Māhutonga Privacy Statement

1. Introduction

Māhutonga respects your privacy and is committed to protecting your personal information in line with the Privacy Act 2020 and the Health Information Privacy Code 2020.
This statement explains how we collect, use, store, and share your information.

2. Who We Are

Māhutonga is a Whānau Ora Commissioning Agency delivered through Te Rūnanga o Toa Rangatira Incorporated. We support whānau wellbeing and self-determination across our rohe by working alongside providers, communities, and whānau to deliver services that reflect their strengths and aspirations.

3. We May Collect:

  • Personal details (e.g. name, date of birth, gender, contact details)

  • Information about the services you receive

·        Information about your engagement with Whānau Ora services and progress towards whānau goals.

  • Unique identifiers (if needed)

  • Aggregated (group) data for reporting (this does not identify individuals)

  • Website data (e.g. IP address, pages visited, browser type)

4. How We Collect Your Information

We collect information:

  • Directly from you

  • From Whānau Ora providers we work with

  • From your use of our website (cookies and analytics tools)

  • From other sources, if you have given permission

In most cases, Māhutonga collects personal information about whānau indirectly through Whānau Ora providers as part of delivering, monitoring, and reporting on Whānau Ora services.

5. Why We Collect Your Information

We use your information to:

  • Provide and improve services

  • Monitor progress and service quality

  • Meet reporting requirements (e.g. to Te Puni Kōkiri)

  • Support research and evaluation

  • Respond to your enquiries

6. How We Use and Share Your Information

We only use your information for the purposes above or as allowed by law.
We may share non‑identifiable (de‑identified) information with:

  • Te Puni Kōkiri (for reporting)

  • Stats NZ (for approved research through the Integrated Data Infrastructure)

  • Trusted service providers (who must protect your data)

7. How We Protect Your Information

We protect your information by:

  • Using secure systems and encryption

  • Limiting access to authorised staff only

  • Regularly reviewing our data practices

8. Your Rights

You have the right to:

  • Request access your personal information

  • Ask for corrections to your personal information

To do this, contact us using the details below.

9. Cookies and Website Analytics

We use cookies and tools like Google Analytics to understand how people use our website.
This information is anonymous and helps us improve our services.
You can turn off cookies in your browser.

10. How Long We Keep Information

We only keep your information as long as needed for our work or legal requirements.
After that, it is securely deleted or anonymised.

11. Social Media

Information shared on our social media pages is public.
We are not responsible for how those platforms use your information.

12. External Links

Our website may link to external websites.
We are not responsible for their privacy practices.

13. Updates to This Statement

We may update this Privacy Statement from time to time.
The latest version will always be available on our website.

14. Contact Us

If you have questions or want to exercise your rights under the Privacy Act, contact:
📧 mahutonga@ngatitoa.iwi.nz

If you are not satisfied with our response, you can contact the Office of the Privacy Commissioner:
🌐 www.privacy.org.nz
📞 0800 803 909