IHC New Zealand Incorporated (IHC) is committed to protecting Personal Information and privacy rights generally. This privacy statement (Statement) explains how IHC and its related organisations (we, us) collect and handle your Personal Information. In this Statement, each reference to IHC (including terms such as “we” and “us”) includes our related organisations.
When we refer to Personal Information throughout this Statement, we mean Personal Information as defined in the New Zealand Privacy Act 2020 (Privacy Act), being any information about an identifiable individual (Personal Information).
This Statement sets out the ways in which we collect, store, use, disclose and protect your Personal Information in relation to IHC’s website at www.ihc.org.nz (Website), related online sites and applications (including the websites of our related organisations and subsidiaries), services and fundraising activities.
We will comply with the Privacy Act and any other relevant legislation in relation to how we handle Personal Information.
By providing your Personal Information to us, you are consenting to the collection, storage, use and disclosure of that information as set out in this Statement.
This Statement is subject to change. Any changes will be effective when posted on our Website, along with a notice of the change. Your continued provision of information to us and/or use of our Website, related online sites or applications, or services constitutes your acceptance of the updated Statement and any Personal Information collected or held by us will be subject to the updated Statement.
1. Personal Information We Gather
IHC will collect Personal Information where the information is reasonably necessary for one or more of our functions or activities or where the collection is otherwise permitted by law.
IHC will collect Personal Information when you contact us, visit our Website and/or related online sites and applications, make an inquiry, make a donation, purchase or use our services, or otherwise provide us with your Personal Information. This could include when you join as an IHC member, make a one-off or regular donation, participate in a fundraising activity such as joining the Smile Club or registering for the Calf and Rural Scheme (Fundraising Activity), or register or apply for a job vacancy.
2. Using Your Personal Information
We use the Personal Information we have collected from you for the purpose of conducting our business, including to:
- Verify your identity;
- Respond to any requests or correspondence from you;
- Communicate with you about matters and information that is relevant to IHC and your involvement with IHC, including a donation if you have made one, your membership, or a job application or expression of interest;
- Manage and improve our Website and related online sites and applications;
- Provide you with any services that we offer (including our Website and related online sites and applications);
- Provide you with information about a service that you are using (including critical updates, announcements);
- Process and manage IHC membership applications and the related membership portal;
- Process any Fundraising Activities and registrations, including allocating you a Supporter ID used to identify you on our fundraising database;
- Reduce the need for you to repeatedly enter the same information;
- Where you create a message using our Website or related online site or application (for the purpose of sending that message to us, or to any other recipient specified by you), send that message;
- Communicate with you in respect of our advocacy, services, programmes, membership and fundraising activities;
- Carry out internal research and development, including planning for and improving future rights, advocacy activities, programmes, services and fundraising for people with intellectual disabilities and their families;
- Carry out and analyse surveys;
- Supply you with further information concerning fundraising and advocacy-related products and services which may be of interest to you and general updates about our work, including by electronic message;
- Analyse website usage, trends and statistics for evaluative and reporting purposes, on an anonymised basis;
- Monitor and prevent fraud and abuse committed via our services;
- Carry out any other use that is authorised by you, or is notified to you at the time of collection; or
- Protect and/or enforce legal rights and interests, including defending any claim; and
- Comply with the Privacy Act and for any other purposes authorised by you, or by law.
You may choose not to provide any Personal Information to us, however as a result we may not be able to process your membership application, Fundraising Activity or job application, provide our services to you, inform you of changes to our Fundraising Activities or operation of them, respond further to any related query, or provide our Website or related online sites and/or applications.
3. Access and Correction
You can access and request correction of any Personal Information that we hold about you at any time. Any such requests should be made directly by contacting IHC (see below for details). Please note that we will need evidence to confirm that you are the individual to whom the Personal Information relates.
In respect of a request for correction, if we think the correction is reasonable and we are reasonably able to change the Personal Information, we will make the correction. If we are not able to make the requested correction after taking all reasonable steps, we will let you know why and ensure a note is recorded on the Personal Information.
We may charge you our reasonable costs of providing to you copies of or correcting your Personal Information.
4. Billing Information and Transaction Processing
Should you sign up to be a recurring (IHC Smile Club) donor or donate a one-off amount, we require your billing information in-order to process the donation transaction. The Personal Information we collect about you may include, but is not limited to, credit card number details and bank account details to process direct debits. Credit card information is not stored or processed by internal IHC systems.
