Forest & Bird wants to ensure your experience with our website and our digital platforms is safe, transparent and understandable, and protects your rights to privacy.
What this policy covers:
- Our main website http://forestandbird.org.nz
- The KCC/Hakutui Toa website http://kcc.org.nz
- Bird of the year https://www.birdoftheyear.org.nz
- My Forest & Bird http://community.forestandbird.org.nz
It also applies to personal information collected by us through other channels or sources, such as through petitions or submissions, or by face to face or telephone fundraising efforts.
This policy explains how Forest & Bird collects ‘personal information’, how that information is stored, secured and handled, and what rights you have in relation to that information, and retrieving or deleting your information.
This policy does not apply to pages or sites hosted by other organisations whom Forest and Bird might work with, or that our sites may link to. It only applies directly to properties owned or run by Forest & Bird.
“Forest & Bird” refers to The Royal Forest and Bird Protection Society of New Zealand Inc.
What is ‘Personal information’:
‘Personal information’ is information about an identifiable individual, company or business.
Personal information that Forest & Bird might collect from you includes your name, address, contact details (such as telephone number and email address) and, if you are a donor, your payment details and banking details. Specific activities may request additional information, such as your conservation preferences, family or spouse details (eg. KCC) or other information.
Collection and use of personal information:
Personal information is generally collected directly from you. However, sometimes we may use publicly available information to update your details. To do this, we sometimes use third party service providers who compare the information held by Forest & Bird against those available on public registers such as NZ POST’s ‘Change of Address’ service.
Other than the updating of information referred to above, Forest & Bird does not collect personal information from you unless you voluntarily choose to give it to us via one of our website properties, via My Forest & Bird, over email, a phone call, petitions, submissions, by signing up as a supporter or volunteer or another face-to-face communication, or by post.
We use personal information provided to us for the purposes for which it is provided, and for related purposes relevant to our activities or our branches activities. This might include (but is not limited to):
Processing donations and regular giving transactions
Maintaining and administering your membership with us
Organising volunteer activities
Branch functions and activities
To lobby local or central government or agencies thereof for the purposes of the submission or petiton you have signed up to
To market and communicate our news and important items of interest to you (if you have elected to hear from us. You can opt out at any time).
We do not sell, publicly disclose or rent your personal information to any person or entity.
How we store personal information:
Forest & Bird houses information on databases, web servers, local devices, computers and on cloud storage services.
Some of these are within New Zealand and some provided by overseas entities, or copies are stored on overseas services.
These may be provided by partner providers who operate their own privacy policies and data security policies that Forest & Bird has decided is sufficiently adequate and reliable as an enterprise class data storage facility. Forest & Bird however accepts no liability for the performance, security and reliability of such entities.
Our partner providers at anytime may include Google, Microsoft, Caduceus, Facebook, Dropbox, Blackbaud, AWS (Amazon web services), Sparks Interactive, Storbie and Web Drive.
Social marketing and web analytics:
Forest & Bird utilises technology for marketing and promotion activities that may anonymously make use of personal data to deliver ads or social content. This may include Google and Facebook re-marketing services that can identify a person by their email or social login data.
Additionally, we make use of Google Analytics for web statistics that provides anonymous web usage data and web interaction analysis to us.
Forest & Bird suggests users of such channels are always familiar and satisfied with the individual data and privacy policies put out by these organisations.
Cookies and automatic recall of web data:
Pages and services that handle credit cards:
Forest & Bird does not permanently store your credit card details.
Our donation page uses a third party payment processors supplied by Flo2Cash and Stripe, two of the world’s leading payment handling services (see https://stripe.com/nz/privacy). Stripe processes payments using Secure Sockets Layer (SSL), a security protocol that provides communications privacy over the internet in a way that is designed to prevent unauthorised parties from intercepting data communications.
More information about Flo2Cash can be found at https://flo2cash.com/nz/.
Payment Card Industry Data Security Standards (PCI DSS) define industry best practices for handling and protecting credit card details. All storage and transferal of your financial details by Forest & Bird and our payment processors is PCI compliant and is routinely reviewed and improved to ensure compliance.
We protect your information online and offline:
While we use SSL encryption to protect sensitive information online, we also protect user-information that may be stored locally or on a hard copy. All of your information, not just the sensitive information like a credit card number, is restricted in whom can access it. Only employees who need the information to perform a specific job (for example, our membership and fundraising officers) are granted access to personally identifiable information or information that might be sensitive in nature.
Your rights; updating, requesting or deleting information:
You have the right to know what information Forest & Bird holds about you, and to correct it in case of error or to have it erased if you wish. These obligations are provided in line with the Privacy Act 1993, but do not supercede our obligations for information retention inline with other applicable New Zealand legislation, such as the Financial Reporting Act.
If you have any questions about the information we maintain about you or your membership details please contact firstname.lastname@example.org or contact our data privacy officer below.
Members can update their details held with us via My Forest & Bird online portal.
Subscribers can edit their communication preferences here: https://community.forestandbird.org.nz/email-preferences.
Forest & Bird update this policy from time to time or as may be required. We do not generally advise our website users or members of updates to this policy, therefore we encourage you to revisit this page periodically to ensure you are comfortable with our current policy.
The policy was last updated on 30 October 2019.
How to get in touch: