Privacy Policy

Kaupapa matatapu

Ko te kai a te rangatira, he kōrero

The food of chiefs is kōrero

Last updated: October 2026

Kupu whakataki

Why this matters to us

Māori Girls’ Charitable Trust cares for Te Kinakina Wetlands at Te Kaha and runs wānanga, mahi toi and restoration mahi with whānau, hapū and community. People share their names, stories, images and voices with us as part of that mahi. We treat what you share as taonga, held on trust, not owned by us.

This policy explains what information we collect through maorigirls.com and our mahi, why, how we look after it, and what you can ask of us. We follow the Privacy Act 2020, and we are guided by the principles of Māori data sovereignty set out by Te Mana Raraunga.

Ngā mātāpono

The principles we hold to

  • Rangatiratanga: you and your whānau keep authority over information about you. You can ask what we hold, correct it, or ask us to stop using it.
  • Whakapapa: we keep information connected to where it came from and the purpose it was given for. We won’t use it for something unrelated without asking.
  • Whanaungatanga: we are answerable to the people and whānau the information is about.
  • Kotahitanga: what we gather together, such as kōrero about the whenua and the wetlands, is used for the benefit of the people and places it comes from.
  • Manaakitanga: we handle information with care and respect for people’s mana and dignity, including tikanga around tapu.
  • Kaitiakitanga: we are guardians of what you share. We keep it safe, keep only what we need, and let it go when it is no longer needed.
Ngā kōrero ka kohia

What we collect

When you contact us. Our contact form asks for your name, email address, an optional phone number and your message. These are emailed straight to the Trust’s inbox. The website does not keep a copy. To stop spam, the site briefly records a scrambled version of your internet (IP) address for one minute, then discards it. If you email or phone us directly, we receive whatever you choose to send.

When you take part in our mahi. If you come to a wānanga, event or working bee, or volunteer with us, we may ask for your name and contact details and, where it matters for your safety, things like an emergency contact or access needs. We only ask for what we need.

Photos, video and audio. We record our mahi, and sometimes that includes people, voices, waiata and kōrero. See “Photos, voices and taonga” below.

Funders and partners. We keep work contact details for the people we work with at funders, councils and partner organisations.

When you visit the website. Like most websites, our web host keeps standard server logs (such as IP address, browser type, pages visited and the time) to keep the site secure and working. The site loads its fonts from Google Fonts, so Google receives your IP address when a page loads. We do not use analytics, advertising or tracking cookies, and the site does not set cookies for visitors. WordPress only sets cookies for people who log in to manage the site.

Information from someone else. Sometimes we receive information about you from another person, for example when a whānau member registers you for a wānanga. When that happens we will let you know we have it, unless the law says we don’t need to.

Tamariki and rangatahi. We ask a parent or guardian’s permission before collecting information or images of anyone under 16.

Te take

How we use it

  • To reply to you and keep in touch about the mahi you’re part of.
  • To run wānanga, events and working bees, and keep people safe while they’re there.
  • To share the story of Te Kinakina and our projects, with permission where people can be identified.
  • To report to funders. We report in summary and don’t name people unless they have agreed.
  • To meet our legal obligations as a charitable trust.

We never sell your information, and we don’t share it with anyone for their own marketing.

Ngā whakaahua me ngā reo

Photos, voices and taonga

Images and recordings of people carry mana. We ask before publishing a photo, video or recording where someone can be clearly identified, and we tell you where it will be used.

Waiata, karanga, pepeha and kōrero tuku iho belong to the whānau and hapū they come from. We use them only for the purpose they were shared for, and we don’t give others permission to reuse them.

If an image or recording on our site shows someone who has passed away, or you’d like something removed for any reason, let us know. We will take it down promptly and follow the wishes of the whānau.

Te tohatoha

Who we share it with

  • Trustees and helpers who need it to do the mahi.
  • Services that hold information for us: our website host, and Google, which provides our email. Google may store information outside New Zealand. We use providers with security protections comparable to New Zealand’s.
  • Funders, only in summary or with your agreement.
  • Others, only if the law requires it or it’s needed to prevent a serious threat to someone’s safety.
Te tiaki

Keeping it safe

Only the people who need information can get to it, and our accounts are password protected. We review what we hold each year and delete what we no longer need, unless the law requires us to keep it (for example, financial records, which we keep for seven years).

If a privacy breach happens that is likely to cause serious harm, we will tell the people affected and the Privacy Commissioner as soon as we can.

Ō motika

Your rights

You can ask to see the information we hold about you, and ask us to correct it if it’s wrong. We’ll respond within 20 working days and won’t charge you for it. You can also ask us to stop using a photo or recording of you, or to delete information we no longer need.

Whakapā mai

Questions or concerns

Contact the Trust’s privacy officer at maorigirls.tekaha@gmail.com.

If you’re not satisfied with how we’ve handled your concern, you can contact the Office of the Privacy Commissioner, Te Mana Mātāpono Matatapu, at privacy.org.nz.

Ngā panonitanga

Changes to this policy

We may update this policy as our mahi changes. The date at the top shows when it was last updated.