Privacy & data governance

What we collect, why, and what we will never do.

We work with people of all ages, including young people, and with people who may be in unsafe situations. That raises the standard we are held to well above the legal minimum, and it should.

The short version

We collect as little as possible, and only what we actually need.
We never sell, trade or share your information for marketing.
We do not track individual visitors, of any age, across our digital tools.
Data collected with Māori participants and communities is governed under Māori data sovereignty principles, with community control.
You can ask us what we hold about you, and ask us to correct or delete it.

Who we are

Solid Hearts Charitable Trust is a registered charitable trust in Aotearoa New Zealand (registration CC61723) and is the agency responsible for personal information collected through this site and our programmes. We handle personal information in accordance with the Privacy Act 2020(opens in a new tab) and its thirteen information privacy principles.

What we collect

When you contact us: Your name, email address, enquiry type and message. Used only to respond to your enquiry, and retained for two years so we have context if you contact us again.
When you take part in a programme: Anonymous or pseudonymised responses to our capability survey. Individual responses are not linked to a named person, are not shared with the workshop host or setting, and are reported only at cohort level.
When you volunteer or apply for a role: Contact details, referee information and, for roles working with young people, Police vetting results. Vetting results are held securely, accessed only by our Safeguarding Lead, and destroyed in line with our retention policy.
When you visit this website: Aggregate, privacy-preserving analytics — pages viewed and general region. We do not use advertising cookies, cross-site trackers, or third-party marketing pixels, and we do not build profiles of individual visitors.

Extra care for young people and people in vulnerable situations

We hold ourselves to a higher standard here than the law requires. We do not require an account or an email address to access any resource, and we do not use anyone’s image or words in our communications without explicit, revocable consent — from a young person and their whānau, or from an adult participant, alike.

Where someone discloses something during a programme that raises a safety concern, we follow our safeguarding policy and the host or setting’s agreed referral pathway — the same standard whether the person disclosing is a young person or an adult. Facilitators are explicit with participants about this before any session begins — nobody is misled into believing a disclosure will be kept confidential when it cannot be.

Māori data sovereignty

Data collected with Māori participants, whānau, hapū, iwi and communities is treated as a taonga. Governance of that data sits with the community it came from: they decide how it is used, whether it is published, and when it should be returned or destroyed. This is agreed in writing at the start of every partnership, not negotiated afterwards.

Your rights

You have the right to ask what personal information we hold about you, to ask us to correct it, and to withdraw consent you have previously given — including consent for a story or quote, which takes effect immediately and without questions. Email info@solidhearts.org.nz. We will respond within 20 working days.

If you are not satisfied with how we have handled your information, you can complain to the Office of the Privacy Commissioner(opens in a new tab).

What we will never do

Sell, rent or trade your personal information.
Share your information with another organisation for their marketing.
Use advertising trackers or build behavioural profiles of visitors.
Require anyone to identify themselves to access a resource.
Publish anyone's story, image or words without explicit, revocable consent.
Retain information for longer than we have a genuine reason to.