Privacy

Who we are

SuperGrans Tairāwhiti Trust (a registered charity, CC22763) runs this website. This page explains what personal information we collect, why, who we share it with and what your rights are under the Privacy Act 2020.

What we collect

Your account: your name, email address and, if you give it, your phone number. If you sign in using an account with another service, our sign-in provider shares your name and email address with us.
What you do here: your bids and wins, raffle entries, gifts and monthly gifts, and the receipts we issue for them.
Your card: our payment provider handles your card details. We never see or store your full card number. We keep a payment-provider reference, the card brand, the last 4 digits and the expiry date.
Your choices: whether you want to be shown as Anonymous, and whether you want to hear about future fundraisers, with the date and place you said so.
Technical details: essential cookies that support sign-in, security, your preferences and fundraising attribution, and the usual records our hosting providers keep when a page is requested.

Why we collect it

To run the auctions and raffles, take payments and put winners in touch with the people who donated the prizes.
To issue receipts and keep the records a charity needs.
To email you about your own bids, entries, gifts and wins.
To tell you about future fundraisers, only if you ticked the box to hear from us. Every one of those emails has a link to stop them.

Who we share it with

The donor of an item you win: your name and contact details, so you can arrange to collect your prize. This is in the auction terms you agree to before you bid.
Our payment provider: to take payments and send refunds.
Our sign-in, hosting and data-storage providers: to help you access your account and keep this website running.
Our email provider: to deliver the emails we send you.
The public: other people see your initials in a bid history, and your name on the supporter wall only if you choose to be named. Tick "Show me as Anonymous" and the public sees Anonymous instead. Our staff always see real names.

We don't sell your information.

Where it is kept

Our website data is hosted in Australia. Our payment provider and other service providers may process some information outside New Zealand. We only use providers who protect it to a standard comparable with New Zealand's.

How long we keep it

Payment and receipt records are kept for as long as the law requires, which is generally seven years, even if you delete your account.
If you delete your account, your name becomes "Deleted supporter", and we remove your email, phone number and sign-in details and detach your saved card.

Your rights

You can see the information we hold about you and ask us to correct it.
Under "Privacy and data" in your account, you can download your data and delete your account. Deleting is blocked while you have an open top bid, an unpaid win or an active monthly gift, and the screen tells you which.
If you think we've handled your information badly, tell us first. You can also complain to the Privacy Commissioner.

Contact us

Write to SuperGrans Tairāwhiti, 2 Pitt Street, Gisborne.

Cookies, analytics and marketing

Essential cookies help you sign in, keep the website secure and attribute activity to a fundraiser. These work independently of optional tracking. We also remember your cookie preferences for up to 180 days.

If you allow analytics, we may use information about visits to public pages, interest in items and progress through fundraising journeys to understand how the website is used. Our own cookies hold a random browser identifier for up to 180 days and a session identifier until 30 minutes after your last activity. These help associate a confirmed payment with the browser that gave consent. After payment confirmation, we may share the purchase event, amount and a transaction identifier that is not your payment reference with our analytics providers, together with those browser and session identifiers where available and still valid.

If you allow marketing (advertising), we may use cookies and similar technologies to understand which advertising leads to bids, raffle entries or gifts. Information used for this can include public item identifiers, transaction identifiers and amounts, browser information, and advertising cookie or click identifiers.

If you allow both analytics and marketing, we may also keep an advertising click identifier in our own cookie for up to 90 days. After payment confirmation, we may share the purchase event, amount, the same non-payment transaction identifier and that click identifier with our advertising providers. Matching browser and server events use the same event identifier to avoid counting an activity twice. We do not send your name, email address, phone number, IP address or hashed contact details with these server events.

We do not include names, email addresses, phone numbers, postal addresses, card details or the contents of your forms in these tracking events. Optional tracking scripts do not run on management, donor-account, password, personal-account or receipt pages.

Your cookie choices are separate from opting in to fundraising emails. You can decline optional cookies or change your choices using Cookie settings in the footer. Withdrawing consent stops future optional tracking and pending server events. It does not erase information a provider has already received.

Our analytics and advertising providers may process information overseas under their own privacy policies.