1. Introduction

Māhutonga respects your privacy and is committed to protecting your personal information in accordance with the Privacy Act 2020 and the Health Information Privacy Code 2020. This Privacy Statement outlines how we collect, use, store, and share information when you interact with us, including through our website.

2. Who We Are

Māhutonga is a Whānau Ora Commissioning Agency delivered by Te Rūnanga o Toa Rangatira, dedicated to supporting whānau wellbeing and self-determination across our rohe. Rooted in mātauranga, values, and the legacy of Ngāti Toa Rangatira, Māhutonga works alongside providers, communities, and whānau to commission and support services that enable holistic, whānau-led solutions that reflect the strengths and aspirations of our people.

3. Information We Collect

We may collect the following types of personal and non-personal information:

· Personal information, including your name, date of birth, gender, contact details, and service-related information

· Unique identifiers when relevant

· Whānau service information, including services received and progress toward whānau goals

· Aggregated data for reporting and evaluation purposes (not linked to identifiable individuals)

· Website data, such as your IP address, browser type, pages visited, and time spent on the site, collected through cookies and analytics tools

4. Why We Collect Your Information

We collect your information to:

· Provide and improve services commissioned by Māhutonga

· Monitor progress and ensure service quality

· Meet reporting obligations to Te Puni Kōkiri and other funding partners

· Contribute to research and evaluations to improve outcomes for whānau

· Respond to inquiries and communications you send us

5. How We Use and Share Your Information

We take your privacy seriously and will only use your information for the purposes outlined aboveWe may share de-identified or aggregated information with trusted partners such as:

· Te Puni Kōkiri – in group-level reports that do not identify individuals

· Stats NZ’s Integrated Data Infrastructure (IDI) – where data is de-identified and used strictly for approved research

· Third-party providers – who support our systems and services, under confidentiality and data protection agreements

6. How We Protect Your Information

We protect your personal information through:

· Secure digital systems and encrypted data transfers

· Access controls to ensure only authorised personnel can view your information

· Regular audits and reviews of our data management practices

7. Your Rights

You have the right to:

· Request access to your personal information

· Ask us to correct inaccurate information

· Request that we delete your personal information (unless we are legally required to retain it)

To exercise any of these rights, please contact us using the details below.

8. Cookies and Website Analytics

We use cookies and third-party tools (e.g. Google Analytics) to collect anonymised data about your visit to our website. This information helps us improve the site experience. You can disable cookies in your browser without affecting your use of the site.

9. Retention and Deletion

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, or to meet our legal obligations. When no longer required, data is securely deleted or anonymised.

10. Social Media

We use social media platforms to share updates and engage with the public. Any information you post on our social media pages is publicly accessible. We are not responsible for the privacy practices of those platforms.

11. Third-Party Links

Our website may contain links to external websites. We are not responsible for their privacy practices or content.

12. Updates to This Privacy Statement

We may update this Privacy Statement from time to time. The latest version will always be available on our website, with a noted effective date.

13. Contact Us

If you have any questions or concerns about your privacy, or if you wish to exercise your rights under the Privacy Act, please contact us on: mahutonga@ngatitoa.iwi.nz

If you are not satisfied with our response, you can contact the Office of the Privacy Commissioner at www.privacy.org.nz or call 0800 803 909.