Privacy
Privacy policy
This policy describes how NZ REDCA (“we”, “us”) handles personal information when you use this website or contact us, in line with the Privacy Act 2020 (New Zealand).
Who this applies to
NZ REDCA is presented as an independent voluntary compliance programme concept and certification framework for renewable-energy disposal documentation in Aotearoa New Zealand. This policy applies to individuals whose personal information we collect in connection with that programme and this site.
Personal information we collect
- Inquiry forms: email address, organisation or trader name, locality (where you provide it), and free-text details you submit.
- Technical data: standard server or hosting logs may include IP addresses, user agents, and timestamps depending on how this site is deployed.
Why we collect it (direct collection)
When you submit information to us directly, we collect it to respond to enquiries, coordinate programme design or pilots, improve site content, and maintain a record of stakeholder feedback relevant to NZ REDCA. Providing accurate details helps us route your message appropriately.
Indirect collection — Information Privacy Principle 3A (IPP 3A)
Sometimes we may receive personal information about you from someone other than you — for example another organisation, an insurer, a regulator, or a counterpart — rather than collecting it from you directly. Where the Privacy Act 2020 applies and IPP 3A is engaged, we take steps that are reasonable in the circumstances to ensure you are notified as soon as reasonably practicable after that indirect collection (unless an exception in the Act applies), including that:
- the information has been collected;
- the purpose for which it was collected;
- the intended recipients;
- the name and address of the agency that collected the information and the agency that holds it;
- if collection is authorised or required by law, which law applies;
- your rights of access to and correction of personal information under the information privacy principles.
Before relying on indirect collection, we still assess whether there is a proper basis to collect that information under the Act (including IPP 2). Official guidance on IPP 3A is published by the Office of the Privacy Commissioner.
Disclosure and overseas transfers
We only disclose personal information to third parties where permitted by the Privacy Act 2020 — for example with your consent, where directly related to the purpose you would expect, as required by law, or as otherwise allowed under the Act. Intended categories of recipients (such as hosting providers, advisers, or programme partners) depend on how NZ REDCA is operated for a given deployment; we describe material recipients when we notify individuals under IPP 3A or at collection. This staging site logs inquiries to the console only and does not implement production integrations by default.
Storage and security
We protect personal information using safeguards appropriate to the sensitivity of the information and our operating environment. Exact retention periods depend on legal requirements and operational need; contact us to discuss deletion where applicable.
Access and correction
You may request access to personal information we hold about you and ask for corrections under the Privacy Act 2020. Use the same channel you used to contact us, or the enquiry forms on this site, and describe what you need.
Complaints and regulator
If you believe we have mishandled personal information, contact us first. You may also complain to the Office of the Privacy Commissioner Te Mana Mātāpono Matatapu.
Updates
We may update this policy when our practices or the law change. Material updates will be reflected on this page with a revised emphasis date where appropriate.
Last updated: 12 May 2026 (NZ IPP 3A alignment).