April 2021
Brighter Days is committed to ensuring that privacy is respected and maintained at all times. Brighter Days complies with the New Zealand Privacy Act 2020. This Statement explains the ways in which your information may be used.
Your use of Brighter Days’ web site and/or web services shows you consent to Brighter Days’ collection, use and disclosure of personal information in the manner set out below.
Your use of the Brighter Days websites and web services involves the collection by Brighter Days of personal information about you. For example, when you visit Brighter Days’ website, Brighter Days may collect your registration details including your email address and other identifying information. Brighter Days may collect personal information from you to be able to provide you with access to some web services.
Personal information will be collected when you register to use Brighter Days services or to allow Brighter Days to contact you. Brighter Days may also collect personal information if you use or invoke its support services via email.
Brighter Days automatically receives certain types of information whenever you interact with the Brighter Days website. This includes your IP address and the type of browser or operating system you use. Brighter Days may also use “cookies” to track how you use Brighter Days’ website. A cookie is a standard software that a web server can store on your computer which can be used to identify you should you visit Brighter Days’ web site again. You have the ability to accept or decline cookies. Most Web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer.
Brighter Days does not disclose personal information except to complete a transaction at your request, for example, to data processing companies, banks, and payment gateways. Brighter Days will disclose your personal information without notice only if required to do so by law. Brighter Days may use or distribute personal information for trusted market research purposes but will always ensure that all personal identifiers are removed prior to the use of, or distribution of such information. Brighter Days will never sell, rent, or lease its customer lists or information to third parties.
You may make a request to access the personal information held about you, and Brighter Days will provide this if Brighter Days has such information and can readily retrieve it. You may also ask Brighter Days to correct personal information held about you that is not accurate or up to date.
The Brighter Days web site may contain links to other Web sites. Please be aware that Brighter Days is not responsible for the privacy practices of other sites our users choose to visit. If our users provide any information directly to parties other than Brighter Days (even if those sites are showing the Brighter Days brand), different rules may apply to the use or disclosure of the personal information disclosed. We encourage you to investigate and ask questions before disclosing your personal information to third parties.
Brighter Days secures the personally identifiable information you provide on computer servers in a controlled, secure environment, protected from unauthorised access, use or disclosure.
The Privacy Act and General Data Protection Regulation (Regulation (EU) 2016/679) requires that reasonable and appropriate protection is made around information, including personal information and customer data (“Information”), and that certain data breaches are reported to the relevant authorities. Brighter Days may collect and store Information to enable Brighter Days to provide services to its customers. That Information may be held in various forms and transmitted through systems controlled by Brighter Days or its customers.
In the event a data breach occurs or, a data breach is suspected, Brighter Days will follow this Policy and the below Response Plan to contain, assess and respond appropriately.
Notify: If personnel become aware of an actual or suspected data breach, Brighter Days will notify the Privacy Officer with information regarding the data breach.
Assessment: The Privacy Officer shall notify the relevant personnel to collate information regarding the data breach.
Assessment of Risk: The Privacy Officer in conjunction with management will assess the severity of the data breach based on the information received.
Notification: The Privacy Officer in conjunction with management will consider whether notification to the relevant authority and/or affected individuals is required and, if notification is required, make that notification.
Review: Brighter Days will undertake an internal review of the circumstances to consider if further action is required.
Brighter Days may, at its discretion, update or revise this Privacy Statement at any time. Any changes will take effect immediately once they are posted on its website. It is your responsibility to check Brighter Days’ Privacy Statement regularly for any modifications or updates. Your continued use of Brighter Days’ website or its web services after any changes have been posted on the website indicates your acceptance of those changes.
PO Box 767, Christchurch, 8140
