Your information, looked after.

Youth Arts New Zealand (YANZ) is a youth-led charitable organisation based in Tāmaki Makaurau Auckland. We take looking after your personal information seriously, and because a lot of the people we work with are rangatahi, we hold ourselves to a high standard. This statement explains what we collect, why, who we share it with, and the rights you have under the Privacy Act 2020.

Who this covers

This statement applies to youtharts.nz and the ways you interact with us through it: filling in a form, applying for an opportunity, subscribing to our newsletter, or making a donation. It doesn't cover other websites we link to (like YouTube or a partner's site); those have their own privacy policies.

What we collect

We collect personal information directly from you when you choose to give it. Depending on what you do, that can include:

• When you contact us or apply for an opportunity: your name, email, and anything you write in the message or application (and sometimes a phone number, age range, or links to your creative work, if the form asks).
• When you subscribe to our newsletter: your email address.
• When you donate: your name, email and donation details. Card payments are handled by our donations provider; we never see or store your full card number.
• When you simply browse: basic, non-identifying analytics (pages visited, device type, rough region) and standard server logs (like IP address) that our host keeps for security.

How we use it

We use your information to:

• Reply to you and provide what you've asked for;
• Review and respond to applications for our opportunities and programmes;
• Send our newsletter and updates (only if you've subscribed, and you can unsubscribe any time);
• Process and acknowledge donations, and meet our charity reporting obligations;
• Keep the site secure, working, and free of spam;
• Understand, in aggregate, how the site is used so we can improve it.

We rely on a couple of these for our legitimate work as an organisation; for marketing emails we rely on your consent, which you give by subscribing.

The tools and partners we use

We keep our toolkit small and deliberate. Each provider below only receives the information needed for its job, and is bound to protect it. Some are based overseas, which means your information may be stored or processed outside Aotearoa New Zealand.

Cloudflare

Hosts the website and helps keep it fast and secure. We also use Cloudflare's bot-protection (Turnstile) on our forms and its privacy-friendly, cookieless analytics. Global · incl. USA

formd + Mailgun

Our self-hosted form handler passes form and application submissions to us by email through Mailgun, which delivers them to our inbox at [email protected]. Email delivery · USA

Beehiiv

Runs our email newsletter. It stores your email address and lets you unsubscribe from any newsletter we send. Newsletter · USA

Raisely

Powers our donation form and securely processes the payment. They handle your card details under strict payment-security standards. Donations · global

YouTube (Google)

We embed project videos using YouTube's privacy-enhanced mode, so it doesn't set tracking cookies unless you press play. Video · global

Beyond these, we'll only ever share your information if you ask us to, or if the law requires it. We don't sell your personal information, and we don't share it for third-party advertising.

Cookies and embeds

We keep cookies to a minimum. Our analytics are cookieless. The main thing to know: embedded content, like a YouTube video, the donation form, or the newsletter sign-up, comes from those providers, and they may set their own cookies when it loads or when you interact with it. You can control cookies through your browser settings; blocking them won't stop the rest of the site working.

Keeping rangatahi safe

A lot of the people we work with are young. If you're under 16, it's a good idea to check in with a parent or guardian before sending us personal information or signing up. If we ever collect information from rangatahi as part of a programme, we do it carefully, with appropriate consent, and only keep what we genuinely need. If you're a parent or guardian and want to know what we hold about your young person, get in touch and we'll help.

How long we keep it

We keep personal information only for as long as we need it for the purpose it was collected, or as long as the law requires (for example, donation records for our financial and charity reporting). When we no longer need it, we delete or de-identify it. Newsletter subscribers stay on the list until they unsubscribe.

How we protect it

We use reputable providers, secure (HTTPS) connections, bot-protection on our forms, and sensible access controls: only the people who need to see your information can. No system is perfectly secure, but we take reasonable steps to protect what you share with us, and we act quickly if something goes wrong.

Your rights

Under the Privacy Act 2020 you have the right to:

• Ask what we hold about you, and get a copy of it;
• Ask us to correct it if it's wrong or out of date;
• Unsubscribe from our newsletter at any time (there's a link in every email);
• Ask us to delete information we no longer need to keep.

To make any of these requests, email [email protected]. We'll respond as soon as we can, and within 20 working days as the Act requires. It's free, though we may ask you to confirm who you are first.

Changes to this statement

We may update this statement as our tools or programmes change. When we do, we'll change the "last updated" date at the top. If a change is significant, we'll do our best to let people know.

Contact us, or make a complaint

Questions about your privacy, or want to make a request? Email us at [email protected] or write to Youth Arts New Zealand, 473 Dominion Road, Mount Eden, Auckland 1024, Aotearoa.

If you're not happy with how we've handled your information, you can raise it with the Office of the Privacy Commissioner (privacy.org.nz), who can investigate complaints under the Privacy Act 2020.