Privacy Policy

Introduction

From time to time, BRCM collects information about identifiable individuals (“personal information”), including when you use this website or make a donation.  BRCM is committed to protecting all personal information held by it, in accordance with the requirements of the Privacy Act 2020 (the Privacy Act).

Information Privacy Principles

1. Purpose of collection – BRCM collects personal information only where necessary for lawful purposes connected with BRCM’s activities.
   Personal information may be collected from you for the following purposes:

• Donor administration and correspondence
• Providing people who sign up to receive updates from BRCM with those updates
• Promoting BRCM’s activities
• Research grant administration
• Responding to website enquiries
• To comply with relevant laws and regulations
• For general administrative and business purposes
  
  If the personal information we request from you is not provided, we may be unable to provide you with requested services. 

2.  Source of personal information – Personal information is usually collected from you, but sometimes it may be collected from other people – for instance, when:
   • Getting it from you would prejudice the purpose of the collection.
   • It is necessary for the enforcement of the law or for the conduct of proceedings.
   • You authorise collection from someone else.

3. Manner of collection – Collection of personal information will be by lawful and fair means that are not unreasonably intrusive. Most of the personal information we collect is provided by you directly – for example, when you provide your name, address, email address and phone number when you register onto our website.
   
   We may also collect personal information when you visit certain parts of our website and provide content, feedback or suggestions. If you register onto our website, we may also collect information on your use of the site so that we can make our website as interesting as possible for you.
   
   Finally, when you visit our web site, “sessions” technology allows us to identify your movements around our site. Sessions alone cannot determine the identity of individual users. The only personal information a session can contain is information you supply yourself.

4. Storage and security of personal information – Personal information is safeguarded against loss or unauthorised access, use, modification or disclosure. It is impossible to stop all mistakes – but BRCM has reasonable safeguards in place to prevent loss, misuse or disclosure of personal information, including by limiting the number of people who can access the personal information.
   
   If you consider we have breached the Privacy Act, please contact us immediately on Get In Touch so that we can investigate the matter and take appropriate action.

5. Access to and correction of personal information – You have a right to ask for access to personal information that identifies you. BRCM will usually grant requests for access, but it can decline a request to give access to information when, for example, giving the information would:
   • Endanger a person’s safety.
   • Prevent detection and investigation of criminal offences.
   • Involve an unwarranted breach of someone else’s privacy.
     
     You are entitled to ask BRCM to correct information about you, if you think it is wrong.  If you would like to ask for a copy of your information, or to have it corrected, please contact us on Get In Touch.

6. Accuracy etc to be checked before use or disclosure – Before personal information is used or disclosed, BRCM takes reasonable steps to ensure the information is accurate, up to date, complete, relevant and not misleading.

7. Personal information not to be kept longer than necessary – BRCM will not keep personal information for longer than is necessary for the purposes for which the information may be lawfully used.

8. Limits on use of personal information – BRCM uses personal information for the same purposes for which BRCM collected that information, or for other reasons permitted by the Privacy Act.
   
   Other uses are occasionally permitted (for example because this is required by law, necessary to enforce the law, or the use is directly related to the purpose for which BRCM got the information).

9. Limits on disclosure within New Zealand – BRCM will only disclose personal information in the permitted limited and clearly defined circumstances. For example, BRCM can disclose information if it reasonably believes that:
   • Disclosure is one of the purposes for which BRCM got the information.
   • Disclosure is required by law
   • Disclosure is necessary to uphold or enforce the law.
   • Disclosure is necessary for court proceedings.
   • You have authorised the disclosure.
   • The information is going to be used in a form that does not identify the person concerned.

10. Limits on disclosure outside New Zealand – There are greater restrictions on BRCM’s ability to disclose personal information outside New Zealand. BRCM does not anticipate that it will disclose personal information to overseas parties.

11. Unique identifiers – BRCM does not use unique identifiers for an individual (other than the individual’s name) except in the permitted limited circumstances.

Breaches

If you consider that BRCM has breached the Privacy Act, please contact us immediately on Get In Touch so that we can investigate the matter and take appropriate action.