- your name, personal and tax details, and home address
- information we collect when you use our website, social media profiles, and external websites
We only use information if we’re allowed to – or the law requires it
Whenever we work with personal information, we comply with the laws of New Zealand, including the Privacy Act 2020.
We are allowed to use personal information when:
- you’ve agreed to let us use it – for example, you’ve given us a copy of your details to open an account with us
- we meet our legal obligations – for example, to comply with anti-fraud and anti-money laundering laws.
You have rights to access your personal information
We respect the trust you give us to hold your personal information because we know that your information – and your privacy – are important.
For more information on your rights, including how to make a request to access or correct your personal information see ‘How do you access your personal information and update it?’ point 9 below.
- Who we are
- What information do we collect and how do we collect it
- Credit Reporting
- How do we store your information
- How do we protect your information
- Use and Disclosure
- What about links to other websites
- Do we disclose your personal information overseas?
- How do you access your personal information and update it
Who we are
Kilmarnock Enterprises Limited (Kilmarnock Enterprises) is a New Zealand registered charity (CC39378) that specialises in offering unique, supportive and enriching employment together with training opportunities for people with intellectual disabilities.
We leverage business excellence as a contract manufacturer, enabling Kilmarnock to empower adults with diverse needs, to upskill, gain hands on experience and confidence and ultimately pursue their career of choice.
Our registered address is 21 Lodestar Avenue, Wigram, Christchurch, New Zealand.
What information do we collect and how do we collect it
We only collect information that we consider necessary for our business activities and based on our relationship with you.
We try to collect personal information directly from you (unless it is unreasonable or impractical for us to do so). You have the right to refuse providing us personal information however this may restrict our ability to assist or serve you.
The kinds of personal information collected by Kilmarnock Enterprises include:
- Enquires or feedback: information you give us including your name, contact details (such as phone, email or address), enquiry details, opinion of our products and records of your communications with us.
- Supply: information you give us if you supply a product or service to us, or we supply a product or services to you, including any personal information collected in connection with any sales returns, stock adjustments or orders made in error.
- Credit: information necessary for us to process applications for credit including any personal guarantees and payment information.
- Websites: usage information such as the way you use or navigate our websites may be recorded so that we can improve our communications with you online, in addition to technical computer information.
- Social media: any information which you allow to be shared with us that is part of your public profile on a third party social network, or information you create and share with us by posting it to one of our social networks.
- Recruitment and contractors: information you give us if you apply for a job with us. For recruiting purposes, it may be necessary for us to request sensitive information from you for the NZ Police (Vetting Service) and/or the Ministry of Justice (Criminal Conviction History). Examples of the types of sensitive information which may be collected from you for these purposes includes your membership of professional associations and proof of identification. When clearances have expired they are destroyed. We do not retain the CV’s of unsuccessful applicants unless requested. We do not advise when documents have been destroyed.
- Third parties: generally speaking, we only collect personal information directly from you and our interactions with you in our business. We may obtain information from third parties, or publicly available information, for example the Companies Register.
If we have extended a credit facility to you, we will also collect information internally about your payment performance. As part of our customer on-boarding process we will request personal information from you and may request credit references from you in order to approve the application.
How do we store your information?
We hold personal information and credit information in:
- Computer systems
- Electronic databases
- Digital archives
- Hard copy or paper files.
Our storage mechanisms may be managed in a number of ways. These may be managed or administered internally by Kilmarnock Enterprises and may be held locally in New Zealand or overseas. They may be managed by third party storage providers, or utilised by the software system applications that we use, all of whom Kilmarnock Enterprises has a contractual relationship and may be either managed locally or overseas.
We retain personal information only for as long as we need it in order to continue to provide you with our service(s), maintain the security of our websites or as required by law.
How do we protect your information?
We will take all reasonable steps to protect your personal information from misuse, interference and loss, as well as unauthorised access, modification or disclosure. The ways we do this include:
- Limiting physical access to our premises
- Limiting access to the information we collect about you (for instance, only those of our personnel who need your information to carry out our business activities are allowed access)
- Requiring any third party providers to have acceptable security measures to keep personal information secure
- Putting in place physical, electronic, and procedural safeguards in line with industry standards; and
- Destroying or de-identifying personal information pursuant to the law and our record retention policies where relevant.
Use and Disclosure
We may use and disclose your personal information and credit information for the following purposes:
- Verification: We may use and disclose personal information to verify your identity when engaging with us;
- Offers: We may use personal information to inform you about other products and services offered by us which we consider may be of interest to you;
- Legal requirements: We may disclose personal information to legal and accounting firms, auditors, contractors, consultants and other advisors for the purpose of administering, and advising on, our business and for associated actions; legally we may be required to provide information to the IRD and the Ministry of Social Development.
- Customers and third parties: if you are an employee, contractor or have been engaged by us to provide services to our customers or third parties, and if you have provided us with sensitive information, we may be required to disclose this sensitive personal information where it is required by law or directly relevant to the provision of services.
- Credit reporting: If you apply for credit we will collect personal information from you which we will use to process applications for credit. In the instance we require reference checks we will request information from your references to related to your credit history with them.
- Other: We may use and disclose personal information for any other use associated with such purposes or for which you have given permission.
- Third Parties: Third parties, some of which are based overseas, which we share your personal information with include:
- Microsoft: our cloud hosting and computing infrastructure provider
- Google Analytics and Google Ad Manager for our websites
- Shopify for processing online purchases
- Stripe for processing recurring online purchases
- We do not authorise third parties to use or disclose your personal information except for the purpose of providing the service we request from them. All third parties, which we disclose your personal information to, are subject to obligations under the New Zealand Privacy Act 2020 to protect your information from unauthorised use or disclosure.
What about links to other websites?
Do we disclose your personal information overseas?
Except in the cases where our computer systems require overseas storage or they are housed overseas, there is no requirement for Kilmarnock Enterprises to disclose your personal information to overseas recipients.
How do you access your personal information and update it
If you would like to access the information held about you, please contact us at the details below. Under the Act you are entitled to make a request for the information we hold about you to be updated or corrected, subject to the exceptions under the Act.
A fee may be charged to access your personal information which we will advise you of at the time. We will also need to verify your identity before providing you with the relevant personal information.
You can also ask us to delete your personal information, which we will do unless we are legally required or otherwise permitted to continue storing your information.
It’s easy – just email email@example.com and include the words ‘ATT: THE PRIVACY OFFICER’ or call us on 03 348 5162.
We will respond as quickly as possible. Please note that we may need additional time to respond to requests for large amounts of information.
How to make a complaint
We take your concerns seriously. If you have any concerns about privacy or the use or collection of your personal information by Kilmarnock Enterprises please email us at firstname.lastname@example.org and include the words ‘ATT: THE PRIVACY OFFICER’ or call us on 03 348 5162.
We will respond as quickly as possible and handle all complaints in a way that is fair and consistent. If you are not satisfied with our response, you can make a formal complaint with the relevant privacy regulator:
Office of the Privacy Commissioner
Complaints may be made:
Phone: 0800 803 909
Mail: Office of the Privacy Commissioner, PO Box 10094, Wellington 6143
It may become necessary for us to update the terms of this policy. Any changes will be updated on our website. Your continuing relationship with us following any updates constitutes acceptance of this policy as amended. We recommend that you check back from time to time to make sure you are aware of any updates.
[This policy was last modified on 28-07-2021]