1. Who we are
Ngāti Paoa publishes ngatipaoaiwi.co.nz from New Zealand. We are the agency responsible for personal information collected through the site under the Privacy Act 2020.
2. What we collect
- Information you give us: name and email when you email us, subscribe to a newsletter, or make a contact request.
- Information collected automatically: IP address, browser type, device type, pages viewed, referrer URL, approximate location (country/region only), and time-on-page. Collected via standard server logs and privacy-respecting analytics.
- Cookies and similar: see our cookie policy for details on first-party and third-party cookies, including affiliate-tracking cookies.
3. How we use it
- To respond to your enquiries and provide the services you ask for.
- To improve the site — understanding which pages are useful, what's broken, where readers leave.
- To send you the newsletter, if you've subscribed (you can unsubscribe in every email).
- To enable accurate affiliate attribution — if you click an outbound link to an operator and sign up, an attribution cookie tells the operator that the referral came from us.
- To meet legal obligations, including tax and regulatory record-keeping.
4. Lawful basis
We rely on the consent of the visitor for newsletters, marketing cookies and any non-essential cookie use. We rely on legitimate interest for essential analytics, server logs and basic affiliate attribution, balanced against the visitor's reasonable expectation of privacy.
5. Sharing
We do not sell personal information. We share limited data only with:
- Operators we link to, via the affiliate-attribution cookie — typically a click ID and timestamp, not your name or email.
- Analytics providers (Google Analytics 4 or equivalent privacy-respecting tools), under data-processing agreements.
- Email service providers for newsletter delivery, if you subscribe.
- Regulators or law enforcement where legally required.
6. International transfers
Some service providers (analytics, email) process data in jurisdictions outside New Zealand including the United States and the European Union. We rely on the provider's binding corporate rules, standard contractual clauses or equivalent safeguards under NZ law.
7. Your rights under the Privacy Act 2020
You may:
- Access any personal information we hold about you.
- Correct any information you believe is inaccurate.
- Withdraw consent to processing where consent is the lawful basis (e.g. newsletter, marketing cookies).
- Request deletion of personal information we no longer need.
- Complain to the Office of the Privacy Commissioner if you believe we have breached the Privacy Principles.
Email privacy@ngatipaoaiwi.co.nz to exercise any of these rights. We will respond within 20 working days, often sooner.
8. Children
The site is intended only for adults aged 18 or over. We do not knowingly collect personal information from anyone under 18. If you believe we have, please email privacy@ngatipaoaiwi.co.nz and we will delete it.
9. Security
We use TLS encryption in transit, secure cloud infrastructure for storage, and limited internal access on a need-to-know basis. No system is perfectly secure — if we discover a notifiable privacy breach, we will notify affected individuals and the Privacy Commissioner in accordance with the Privacy Act 2020.
10. Retention
We hold personal information only as long as needed for the purpose collected, or as required by law. Newsletter subscriptions are deleted upon unsubscribe. Server logs are kept 90 days. Affiliate attribution cookies expire 30 days from the original click.
11. Marketing & safer-gambling opt-out
If you ask us to stop sending you marketing emails, retargeting cookies, or any other promotional contact — including for safer-gambling reasons — we honour the request immediately and confirm by reply. Email safer@ngatipaoaiwi.co.nz.
12. Changes to this policy
We may update this policy. The "last updated" date at the top reflects the most recent change. Material changes will be flagged on the homepage for at least 14 days.
13. Contact
Privacy questions: privacy@ngatipaoaiwi.co.nz. Postal: Ngāti Paoa Editorial, PO Box 91123, Auckland 1142, New Zealand.