How we secure your data

We do our best to keep your Personal Data safe. We use safe protocols for communication and transferring data (such as HTTPS). We use anonymising and pseudonymising where suitable. We monitor our systems for possible vulnerabilities and attacks.

Storage and Security:

• Storage and retention
  We use third-party providers to store and process our data.

  We store most of the personal information we collect and generate electronically on AWS cloud servers located in Australia. We also use Microsoft Office 365 for our email and other office productivity applications. This means that the personal information we hold may be transferred to, or accessed from, countries other than New Zealand.

  We retain personal information in compliance with the requirements of the Public Records Act 2005.

• Security

  We take all reasonable steps to ensure the personal information we collect is protected against loss, unauthorised access and disclosure or any other misuse, including meeting the requirements prescribed by the New Zealand government for the secure handling, storage and disposal of any protectively marked or security classified information.

Regular Security Audits and Assessments:

• We conduct regular security audits and risk assessments to ensure the continuous protection of your personal data against unauthorised access, alteration, disclosure, or destruction.

Awareness:

• We enforce strict internal policies and control measures to ensure that your personal data is handled responsibly.

Access Controls:

• We implement strict access controls to your personal data. Only authorised personnel have access to personal data, and they are required to maintain the confidentiality of this information.

Data Encryption:

• Sensitive data is encrypted both in transit and at rest, using advanced encryption technologies to protect against unauthorised access and data breaches.

Incident Response Plan:

• We have a robust incident response plan in place to quickly address any potential data breaches, minimising the impact and notifying affected individuals as required by law.

Regular Software Updates:

• We regularly update and patch our systems, applications, and infrastructure to protect against known vulnerabilities.

Network Security:

• Advanced network security solutions, including firewalls and intrusion detection systems, are deployed to protect against unauthorised access and cyber threats.

Data Minimisation and Retention Policies:

• We practice data minimisation by collecting only what is necessary for the intended purpose and retaining it only for as long as necessary.

Two-Factor Authentication (2FA):

• Where appropriate, two-factor authentication is implemented to provide an additional layer of security to our systems and your data.

Third-Party Vendor Assessment:

• We rigorously assess third-party vendors and partners for their security standards and compliance to ensure they provide adequate protection for any shared data.

Even though we try our best we can not guarantee the security of information. However, we promise to notify suitable authorities of data breaches. We will also notify you if there is a threat to your rights or interests. We will do everything we reasonably can to prevent security breaches and to assist authorities should any breaches occur.

If you have an account with us, note that you have to keep your username and password secret.