Ngati Hei ki Wharekaho

Ngāti Hei Charitable Trust

Privacy Policy

1. Introduction

Ngāti Hei Charitable Trust (NHCT, “we”, “us”, “our”) is committed to protecting the privacy and mana of personal information entrusted to us.

We collect, hold, use, and disclose personal information in accordance with the New Zealand Privacy Act 2020 and other applicable laws.

Personal information means information about an identifiable individual.

As kaitiaki of iwi information, we recognise that personal data — particularly whakapapa — is taonga. We treat such information with care, integrity, and respect.

This Privacy Policy explains how we collect, use, store, disclose, and protect your personal information.

Nothing in this policy limits your rights under the Privacy Act 2020. For further information about your rights, visit www.privacy.org.nz.

2. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, technology, or Trust operations.

Any revised version will be published on our website and will apply from the date of publication.

Registered iwi members will be notified of material changes.

3. Sources of Personal Information

We may collect personal information from:

  • You directly (including through website registration, forms, email, phone, events, or other engagement)
  • Third parties where you have authorised this
  • Publicly available sources where lawful to do so

Where practicable, we collect personal information directly from you.

4. Types of Personal Information We Collect

4.1 General Website Use

If you interact with our website, we may collect basic information such as:

  • Name
  • Email address
  • Contact details

This information allows us to provide requested services such as mailing lists, updates, or responses to enquiries.

4.2 Iwi Member Registration

If you apply for registration as an iwi member, we collect additional information necessary to verify your whakapapa connection to Ngāti Hei and maintain the iwi roll. This may include:

  • Full name
  • Gender
  • Date of birth / age
  • Address
  • Contact details
  • Hapū affiliation
  • Whakapapa information

You may also register tamariki under 16 under your membership. Individuals aged 16 and over must submit their own registration.

We may request information about education, employment, and skills to better understand the strengths and capabilities within the iwi.

You may optionally provide links to social media profiles for inclusion in the restricted Iwi Member Registry. Providing this information is voluntary.

5. Purpose of Collection and Use

We collect and use personal information for lawful purposes connected to the functions of the Trust, including:

  • Verifying identity and whakapapa
  • Maintaining the iwi roll
  • Providing access to member services and restricted content
  • Personalising website experience
  • Communicating about hui, wānanga, services, events, reporting, and governance matters
  • Improving Trust services
  • Responding to enquiries
  • Conducting anonymised research and statistical analysis
  • Protecting and enforcing our legal rights
  • Complying with legal obligations
  • Any other purpose authorised by you or permitted by law

We will not use your personal information for unrelated purposes without your consent unless permitted by law.

6. Disclosure of Personal Information

We may disclose personal information:

  • To service providers who support our operations (including website hosting, IT systems, cloud storage, and data management providers)
  • To third parties for anonymised statistical reporting
  • Where required by law, court order, or regulatory authority
  • To law enforcement agencies where legally authorised
  • To any person authorised by you

Some service providers may be located outside New Zealand. Where personal information is stored or processed overseas, we will take reasonable steps to ensure it receives safeguards comparable to those required under New Zealand law.

7. Protection and Security

We take reasonable technical and organisational measures to protect personal information from:

  • Loss
  • Unauthorised access
  • Misuse
  • Disclosure
  • Alteration

However, no internet transmission is completely secure. Where you provide personal information online, you do so at your own risk.

We act as kaitiaki of iwi information and take our obligation to safeguard it seriously.

8. Access and Correction

You have the right to:

  • Request access to personal information we hold about you
  • Request correction of that information

Requests must be made in writing (including by email) and must provide sufficient detail to verify your identity and specify the information concerned.

If we agree that a correction is appropriate and reasonably able to be made, we will amend the information.

If we decline to correct the information, we will note your requested correction on the record where required by law.

Some grounds for refusal may apply under the Privacy Act 2020.

9. Publicly Posted Information

If you voluntarily publish personal information on our website or social media platforms, you acknowledge that this information may become publicly accessible.

NHCT is not responsible for the actions of third parties who may access publicly posted information.

10. External Links

Our website may contain links to third-party websites. Those websites operate under their own privacy policies.

We recommend reviewing external privacy policies before providing personal information to third-party sites.

11. Cookies and Website Analytics

We use cookies and similar technologies to:

  • Recognise returning visitors
  • Improve website functionality
  • Personalise user experience
  • Monitor website performance and usage

You may disable cookies through your browser settings. However, doing so may limit functionality.

12. Contact

If you wish to:

  • Access or correct your personal information
  • Raise a privacy concern
  • Ask questions about this policy

Please contact us directly through the details provided on our website.