This policy was last updated on 29 September 2023.
Who we are
Whanganui Regional Museum (“us”, “we”, or “our”) operates the wrm.org.nz website (“our website”).
We comply with the New Zealand Privacy Act 2020 (the “Act”) when dealing with personal information. Our Privacy Officer also acts as data controller for the purposes of applicable data protection laws and regulations, including the General Data Protection Regulation (“GDPR”) of 27 April 2016. Personal information is information about an identifiable individual (a natural person). This policy sets out what and how we will collect, use, disclose and protect your personal information. This policy does not limit or exclude any of your rights under the Act. If you wish to seek further information on the Act, see www.privacy.org.nz.
Privacy Policy
We use industry-standard processes to protect our websites and your personal information. When you interact with us you may share some personal data with us. We may also receive personal data about you from third parties with whom you interact in relation to our products and services or your contractual arrangements with us.
Changes to this policy
This is our current Privacy Policy and may be updated from time to time. We may change this policy by uploading a revised policy onto our website. The change will apply from the date that we upload the revised policy.
Who do we collect from
We collect personal information about you from:
- you, when you provide that personal information to us, including via our website and any related service, through any registration or subscription process, or through any contact with us.
- third parties where you have authorised this or the information is publicly available.
If possible, we will collect personal information from you directly.
How we collect and hold information
Collection of personal data may arise in person, via our digital channels, by phone, email or other method. Examples of direct collection of personal information are:
- Filling out our feedback form;
- Entering competitions and promotions;
- Emailing, calling or contacting our customer service team or using our website contact message system;
We may also collect personal information from third parties. We may also collect or obtain your personal information that you manifestly choose to make public, including via online channels.
What personal information do we collect?
The kind of personal information we collect and hold includes names, contact details, preferences, website usage, marketing information, general inquiries and other feedback.
Storage and security
We hold your personal information at Whanganui Regional Museum. The information is usually stored electronically on servers owned by us or third party data storage providers engaged by us. No data transmissions over the internet can be guaranteed as completely secure therefore we cannot warrant or guarantee the security of information transmitted from or to you, however once we receive your personal information we will use reasonable efforts to protect the security of your personal information.
We protect our customers from unauthorised access to or unauthorised alteration, disclosure or destruction of information we hold.
We review our information collection, storage and processing practices, including physical security measures, to guard against unauthorised access to systems.
If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognise and approve any follow-up comments automatically instead of holding them in a moderation queue.
For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
How we use your personal information
We will use your personal information:
- to verify your identity;
- to provide information to you;
- to improve the services and information that we provide to you;
- to respond to communications from you;
- to conduct research and statistical analysis (on an anonymised basis);
- to protect and/or enforce our legal rights and interests;
- for any other purpose authorised by you or the Act.
We will ask for your consent before using information for a purpose other than those set out in this Privacy Policy.
Our website may also contain links from or to other sites where information practices may be different. If you “click” on a banner advertisement or another company’s logo on our websites, the “click” may take you off our site. This includes links to and from other companies such as advertisers, sponsors, retailers and partners that we may have joined with to offer or provide you with any products, services, competitions or promotions.
We and the other company may share your personal information and may use it to identify future promotional opportunities or to fulfil promotional or contractual obligations. When you arrive at our websites as a link from one of our partnering company’s website, we may share your personal information provided to us as a result of using that link with that other company.
You should consult the other party’s website privacy notice as we are not responsible for and do not control the information once you are on a third party website.
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
Disclosing your personal information
We may disclose your personal information to:
- our employees, contractors and agents who need to know information in order to process it for us, and who are subject to strict contractual confidentiality obligations and may be disciplined or employment terminated if they fail to meet those obligations;
- any business that supports our services and/or products, including any person that hosts or maintains any underlying IT system or data centre that we use to provide our website;
- other third parties (for anonymised statistical information);
- professional service firms providing services to us, such as legal, insurance or accountancy services;
- any other person authorised by you;
- other entities as required by law, such as to regulatory agencies.
We may also share information about visitors in aggregate with third parties including advertisers, business partners and sponsors to understand visitor trends and patterns and to manage and improve our service. Such information will be anonymous so that visitor’s privacy is protected.
Use of cookies and website analytics
We may use available technology to determine which areas of our websites you choose to visit and the activities which you elect to participate in. This information will be used for the purposes of managing your account, business development, trend analysis and marketing. For this purpose we use cookies and web analytics. Most websites allow you to disable or control cookies but this may affect your ability to use some of the features on our site.
Cookies are small text files that are placed in your browser by our websites you visit. They are widely used to help users navigate websites efficiently, to perform certain functions on the sites and/or to provide site owners with information about how their sites are used.
We also use tracking cookies for web analytics tools and to analyse non-identifiable web traffic data to improve our services. It allows us to collect, hold and use statistical information about visits to help us improve our site and marketing.
Statistical information may include:
- Your IP address;
- The search terms you used;
- The pages accessed on our site and the links you clicked on;
- The date and time you visited the site;
- The referring site (if any) through which you clicked through to this site;
- Your operating system (eg Windows, MacOS);
- The type of web browser you use (eg Google Chrome, Mozilla Firefox); and
- The communication channel you may have chosen to use to connect with us (such as Facebook or Twitter) and the personal data you supply to us.
This type of data collected is aggregated and is not personally identifiable. Our web analytics may not apply “do not track” settings and you may wish to adjust your browser settings manually (see your specific browser instructions for further information). We may also use third party providers to provide us with these web analytics services.
If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.
Links to social networking services
We use third party sites such as media and social networking services such as Facebook and Instagram to help communicate our messages and give you the best experience. We may track your use of our pages and promotions on their sites.
When you communicate with us using a third party site, that site may also collect your personal information for its own purposes. The third party sites have their own privacy policies which are independent of ours. The third party site may also track your use of our page or our link on their site and also any link they may display on our site. If you are logged in to those services (including any Google, YouTube or Facebook service) while using our site, their tracking will be associated with your profile with them.
Email and other electronic communications
We are committed to full compliance with the Unsolicited Electronic Messages Act 2007. By subscribing to our email and/or text communications, or otherwise providing us with your email address and/or mobile number, you consent to receiving emails and/or texts which promote and market our products and services, or the products and services of others, from time to time.
You can opt out of those communications at any stage by utilising the corresponding “unsubscribe” facility. Once you have unsubscribed from our email or text communications, we will remove you from the corresponding marketing list as soon as is reasonably practicable.
Personal information about other people
You must not provide us with personal information about another person unless that person has given authorisation through you, for us to collect, use and disclose their personal information for the purposes described in this Privacy Policy.
Transparency and choice
People have different privacy concerns. Our goal is to be clear about what information we collect, so you can make meaningful choices about how it is used.
Access to and correction of your personal information
You have the right to request access to your personal information and to request its correction. If so, please contact our Privacy Officer on 06 349 1110. Alternatively click here to email us or write to us by post to PO Box 352, Whanganui 4541, Whanganui.
If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
If you have any questions about this privacy policy, our privacy practices you can click here to contact us.