Privacy Policy

The trust of the learners, supporters, and wider community who use this site is critical to its success. This privacy policy outlines how personal information is collected, used, stored, and protected on this site in line with the New Zealand Privacy Act 2020 and the aligned European Union’s General Data Protection Regulation (GDPR). The importance of Māori data sovereignty is acknowledged, and consideration is being given to how these values and principles can be reflected in digital practices — while noting that the hosting infrastructure is currently located outside Aotearoa.

Who we are

This website is operated by the Auckland Workers’ Educational Association (AWEA), a registered charitable trust based in Aotearoa New Zealand. Our website address is: https://awea.org.nz.

Media

If you upload images to this site, please avoid uploading images with embedded location data (EXIF GPS), as visitors to the site may be able to download and extract this information.

Cookies

If you leave a comment, you may choose to save your name, email address, and website in cookies for convenience. These cookies last for one year.

When you visit our login page, a temporary cookie checks if your browser accepts cookies. It contains no personal data and is discarded when you close your browser.

When you log in:

  • Several cookies will save your login status and display preferences.
  • Login cookies last for two days; display option cookies last for one year.
  • Selecting “Remember Me” keeps you logged in for two weeks.
  • If you log out, login cookies are removed.

If you edit or publish content, a cookie is saved in your browser to indicate the post ID. It contains no personal data and expires after one day.

Embedded content from other websites

Articles or session content on this site may include embedded media (e.g., videos from Vimeo, images from other sources). Embedded content behaves as if you visited the source website directly. These sites may collect data, use cookies, and monitor your interactions with their embedded content — especially if you are logged in to their service.

How your data is used and protected

Personal data submitted through this site is collected only for specific purposes related to the site’s functions — such as registering, commenting, proposing or joining sessions, or contacting us through forms. This may include your name, email address, and any content you provide.

If you leave a comment or participate in forums, your comment data is stored alongside your IP address and browser information to support spam detection and site security. If profile images are enabled, a scrambled (hashed) version of your email address may be shared with the Gravatar service to check whether you use their service. If so, your Gravatar image may appear next to your comment or forum post. You can read Gravatar’s privacy policy at automattic.com/privacy.

If you request a password reset, your IP address will be included in the reset email for verification purposes. No personal data is shared with third parties except as required to operate the site securely and effectively.

In addition, a small number of trusted tools are used to provide this site’s core functionality and protect its users. These include:

  • Form and contact tools to collect information you choose to give us (e.g., session proposals, RSVP forms).
  • Security tools that help detect spam, protect against attacks, and monitor access patterns to keep your information safe.
  • Backup tools that securely store a copy of the site (including public comments and user data) in case of system failure.
  • Forums and discussions where your posts and profile information may be visible to others. Private messages and non-public content are kept secure.

All tools used on this site operate within our secure hosting environment in the European Union, and are reviewed regularly to ensure alignment with New Zealand law, GDPR standards, and emerging Māori data sovereignty principles.

How long we retain your data

If you leave a comment, the comment and its metadata are retained indefinitely to help recognize and auto-approve future comments.

For users who register (e.g., session hosts or learners), we store personal information provided in your user profile. You can view, edit, or delete your personal information at any time (except for your username). Site administrators can also view and edit that information.

What rights you have over your data

Under the New Zealand Privacy Act 2020, you have the right to request access to or correction of your personal information. You may also request that we erase your personal data, except where retention is required for legal, administrative, or security reasons.

To make a privacy request, contact us at: support@treatyeducation.nz

Where your data is stored and how it is protected

Our website and data are hosted on secure Hostinger servers located in France, within the European Union (EU). As a result, personal data collected through this website is stored and processed in accordance with EU data protection laws (GDPR).

The General Data Protection Regulation (GDPR) provides robust privacy protections that are consistent with the New Zealand Privacy Act 2020, including principles of transparency, purpose limitation, data minimisation, access rights, and safeguards against misuse.

The importance of Māori data sovereignty is acknowledged. This principle recognises the rights of Māori to control the collection, access, use, and storage of Māori data. While the hosting infrastructure for this site is based overseas, consideration is being given to how kaupapa Māori values can be upheld in digital systems and data practices.

  • Ensuring Māori data is used in ways that uphold tikanga and mana;
  • Responding to requests for data access or removal in ways that honour whanaungatanga and rangatiratanga;
  • Continuing to assess how best to uphold data sovereignty in digital spaces, particularly as learning and community platforms evolve.

All plugin activity involving personal data remains confined to the site’s secure hosting environment in France. No plugin or service transmits personal data to external third parties except where needed to deliver their functionality or where you have explicitly submitted such data (e.g., form submissions, event registrations). Plugin privacy practices are reviewed to ensure they align with the New Zealand Privacy Act 2020 and kaupapa Māori values.

Partners and Supporters

Project partners, supporters, and collaborators may be publicly acknowledged on this site. Personal data will only be shared with explicit consent or where required to fulfil the purpose for which it was collected.

Contact us

If you have questions or feedback about how personal or collective data is handled on this site, you are welcome to get in touch. Commitment to continuous improvement and responsible stewardship of data underpins the development of these systems.

Last updated: 30 July 2025