Privacy Policy

Last updated 15.5.2026

2.1 Our Commitment

Wakatipu High School Alumni is committed to protecting your personal information in accordance with the Privacy Act 2020, the Privacy Act Amendment 2025, and the Harmful Digital Communications Act 2015. This Policy explains how we collect, use, store, disclose, and protect your personal information through the Website hosted by ToucanTech.

2.2 Information We Collect

We may collect the following personal information:

• Identity information: name, year of graduation, student ID, and photographs.
• Contact details: email address, phone number, and postal address.
• Account information: login credentials and communication preferences.
• Engagement data: event RSVPs, fundraising donations, and community interactions.
• Technical data: IP address, browser type, and cookies (see Section 3).
• Should Wakatipu High School import alumni data from internal school records, reasonable steps will be taken to ensure alumni are aware of this indirect collection.

We collect only the information reasonably necessary for the purposes set out below.

2.3 How We Use Your Information

We use your personal information to:

• Administer your alumni membership and verify eligibility.
• Communicate news, events, and fundraising opportunities relevant to the Wakatipu High School community.
• Process event registrations and donations.
• Improve the functionality and user experience of the Website.
• Comply with legal obligations under New Zealand law.

We will not use your personal information for purposes materially different from those listed above without your prior consent.

2.4 Electronic Communications

We will only send you marketing or newsletter emails where you have opted in. Every such communication will include a clear and functional unsubscribe mechanism, in compliance with the Unsolicited Electronic Messages Act 2007. To unsubscribe at any time, click the unsubscribe link in any email or contact alumni@wakatipu.school.nz.

2.5 Disclosure of Your Information

We may share your personal information with:

ToucanTech, our platform provider, who acts as a data processor under a data processing agreement.

Wakatipu High School, for purposes directly related to alumni engagement.

Third-party service providers (e.g. payment processors, event platforms) where necessary to deliver a service you have requested.

Regulatory authorities or law enforcement agencies where required by law.

We do not sell your personal information to third parties.

2.6 Data Storage and Security

Your data is hosted on Amazon Web Services (AWS) servers located in the Asia-Pacific region (Sydney, Australia), with backups held in Victoria, Australia. ToucanTech considers these arrangements to provide safeguards comparable to those required by New Zealand's Privacy Act 2020. We take reasonable technical and organisational measures to protect your information from loss, unauthorised access, or misuse. No data transmission over the internet can be guaranteed as fully secure; you transmit information at your own risk.

2.7 Data Retention

We retain personal information only for as long as is necessary to fulfil the purpose for which it was collected, or as required by law. ToucanTech maintains daily backups for six months and monthly backups on a rolling basis. Upon termination of our licence with ToucanTech, live data is removed and written confirmation of deletion is provided.

2.8 Your Rights

Under the Privacy Act 2020, you have the right to:

• Request access to the personal information we hold about you.
• Request correction of inaccurate, incomplete, or outdated information.
• Withdraw consent for the use of your information for marketing purposes.

To exercise any of these rights, contact us at alumni@wakatipu.school.nz.

2.9 Privacy Complaints

If you believe we have interfered with your privacy, please contact us at alumni@wakatipu.school.nz in the first instance. If you are not satisfied with our response, you may lodge a complaint with the Office of the Privacy Commissioner at www.privacy.org.nz or PO Box 10 094, The Terrace, Wellington 6143.

2.10 Harmful Digital Communications

We are committed to maintaining a safe and respectful online environment consistent with the Harmful Digital Communications Act 2015. If you believe content on the Website constitutes a harmful digital communication, please contact us immediately at alumni@wakatipu.school.nz. We will investigate and take appropriate action, which may include removal of content and reporting to relevant authorities.

2.11 Data Breach Notification

In the event of a privacy breach that poses a risk of harm to individuals, we will notify affected individuals and the Office of the Privacy Commissioner as required by the Privacy Act 2020. As ToucanTech acts as a data processor, Wakatipu High School Alumni, as data controller, holds primary responsibility for breach notification, supported by information provided by ToucanTech.

2.12 Changes to This Policy

We may update this Privacy Policy from time to time. The current version will always be available on the Website. We encourage you to review this Policy regularly.