Privacy Policy
Dated: 1 July 2024 at 7:30AM
SCOPE
This privacy statement applies to personal information collected by STRICTLY SOCIAL NEW ZEALAND LIMITED T/A PEOPLE&PEOPLE.
PURPOSE
The purpose of this privacy statement is to let users and customers of PEOPLE&PEOPLE service and this website know when we collect personal information and what we do with it. PEOPLE&PEOPLE do not use, share or disclose personal information collected or received, except as set out in this statement.
WHY DO WE COLLECT PERSONAL INFORMATION?
PEOPLE&PEOPLE collect personal information in order to carry out its functions, which includes receiving reports about cyber incidents from individuals and business, and triaging, analysing, referring and responding to those incidents. For more information about what we do, please visit About ME page. https://www.peopleandpeople.co.nz/about-me/
COLLECTION, STORAGE AND USE
You can use this website without disclosing any personal information, subject to the use of website cookies. (See Statistical information and cookies).
VOLUNTARY DISCLOSURE OF PERSONAL INFORMATION
You may choose to voluntarily provide personal information to PEOPLE&PEOPLE, for example to report incidents, get in touch for services or provide feedback. You may also report incidents anonymously (see Collection of personal information). You are not required by law to provide PEOPLE&PEOPLE with personal information, although it may be required for PEOPLE&PEOPLE to assist you with incidents or help with your business.
COLLECTION OF PERSONAL INFORMATION
PEOPLE&PEOPLE may ask you to provide some personal information when you complete an online form, for example by submitting information to PEOPLE&PEOPLE through the site web form, or a form to subscribe to updates or news.
If you choose not to provide personal information, PEOPLE&PEOPLE and its partner agencies may not take further action in relation to helping you, but the information you provide will be used for statistical and reporting purposes (for example, collect the type of incident you are reporting so PEOPLE&PEOPLE can better understand New Zealand’s cyber threats – see Use of personal information).
HOLDING OF INFORMATION
When you provide personal information, it will be held by PEOPLE&PEOPLE. It may be stored or accessed on behalf of PEOPLE&PEOPLE by authorised third parties (such as third-party contractors) to the extent that is necessary, for example for them to administrate or work on the site/systems. Restricted access to the PEOPLE&PEOPLE incident management system may be provided to partner agencies where this is consistent with our ability to disclose the information to those agencies (see Disclosure of Information).
PEOPLE&PEOPLE will store and keep it secure in accordance with the Privacy Act 2020 and agents will be subject to PEOPLE&PEOPLE’s information security and privacy requirements.
Your personal information may also be held by a relevant partner agency that deals with your incident (see Disclosure of information). It will be held in accordance with the Privacy Act 2020.
DISCLOSURE OF INFORMATION
PEOPLE&PEOPLE will collect through its website information and other means of communication about incidents which should more appropriately be handled by other agencies and organisations (‘partner agencies’) in accordance with their statutory functions.
PEOPLE&PEOPLE’s partner agencies are:
– Lee HOWARD
For more information about what PEOPLE&PEOPLE partner agencies and/or individuals do, please visit our partners websites, by clicking on their names.
PEOPLE&PEOPLE will share information (including associated personal information) about an incident or needing support with these partner agencies if you have provided consent. You will be asked for your consent when further communication is proceeded on email.
PEOPLE&PEOPLE will not otherwise disclose personal information provided or collected unless you otherwise provide consent (for example, if we contact you to request consent to refer your incident to an appropriate agency) or as required or otherwise permitted by law.
USE OF PERSONAL INFORMATION
PEOPLE&PEOPLE will generally only use personal information provided to us for the purpose you provided it (for example, to action or respond to the incident you reported, to support and administer, evaluate and improve the site, and to improve our services). We may also use personal information provided to us for other reasons permitted under the Privacy Act 2020 (with your consent, for a directly related purpose, or where the law permits or requires it).
The purpose of this privacy statement is to let customers and users of the PEOPLE&PEOPLE service and this website know when we collect personal information and what we do with it. We do not use, share or disclose personal information collected or received, except as set out in this statement.
PEOPLE&PEOPLE uses information it collects about incidents, as well as information from other sources, to carry out its functions, which include situational awareness and reporting on trends and data sets.
PEOPLE&PEOPLE aggregate the information it receives to undertake vulnerability and threat analysis, and to identify and report on trends. This aggregated information is anonymised and does not identify individuals. PEOPLE&PEOPLE may share aggregated, anonymised information and reports with its international counterparts.
Records and retention of personal information
PEOPLE&PEOPLE will only retain personal information as long as it is required for the purposes for which the information may lawfully be used.
CALL RECORDING
As part of our commitment to providing the best possible service to our customers we at times record phone calls answered in our contact numbers. This helps PEOPLE&PEOPLE to identify ways that PEOPLE&PEOPLE can provide you with a better service.
PEOPLE&PEOPLE record calls:
– helping us to improve the quality of our customer service and to ensure the information we provide is consistent and accurate
– PEOPLE&PEOPLE can find ways to simplify our service to you, and
– to ensure PEOPLE&PEOPLE have an accurate record of your call, which may be needed to support any transactions that take place over the phone and/or if there is a dispute.
