Privacy policy

Estuary Arts Centre Privacy Policy

This Privacy Policy relates to Estuary Arts Centre which governed by the Estuary Arts Charitable Trust (EACT) who leases the building from the Auckland Council. This Privacy Policy explains how EACT collects, stores, uses and discloses personal information about its customers and suppliers. We strive to take a consistent approach to privacy practice but may occasionally handle personal information differently. We will tell you before collecting, using or disclosing personal information in ways not covered by this policy.

Information we collect from you

Most of the personal information we collect about you is provided by you directly during your interactions with us at the EACT or on our website, www.estuaryarts.org, including when you become a member.

We always take care to ensure that we only collect personal information needed to provide our services and help run our business. The types of personal information we may collect include:

• Contact and identification information – for example, your name, gender, date of birth, address, telephone numbers, email address and signature.
• General interest information, such as your art and newsletter interests, preferences and capabilities.
• Membership information, such as your Membership number (for more detail on this see below).
• Account and payment information, including bank and credit card details.
• Purchase information, such as specific products or services purchased, dates of purchase and any returns. This includes if you engage or seek a quotation for a product and/or service from a third party that we use to provide that product and/or service to you.
• Video footage or still images, where the arts centre operates video surveillance systems (wherever you see video surveillance systems and/or a sign notifying you “CCTV IN OPERATION” or similar, including inside the venue.
• Social contact information, including any communications via social media, complaints, feedback and other contact you have with us.
• Contact and similar information if you are a supplier or service provider, in connection with the supply of products and services by your business to EACT.
• Digital information, such as cookies, pixels, software versions used, device identifiers (like IP address), location data (where available and not disabled by the user), dates, times, file metadata, referring website, data entered, and user activity such as links clicked app installations, app launches, adding items to a basket, adding items to a wish list and making purchases.

How we use your personal information

We primarily use the personal information we collect about you to ensure that you receive the best products and services from us. We want to add value to your art experience, and your personal information helps us to make sure we get this right.

We may use your personal information for the following purposes:

• To fulfil orders and deliver products and services to you.
• Managing our relationship with you, including contacting you about your purchases and/or account.
• Considering feedback and complaints that you may make to us.
• To determine your product or service preferences when using our websites or mobile applications.
• To undertake data processing, data analysis, market research or trend analysis.
• To monitor customer traffic in our venue.
• In the case of our suppliers, to manage the supply of products and services to us and our customers.
• Managing and monitoring our risks, including:
  • preventing and detecting the commission of offences in our venue;
  • ensuring the safety of our customers, volunteers and staff;
  • identifying and investigating health and safety hazards or incidents;
  • recovering any unpaid debts or other monies owing; and
  • complying with our legal and regulatory obligations and any lawful requests from government agencies or regulators.

We may also use your personal information for other purposes, either after notifying you at the time of collection or where those uses are otherwise permitted by law.

How we share personal information

Sometimes, we need to disclose personal information to third parties in order to carry on our business. As noted above EACT may share personal information from time to time where permitted by law and/or as otherwise set out in this privacy policy. We may also disclose your personal information to:

• Trusted third parties involved in providing products and services to you, such as product suppliers, couriers adn tutors.
• Our trusted service providers, who provide other administrative and operational services to us in connection with our business, such as IT service providers, advertising agencies and payment processers.
• Third party platforms who serve advertising or content (including personalised advertising) based on your personal information or preferences (including social media platforms such as Facebook).
• Debt collection agencies or credit reporters as part of the account set up and debt recovery
• Law enforcement agencies, where we reasonably believe it is necessary to assist with the management of retail crime.
• Our professional advisers, where required to enable any such adviser to provide services to us.
• Other persons disclosed to you at the time the relevant personal information is collected.

Opting out of offers

From time to time, we will send you offers of products and services because we want to make sure you’re getting the best out of us.

But, we know that sometimes you might not want to hear from us in this way. We respect that. You can opt out of receiving offers from us at any time. To do so, sign in to www.estuaryarts.org and change your preferences or use the unsubscribe function in our promotional emails.

How we keep your personal information secure

The personal information we collect about you is held by EACT and by our trusted data storage providers (which may include storage in ‘cloud’ facilities).

We take all reasonable steps to ensure that the personal information we hold is protected against loss, unauthorised use, access or disclosure and any other misuse, and we require our trusted service providers to do the same, even where they may store or process personal information overseas. However, please note that whilst we take appropriate technical and organisational measures to safeguard the personal information that you provide to us, no electronic transmission or storage can ever be guaranteed secure.

We retain your personal information only for as long as we need it and we destroy the information we no longer need in a secure manner. CCTV footage is automatically deleted on a regular cycle, though in some cases it may be retained for longer where necessary to investigate an incident or assist the Police to investigate an offence.

Your rights to access or correct your personal information

You have the right to request a copy of any personal information Estuary Arts Centre holds about you, or to ask us to correct it if you believe it is inaccurate.

To make a request about your personal information, email us at manager@estuaryarts.org or write to us at Manager, Estuary Arts Centre Trust, 214B Hibiscus Coast Highway, Orewa, Auckland.

Links to other websites

Our website may contain links to other websites for your convenience and information. These websites may be operated by businesses not affiliated with us. Linked websites may have their own privacy statement, which we suggest you review if you visit them.

We are not responsible for the content of any websites that we do not control, any use of those websites or the privacy practices of those businesses.

Cookies and Third Parties

We want our advertising and information on our websites and related services to be relevant and interesting.

Our website uses cookies and local storage to collect and store information about you when you visit our site. Cookies are small data files which may include an anonymous unique identifier. They enable web sites to recognize repeat users, allowing sites to compile aggregated data for content and site improvements. They are typically sent to your browser from a web site and then stored on your computer/smartphone, from where data is sent to other web servers. Cookies and local storage are widely used.

Cookies are necessary to protect your privacy while disclosing your address details and while logging in and allow us to provide an optimal experience when using our website. Please note if you choose not to allow cookies, you may not be able to access all the services on our website.

We also promote our products and services using technology partners, such as Google Remarketing, as a method of targeting our advertising based on how you interact with our website. This means that you may see ads from us when you visit other websites. You can opt out of Google's, and our, use of these cookies by visiting Google's Ads Preferences Manager. View Google's advertising privacy policies.

Possible breaches

In the unlikely event that you become aware of a potential data breach involving EACT please let us know so we can fix it as quickly as possible. Please contact our Manager by emailing mailto:manager@estuaryarts.org.

Any further questions or complaints

Where we have refused a request for access to, or correction of, personal information or where you have any other concerns about the way we have handled your personal information, you have the right to make a complaint.

In the first instance, please let us know about your concerns by contacting our Manager using the contact details set out above. We’ll do everything we can to put the matter right, but if we can’t resolve your complaint for you, then you have the right to make a complaint to the Office of the Privacy Commissioner by:

Completing an online complaint form at www.privacy.org.nz; or Writing to the Office of the Privacy Commissioner, PO Box 10-094, The Terrace, Wellington 6143. Updates to our Privacy Policy From time to time we may update this Privacy Policy, to reflect changes to our business, products or services or changes to the Privacy Act. We’ll update the Privacy Policy on our website but may not otherwise notify our customers of a change. As such please make sure you review it periodically to ensure you’re up to date with our privacy practices.

Last updated: 5 October 2021