) – http://www.youronlinechoices.eu/
● DAA AppChoices – http://www.aboutads.info/appchoices
Opting out of targeted advertising does not stop advertising altogether; you will continue to see general advertisements.
11. Artificial Intelligence
We may use artificial intelligence and machine learning technologies, including those provided by third parties (together, “AI Technologies”), in our operations and providing our Activities. We will only use AI Technologies when legally permitted to do so, and where we consider it necessary, expedient, or beneficial for our operations and to provide our Activities.
11.1 How we use AI Technologies:
We may use AI Technologies for the following purposes:
· to support, improve and optimise our Activities and operations;
· to automate certain processes and communications, including administrative or routine tasks; and
· to enhance and personalise your experience with our Activities.
11.2 Data Protection and Security:
Where we use AI Technologies, we will take all reasonable steps to ensure your personal information is handled with due care and diligence and in accordance with applicable privacy laws.
We will not input your information into any open AI Technologies and will ensure your information is not used to train any third party AI Technologies datasets.
To the extent we do input your information into any AI Technologies including third parties, we will use that information to improve our Activities. Your information will not be used to train or improve any public datasets and access will be restricted to individuals within E Tū Tāngata.
12. Email and electronic communications
We use email to send communications about our Activities, including newsletters, programme updates, fundraising appeals, and event invitations. Every marketing email we send includes instructions for unsubscribing or updating your preferences.
If you opt out of marketing communications, we may still send you essential service or administrative messages (for example, in relation to a privacy breach, changes to this Privacy Policy, donation receipts, or other legally required notifications).
Our electronic communications comply with the New Zealand Unsolicited Electronic Messages Act 2007.
13. Third-party websites and applications
Our website may contain links to, or advertisements for, third-party websites and applications. We do not control these third parties, and we are not responsible for their privacy practices or content. Before providing personal information to any third party, we encourage you to review their privacy policy.
14. Your rights – access, correction, and other choices
Under the Privacy Act 2020, you have rights in relation to the personal information we hold about you, including the right to:
● Access the personal information we hold about you;
● Correct any personal information you believe is inaccurate, incomplete, or out of date;
● Withdraw consent where we are relying on your consent to process your information; and
● Make a complaint about how we have handled your personal information (see section 16).
You can exercise these rights by contacting our Privacy Officer (see section 15). We may need to verify your identity before responding to your request.
We will respond to access and correction requests as soon as reasonably practicable and in any case within the timeframes required by the New Zealand Privacy Act 2020. If we refuse a request (for example, because the information is subject to legal privilege, or because providing it would unreasonably affect another person's privacy), we will explain why. If we refuse a correction request, we will, where appropriate, attach a statement of the requested correction to your information.
Where it is permitted by law, we may charge a reasonable fee for providing access to or correcting your personal information; we will tell you in advance if any fee applies.
15. Privacy Officer and how to contact us
If you have any questions about this Privacy Policy, would like to exercise your rights, or wish to update your information, please contact our Privacy Officer:
Privacy Officer: Phil Hotter, Business Manager
Email: phil@etutangata.nz
Post: 5b Avenger Crescent, Wigram, Christchurch 8042, New Zealand
General enquiries: hello@etutangata.nz
16. Complaints process
If you are concerned about how we have handled your personal information, please let us know so we can try to put things right. Please send your complaint to our Privacy Officer at the contact details in section 15, including:
● a description of your complaint;
● the personal information involved (if known);
● the outcome you are seeking; and
● any supporting documents or correspondence.
We will:
● acknowledge your complaint within ten (10) business days of receipt; and
● aim to investigate and respond substantively within twenty (20) business days, or notify you if we need more time.
If you are not satisfied with our response, you have the right to make a complaint to the Office of the Privacy Commissioner of New Zealand:
Website: https://www.privacy.org.nz
Phone: 0800 803 909
Email: enquiries@privacy.org.nz
17. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal obligations. The updated Privacy Policy will be posted on our website and will take effect from the date it is posted, unless a later effective date is specified.
Where the changes are material, we may take reasonable steps to bring them to your attention before they take effect, for example by email (where we hold your contact details and you have not unsubscribed) or by a prominent notice on our website.
Your continued use of our website or engagement with our Activities after the updated Privacy Policy takes effect will constitute your acceptance of the updated Policy.
This Privacy Policy was last updated 19/06/2026.