When making a credit card payment for a donation, we engage Flo2Cash, a secure PCI-compliant third party. Your credit card details and Personal Information are protected using the Secure Sockets Layer (SSL) / Transport Layer Security (TSL) protocol, which encrypts your information when transmitted over the internet.
For credit card donations, IHC securely stores only the last6 digits of a credit card number, its expiry date and credit card type, which allows us to identify the card used in the future. We do not store any other billing information.
If your donation is auto-renewing, a recurring subscription will be created with Flo2Cash, which will store your billing information on their secure payment gateway for as long as necessary to carry out the terms of your subscription. Should you cancel your subscription, your billing information will be immediately removed by Flo2Cash.
You can review Flo2Cash’s privacy policy here.
5. Personal Information Sharing and Disclosure
IHC does not share your Personal Information with others except as described in this Policy.
We do not share, sell, rent, or trade Personal Information with third parties.
Some Personal Information may be disclosed to third parties for the purposes set out at section 2 above, and for directly related purposes. Some of these parties may include:
- third party application and service providers IHC engages to:
- provide necessary functionality and improve user experience and our services; and
- complete a transaction, to operate or improve our Website and/or related online sites and applications, or to do something you have asked us to do;
- professional advisers such as legal counsel and auditors; and
- Government and other regulatory authorities where required or authorised by law.
6. Cookies
Our Website, and related online sites and applications, use Google Analytics, a web analytics service provided by Google, Inc. ("Google"). Google has its own privacy policy, which you can read here.
We may also collect website information including use location and internet protocol (IP) addresses.
Information about our Website and related online applications is also collected by using cookies. A cookie is a small text file that our Website and related online applications may store on your device, which helps us improve your user experience. Cookies will not collected identifiable information about you, but may identify your device.
You may disable cookies by changing the settings on your browser, although this may mean that you cannot use all of the features of our Website and/or related online applications.
7. Security
No data transmissions over the internet can be guaranteed to be 100 percent secure. Consequently, we cannot ensure or warrant the security of any information you transmit to us and you do so at your own risk. Once we receive your transmission, we make every effort to ensure it is kept securely. We take all reasonable steps to ensure that Personal Information is kept secure and to protect against loss, unauthorised access, use, modification, disclosure or other misuse.
We use physical, electronic and procedural safeguards to protect Personal Information about you.
Your account information is password-protected. Additionally, your account's password is stored using a salted, variable work factor, one-way hash algorithm.
In certain areas, IHC uses industry-standard SSL-encryption to protect data transmissions. However, please note that this is not a guarantee that such information may not be accessed, disclosed, altered or destroyed by breach of such firewalls and secure server software.
If IHC learns of a security systems’ breach, we may attempt to notify you electronically so that you can take appropriate protective steps. We may post a notice on our applicable websites if a security breach occurs. If this happens, you will need a web browser enabling you to view the applicable websites. We may also send an email to you at the email address you have provided to us in these circumstances.
8. Retention and Destruction of Your Personal Information
We will only retain Personal Information for as long as is required for the purpose/s for which it may lawfully be used. Once Personal Information is no longer required, we will securely destroy it or otherwise delete all identifying details information so that only anonymised data is retained.
9. Accuracy of Personal Information
We will take steps reasonable in the circumstances to ensure that your Personal Information is accurate, up to date, complete, relevant, and not misleading before using or disclosing it in accordance with this Statement.
10. Mandatory Reporting of Notifiable Privacy Breaches
If your Personal Information is involved in a privacy breach which we reasonably believe has caused or is likely to cause serious harm to you (“a Notifiable Privacy Breach”), we will inform you and recommend what steps you should take in response. We will also report a Notifiable Privacy Breach to the Office of the Privacy Commissioner.
11. Opting Out
We will only send mail or email to people who we believe are willing to receive it, and only in relation to our services (including membership and fundraising). If you do not wish to receive future communications from us, please use the 'unsubscribe' link located at the bottom of our email communications or contact us on 0800 442 442.
12. Contact us
Please contact our Privacy Officer if you have any questions or concerns about how we manage your Personal Information (including requests to access or make corrections to Personal Information that IHC holds), either by email (privacy@IHC.org.nz), or by phone at 0800 442 442.
Updated 26 March 2025
