Privacy Policy + Privacy Officer Designation

PRIVACY POLICY AND PRIVACY OFFICER DESIGNATION

✓Business name Effective date: Effective date

This policy explains how ✓Business name collects, holds, uses, and discloses personal information, in accordance with the 13 Information Privacy Principles (IPPs) of the Privacy Act 2020. Unlike some other countries, the Privacy Act 2020 applies to every business in New Zealand regardless of turnover — there is no small-business exemption.

1. PRIVACY OFFICER 1.1. Under section 201 of the Privacy Act 2020, ✓Business name designates a privacy officer: Privacy officer name, contact Privacy officer contact, designated on Privacy officer designated on. 1.2. The privacy officer is responsible for this business's compliance with the IPPs, handling individuals' access and correction requests, and liaising with the Office of the Privacy Commissioner (OPC).

2. WHAT WE COLLECT 2.1. What personal data we collect

3. WHY WE COLLECT IT 3.1. Purposes of collection and use

4. INDIRECT COLLECTION 4.1. Indirect collection sources (IPP3A) 4.2. ⚠️ From 1 May 2026, IPP3A requires that where personal information is collected indirectly (e.g. booking-platform referrals, CCTV footage, social media, third-party reviews), the individual must be notified, subject to limited exceptions.

5. DISCLOSURE 5.1. Who we disclose data to

6. STORAGE AND SECURITY 6.1. Storage and security of data

7. ACCESS AND CORRECTION 7.1. Access and correction rights (IPP6/IPP7) 7.2. Under IPP6 and IPP7, individuals may request access to, and correction of, their personal information held by us.

8. COOKIES AND ANALYTICS 8.1. Cookies & analytics

9. PRIVACY BREACHES 9.1. Privacy breach notification note 9.2. Where a privacy breach poses a risk of serious harm, we will notify the Office of the Privacy Commissioner via NotifyUs and affected individuals as soon as practicable, as required by the Privacy Act 2020.

10. COMPLAINTS 10.1. If you are not satisfied with our response to a privacy concern, you may complain to the Office of the Privacy Commissioner at privacy.org.nz.

— — — ⚠️ This is a boilerplate template, not legal advice. New Zealand employment, privacy, consumer, food-safety, and work health & safety law combines the Employment Relations Act 2000, the Holidays Act 2003 (under active reform via the proposed Employment Leave Bill), the Privacy Act 2020, the Consumer Guarantees Act 1986, the Fair Trading Act 1986, the Food Act 2014, and the Health and Safety at Work Act 2015 — several of which are mid-reform as of mid-2026 and change on fixed dates that this template flags but does not resolve for you. Have it reviewed and adapted by a lawyer or Employment New Zealand before use, check current guidance and free official templates at employment.govt.nz (including the Employment Agreement Builder at eab.business.govt.nz), and confirm the minimum wage and any other statutory rate in force on the date of use (rates change every 1 April).