Privacy Policy
This Privacy Policy was last updated on 26 February 2025.
1. Introduction
1.1 NAIA (we, us, our) is committed to protecting the privacy of all customers and users of our online He Kura course accessible via our website at www.hekura.nz (He Kura).
1.2 We collect and store personal information about you to allow us to provide you with our services. Our collection of personal information is subject to the New Zealand Privacy Act 2020 (Act). This privacy policy (Policy) outlines how we collect, use, disclose and protect your personal information in accordance with our obligations under the Act.
1.3 Nothing in this Policy alters your rights under the Act. If you would like to learn more about these rights, please visit www.privacy.org.nz
2. Changes to this policy
2.1 Please note that we may make changes to this Policy at any time by uploading a revised Policy onto our website at https://www.hekura.nz/p/privacy. Any changes will be effective from the date that the revised Policy is uploaded. We encourage you to review the Policy regularly for the latest information on our privacy practices.
3. Why we collect your personal information
3.1 We collect personal information from you for the purpose of facilitating and improving the provision of our services to you. We also collect your information to provide you with marketing materials where you have consented to us doing so (Purposes).
3.2 We only collect your personal information for reasons associated with these Purposes.
4. Your consent to our collection of your personal information
4.1 By engaging with He Kura you consent to your personal information being collected, held and used in accordance with this Policy or for any other use that you authorise.
4.2 This includes the collection of your:
(a) name;
(b) email address;
(c) details of purchases made through our Website; and
(d) other information we reasonably require in order to provide you with our services.
4.3 If you contact us by phone, we may record the call and note the details of it. This information may be used by us for training, service improvement, or for statistical purposes.
4.4 We also collect information about your usage of our Website through the use of cookies. Cookies are an alphanumeric identifier that is transferred to your computer’s hard drive so that we can recognise you on future visits. We use the information gathered from these cookies in the administration and improvement of our website. If you do not authorise us to use cookies, you may disable cookies by changing the settings on your web browser. Please note that this may mean that you cannot use some or all of the features of He Kura.
4.5 We collect technical information about your device when you access He Kura. This includes information about your:
(a) device and web browser;
(b) mobile phone carrier;
(c) location;
(d) IP address; and
(e) interactions with He Kura.
We will treat this information as personal information. Your device may allow you to restrict our ability to view this information, however, please note that this may mean you are unable to use some or all of our services.
4.6 More detailed information about why we collect the personal information outlined above is available upon request.
5. How we collect your personal information
5.1 We may collect your personal information from:
(a) you, where you provide that information to us, whether that be via the use of He Kura or when you otherwise voluntarily provide us with information that is relevant to the Purposes of this Policy;
(b) third parties, where you have authorised that your information be shared with us; and
(c) other sources, where the information is publicly available.
6. What we may use your personal information for
6.1 We may use your personal information for the following reasons:
(a) to verify your identity;
(b) to provide our services to you;
(c) to communicate with you and respond to communications from you;
(d) to improve the services we provide to you, including by tailoring your experience with our services by making assumptions about you based on your provided information and activity on He Kura;
(e) to bill you and to collect money that you owe us;
(f) to conduct research and statistical analysis (on an anonymised basis where possible);
(g) to protect and/or enforce our legal rights and interests, including defending any claim; and
(h) for any other purposes authorised by you or the Act.
7. Who we may disclose your personal information to
7.1 We may disclose your personal information to:
(a) any business that supports us or our services and products, including Teachable, Inc., and any other person that hosts or maintains any underlying IT system or data centre that we use to provide He Kura or other services, any payment providers, any fraud detection partners, marketing and advertising partners, and customer support partners;
(b) other third parties (for anonymised statistical information);
(c) a person who can require us to supply your personal information (such as a regulatory or government authority);
(d) any other person authorised by the Act or another law (such as a law enforcement agency); and
(e) any other person authorised by you.
7.2 We may also disclose your personal information to any entity that we enter into any joint venture with or any other business that we are sold to or merged with.
7.3 We will only disclose personal information to the parties listed above if it is necessary and appropriate to facilitate the Purposes for which your personal information was collected pursuant to this Policy.
8. Direct marketing
8.1 Where you have given consent to do so, we will use your personal information to directly market our services to you.
8.2 We may carry out this direct marketing by online advertising, email, phone, or post.
8.3 You have the right to revoke your consent to receive direct marketing at any time by contacting us.
9. Advertising and third-party links
9.1 He Kura may contain links to a variety of advertising and third-party website sources. If you follow a link from He Kura to any other website, the owner(s) of that site will not be bound by our Policy and may have their own privacy policy in place. We suggest that you review that site’s privacy policy before you provide your personal information to them.
10. How long we will store your personal information
10.1 We will hold your personal information for as long as it is reasonably required to provide you with He Kura and to comply with any applicable legal obligations.
11. How we protect your personal information
11.1 We take all reasonable steps to keep your personal information safe from loss, unauthorised activity or other misuse. These steps include:
(a) adopting and regularly reviewing the performance and terms of our internal data security policies and systems to ensure that they are fit for purpose and protect your personal information from unlawful processing, accidental loss, destruction and damage; and
(b) adopting technologies for our internal use that meet the standards required by the Act.
11.2 The personal information that we collect from you may be processed outside of New Zealand where this is necessary to provide He Kura to you. Where we disclose personal information to entities outside of New Zealand, we will make all reasonable endeavours to ensure that those entities offer satisfactory protection for your personal information in accordance with the requirements of Act.
11.3 If you wish for your personal information to not be disclosed outside of New Zealand, please let us know. However, this may mean that you may be unable to use any or all of our services.
11.4 We have taken steps to ensure that our Website is secure. We use the secure HTTPS data transfer protocol for the transmission of data and our site holds an SSL certificate from a trusted organisation. Despite this, the internet is not in itself a secure environment and we cannot give an absolute assurance that your information will be secure at all times. Transmission of personal information over the internet is at your own risk and you should only enter, or instruct the entering of, personal information to the service within a secure environment.
11.5 Any payments that are processed via He Kura are encrypted and processed using a reputable external credit card payment processer. We do not store your payment details.
12. Response and notification in the event of a security breach
12.1 Should a security breach occur in which your personal information is lost, stolen, accessed, used, disclosed, copied, modified or disposed of by any unauthorised person or in any unauthorised manner, we will in all aspects comply with the requirements of the Act when responding to this breach (including in regards to notifying you of that breach).
13. Your rights to access, correction and deletion of your personal information
13.1 Under the Act, you have the following rights:
(a) The right to be informed about how your data is being used. If you would like further information beyond that provided in this Policy, please contact us.
(b) The right to access readily retrievable personal information held by us about you. This right is subject to certain grounds for our refusal as outlined in the Act.
(c) The right to request corrections to the personal information that we hold about you. Should you request a correction, we will make the correction should the correction be reasonable and we are reasonably able to make it. If we are unable to, we will take reasonable steps to note the requested correction in our records against your data.
13.2 If you would like to exercise the above rights, please contact us. Please clearly state what information you are requesting, provide evidence of your identity, and notify us of anything else you deem relevant to your request.
14. How you can contact us about privacy matters
14.1 If you have any queries or requests concerning this Policy, please contact us at [email protected]