Who This Applies To
This policy applies to everyone who visits or uses the services available at kiatakatu.ac.nz. Whether you are browsing, creating an account, or actively using our platform, this document governs how your personal data is handled. By continuing to use the site, you acknowledge that you have read and understood the contents of this policy.
What Information We Actually Collect
We do not collect information for its own sake. Every piece of data we gather serves a specific purpose within the running of our service. Here is what that includes:
- Your name and contact details, provided during account registration
- Your date of birth, used solely for age verification purposes
- Your country of residence and any relevant location data tied to your session
- Device and browser information gathered automatically when you access the site
- Records of how you interact with the platform – pages visited, time spent, features used
- Communications you send to our support team, including the content and timestamps
- Any preferences or settings you configure within your account
We do not collect more than we need. If something is not listed here, we are not collecting it.
How We Receive This Information
Some of it comes directly from you – when you fill out a form, contact us, or set up your profile. Some comes from your device automatically, through standard web technologies like cookies and server logs. And occasionally, we may receive relevant data from third-party verification or fraud prevention partners who help us confirm the accuracy of what you have provided.
Why We Use It and What For
Each use has a reason behind it. We are not vague about this:
| Purpose | Type of Data Used | Why It Is Necessary |
|---|---|---|
| Creating and managing your account | Name, email, date of birth | Without this, we cannot provide you with access to the platform |
| Verifying your identity | Personal ID information, location | Required to comply with applicable legal and regulatory obligations |
| Improving how the service works | Usage and behavioural data | Helps us understand what functions well and what does not |
| Responding to support requests | Communication records | Ensures consistent and accurate assistance |
| Fraud and abuse prevention | Device data, account activity | Protects the integrity of the platform and its users |
| Sending service-related messages | Email address | To keep you informed about your account or any relevant changes |
Cookies and Tracking Technologies
Cookies are small files stored on your device that help us recognise you when you return to the site. We use them to keep your session active, remember your preferences, and understand how different parts of the site are being used. Some of these are strictly necessary – the site will not function properly without them. Others are optional, such as those used for analytics.
You can control cookie behaviour through your browser settings at any time. Turning off certain cookies may affect how the platform works for you, but that decision is yours to make. We do not hide this behind complicated settings or bury it in fine print.
Who Else Sees Your Data
We do not sell personal information. We do not trade it. However, we do share it in specific, limited circumstances:
- With identity verification providers who confirm the details you have submitted
- With fraud detection services that flag unusual or potentially harmful activity
- With technical partners who help us maintain and operate the platform infrastructure
- With regulatory authorities when we are legally required to report or disclose information
Every third party we work with is subject to strict data handling requirements. We do not grant access beyond what is needed for the task at hand.
Where Your Data Is Stored
Your data is stored on secure servers. In some cases, this may involve infrastructure located outside your home country. When data crosses borders, we apply appropriate safeguards to ensure it receives a comparable level of protection regardless of where it is physically held. We do not move data carelessly or without considering the implications for your privacy.
How Long We Keep Information
We hold onto your data for as long as your account is active and for a reasonable period afterwards, in line with our legal obligations. Some categories of records – particularly those tied to identity verification or regulatory compliance – must be kept for defined periods under applicable law. Once those obligations are met, data is deleted or anonymised. We do not keep information indefinitely for the sake of it.
Your Rights Over Your Own Data
You have real, exercisable rights when it comes to your personal information. These are not symbolic. You can:
- Request a copy of the personal data we hold about you
- Ask us to correct anything that is inaccurate or out of date
- Request deletion of your data, subject to any legal retention requirements
- Object to certain types of processing, including direct marketing
- Ask us to restrict processing in specific situations while a concern is resolved
- Withdraw consent where processing is based on consent, without this affecting anything done prior to withdrawal
To exercise any of these rights, contact us using the details at the bottom of this page. We will respond within a reasonable timeframe and will not make the process unnecessarily difficult.
Children and Age Restrictions
Our services are strictly for adults. We do not knowingly collect or process personal data from individuals under the legal age of participation in their jurisdiction. If we become aware that a minor has submitted information to us, we act swiftly to remove it. If you believe a minor has accessed our platform, please contact us immediately.
Security Measures
We take technical and organisational steps to protect your data from unauthorised access, loss, or misuse. This includes encryption of sensitive information, access controls within our team, and regular reviews of our security practices. No system is entirely immune to risk, but we treat data protection as an ongoing responsibility rather than a checkbox.
Changes to This Policy
If we update this policy in a meaningful way, we will let you know – either through a notice on the site or directly to your registered email address. The updated version will always be available at kiatakatu.ac.nz. Continuing to use the platform after such an update indicates that you have reviewed and accepted the revised terms.
Frequently Asked Questions
Can I request that my account and all associated data be deleted?
Yes. You can submit a deletion request at any time. We will process it promptly, though some data may need to be retained for a period to meet legal obligations before full deletion can occur.
Do you use my data to personalise marketing communications?
Only if you have opted in to receive them. You can unsubscribe from marketing emails at any point using the link included in each message, or by contacting us directly.
Is my data shared with advertisers?
No. We do not sell or share personal data with advertisers or data brokers under any circumstances.
What happens to my data if I stop using the platform?
Your data is retained for the period required by law or our internal retention schedule. After that window passes, it is deleted or irreversibly anonymised.
How do I know if my data has been involved in a security incident?
If a breach occurs that is likely to affect you, we will notify you as required under applicable data protection regulations. We do not delay these notifications or obscure the nature of the incident.
Contact Us
If you have questions about how we handle your personal information, want to exercise your data rights, or need to raise a concern, reach out to our support team directly:
- Email: support@kiatakatu.ac.nz
We aim to respond to all privacy-related queries within a reasonable timeframe. If you feel your concern has not been addressed adequately, you have the right to raise the matter with a relevant data protection authority in your jurisdiction.
