Privacy Statement

Last updated: 30 June 2026

This Privacy Statement explains how Te Roopu Taurima O Manukau Trust ("Te Roopu Taurima", "we", "us") collects, uses, stores, and discloses your personal information for the Holidays Act remediation project. It is provided in accordance with the Privacy Act 2020 and the Information Privacy Principles (IPPs).

What information we collect

Identity information: full name, preferred name, date of birth, contact phone, email address, and a copy of a government-issued photo ID.
Employment context: last known employee ID, role and location, year you last worked.
Financial information needed for payment: bank account name and number, IRD number, tax rate, student loan status, and KiwiSaver contribution settings.
Acknowledgements: the declarations you tick and your typed electronic signature.
Technical information: the IP address used to submit the form and timestamps, kept solely for audit and fraud-prevention purposes.

Why we collect it (purpose)

To verify that you are the person entitled to the remediation payment.
To calculate the correct payment (including PAYE, ACC levy, student loan, and KiwiSaver).
To make the payment into your nominated bank account.
To meet our record-keeping obligations under the Holidays Act 2003, the Income Tax Act 2007, and the KiwiSaver Act 2006.

How we protect it

The form uses HTTPS in transit.
Sensitive fields (IRD number, bank account, ID document) are encrypted with AES-256-GCM at rest.
Access is restricted to authorised Te Roopu Taurima payroll personnel only and requires two-factor authentication.
Every access, change, and download is recorded in an append-only audit log.

How long we keep it

We retain remediation records for seven (7) years after the payment date, as required by Inland Revenue and the Holidays Act. After that period, records are securely destroyed.

Who we share it with

We do not share your information with third parties except where legally required (e.g. Inland Revenue reporting) or where strictly necessary to make the payment (your bank receives the bank account and amount). We do not sell or market with this information.

Your rights

Under the Privacy Act 2020 you have the right to:

request a copy of the personal information we hold about you;
request correction of any information that is wrong;
complain to the Office of the Privacy Commissioner (privacy.org.nz) if you are unhappy with how we handle your information.

Contact

Privacy Officer, Te Roopu Taurima O Manukau Trust
Email: privacy@terooputaurima.org.nz
Post: PO Box 22 346, Auckland 1640