PEOPLE&PEOPLE understand your personal information is important to you, and we are committed to protecting your privacy. PEOPLE&PEOPLE store the recordings securely for two years and destroy them after this period.
Unless PEOPLE&PEOPLE have lawful reason for withholding this information, it will be made available if you request access to a transcript of your call by emailing the Privacy Officer at admin@peopleandpeople.co.nz
RIGHTS OF ACCESS AND CORRECTION
Your rights
You have the right to:
– find out from PEOPLE&PEOPLE whether PEOPLE&PEOPLE hold personal information about you
– access that information, and if applicable
– request corrections to that information.
If PEOPLE&PEOPLE have a good reason for refusing a request for correction, you are entitled to request that a statement be attached to the information of the correction that was sought but not made.
If you want to check personal information that we hold, please email the Privacy Officer at admin@peopleandpeople.co.nz
For more information on the privacy laws in New Zealand and contact details for the Office of the Privacy Commissioner, please visit their website. https://www.privacy.org.nz/
STATISTICAL INFORMATION AND COOKIES
STATISTICAL INFORMATION
PEOPLE&PEOPLE may collect statistical information about your visit to help us improve this site. This information is aggregated and non-personally identifying. It includes:
– your IP addresses
– the search terms you used
– the pages you accessed on our site and the links you clicked on
– the date and time you visited the site
– the referring site (if any) through which you clicked through to this site
– the device you used to access the site
– your operating system (for example, Windows XP, Mac OSX)
– the type of web browser you use (for example, Internet Explorer, Opera, Mozilla Firefox, Google Chrome, and Apple Safari), and
– their incidental matters such as screen resolution, the release of your installed Flash version and the language setting of your browser.
The statistical information referred to above will be viewable by site administrators and certain other PEOPLE&PEOPLE staff and contractors.
COOKIES
Browser or ‘web’ cookies are small text files that are sent by a website and stored on your computer’s hard drive. Cookies are generally used to improve your experience of a website (for example, by remembering preferences you have set) and to track site usage.
PEOPLE&PEOPLE do not use cookies on this website to gather any personally identifiable information. PEOPLE&PEOPLE use cookies to gather data about trends in site usage using a tool called Google Analytics.
You can read Google’s privacy statement, and access a Google Analytics opt-out tool, at the Google Privacy Center
You can manually disable cookies at any time – check your browser’s ‘Help’ to find out how (disabling cookies will not affect your ability to use this website).
SECURITY
PEOPLE&PEOPLE website have security measures in place to prevent the loss, misuse, and alteration of information under PEOPLE&PEOPLE control. In order to maintain the cyber security of PEOPLE&PEOPLE systems and information, PEOPLE&PEOPLE systems are subject to ongoing monitoring (including activity logging), analysis and auditing.
We may use information about your use of PEOPLE&PEOPLE website and other IT systems to prevent unauthorised access or attacks on these systems or to resolve such events. We may use this information even if you are not involved in such activity. PEOPLE&PEOPLE may utilise services from one or more third party suppliers to monitor or maintain the cyber security of its systems and information. These third-party suppliers will have access to monitoring and logging information as well as information processed on PEOPLE&PEOPLE website and other IT systems.
COMMERCIALLY SENSITIVE INFORMATION
DISCLOSURE OF INFORMATION
PEOPLE&PEOPLE will collect through its website information about incidents which should more appropriately be handled by other agencies, individuals, and organisations (‘partner agencies’) in accordance with their statutory functions.
PEOPLE&PEOPLE’s partner agencies are:
– Webshed Limited
– Isystems Limited
– Lee Howard
For more information about what our partner agencies and/or individuals do, please visit our partners websites, by clicking on their names.
PEOPLE&PEOPLE will share information (including associated commercially sensitive information) about an incident with these partner agencies if you have provided consent. You will be asked for your consent when you use the PEOPLE&PEOPLE web form.
PEOPLE&PEOPLE will not otherwise disclose commercially sensitive information provided or collected unless you otherwise provide consent (for example, if we contact you to request consent to refer your incident to an appropriate agency) or as required or otherwise permitted by law.
YOUR AUTHORISATION TO DISCLOSE INFORMATION
If you are reporting on behalf of an organisation, you should be authorised by the organisation to provide information to PEOPLE&PEOPLE and to authorise sharing of information (including associated commercially sensitive information) with other agencies.
OFFICIAL INFORMATION ACT
Your information and the Official Information Act 1982 (OIA)
You should be aware that information you submit as part of official processes may be subject to an OIA request, and could be supplied to a requestor, with the redaction of details as necessary to protect an individual’s privacy, or to redact commercially sensitive details or other details inappropriate for release, as guided by the OIA. Official information means any information PEOPLE&PEOPLE has created or holds, or which is held on PEOPLE&PEOPLE behalf by another person or organisation, and includes information submitted to us by PEOPLE&PEOPLE customers and users.
The purpose of the OIA is to:
– make official information more freely available
– provide for proper access by each person to official information relating to that person
– protect official information to the extent consistent with the public interest and the preservation of personal privacy
– establish procedures for the achievement of those purposes.
TRANSPARENCY STATEMENT
PEOPLE&PEOPLE transparency statement describes the kind of information PEOPLE&PEOPLE gathers to ensure it can effectively:
– protect people, information, and places
– ensure regulatory compliance, and
– detect and prevent criminal offending.