Privacy

What we collect on these pages, why we collect it, and what happens to it.

This statement covers the giving pages and the spot check registration form run by Melanoma New Zealand. Our full Privacy Policy covers everything else we do, and this statement sits under it. We have kept this one short enough to read. If something here is unclear, or you think we have got something wrong, email us at info@melanoma.org.nz and we will answer and fix the page.

What we collect, and why

To make a gift: your name and email address, so we can record your gift and send your receipt. Optionally your mobile, so we can reach you if something goes wrong with the payment, and your postal address, which appears on your receipt. If the gift is from an organisation or a fundraiser, or in memory of someone, the name you give us for that.
To pay by card: your card details go to our payment processor, on its own secure page. They never touch this site and we never see them. It tells us the amount, the date and a reference, which is what we record.
To pay by bank transfer: the same details as a card gift, plus the reference you are given and, once you have paid, the amount and the date on your bank statement. We never see your statement or your account number. The alert that tells our accounts team a transfer is expected carries only the reference and the amount, not your name or how to contact you.
To check your email address is real: before we accept a gift or a registration, we ask a public internet directory whether the domain of the address you gave us exists at all, the same kind of check a mail server does. This catches a typo like a missing letter in a common domain. It tells us only whether the domain exists, never anything about you, and if the check cannot get an answer quickly we take your address as good rather than hold up your gift or your registration.
To register for a spot check: your name, contact details, date of birth, city or town, gender, ethnicity, your GP clinic and your GP's name, and, if you are under 16, the name of a parent or guardian. Also which event you are coming to, how you heard about it, and whether you would rather be seen inside or outside.
If you tick the box: permission to send you occasional updates by email. A gift or a registration is not permission to email you, so the box is unticked unless you tick it, every email we send lets you stop them, and if you have already unsubscribed, giving again or registering again does not sign you back up.

Your spot check registration is health-adjacent information

We do not collect a clinical record through this form. What the nurse or doctor finds when they look at your skin belongs to you and your GP, and this platform never asks for it and never holds it. But the form collects your details so that examination can happen, and that brings the Health Information Privacy Code 2020 alongside the Privacy Act 2020. In practice that means we hold what you tell us in our supporter and patient database rather than a general marketing list, we never write it into an error log, and the confirmation email we send carries none of it beyond confirming which event you are coming to.

Your details are held in systems Melanoma New Zealand owns and controls, and are shared only with the providers that do a job for us. None of them may use your information for their own purposes, we do not sell or trade supporter information, and we do not advertise to you based on it.

Our payment processor, for the payment itself.
Our email delivery service, to send your receipt, your confirmation and any alert your gift or registration triggers.
Our supporter and patient database, which holds the record of your gift or registration.
Our hosting providers, which run these pages and hold their records in Sydney, Australia.
Our newsletter service, only if you tick the box, and only your name and email address.

How long we keep it

A receipt is a tax document, and Inland Revenue requires records that support a donation tax credit claim to be kept for at least seven years. We keep gift and receipt records for seven years for that reason. Spot check registrations are kept for the purpose we collected them for, being your check and any follow-up with your GP, and we review how long we need to hold them after that. Contact details are kept while you are a supporter and removed when you ask us to, unless we still need to keep a record tied to a receipted gift or a legal duty says otherwise.

Your rights

The Privacy Act 2020 sets out thirteen information privacy principles covering how we may collect, use, store and share your information. Two of them are rights you can use directly: you can ask us for a copy of the information we hold about you, and you can ask us to correct it if it is wrong. Write to info@melanoma.org.nz and we will respond. If you are not happy with our answer, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.

If something goes wrong

If we have a privacy breach that we reasonably believe has caused, or is likely to cause, you serious harm, the Privacy Act 2020 requires us to tell both you and the Privacy Commissioner about it as soon as we reasonably can.

Cookies and tracking

These pages set one cookie of their own, and only if a form sends you back to fix an answer: it holds what you had typed, encrypted, for ten minutes, so you do not have to type it all again. A member of staff signing in sets one as well. Beyond those two, these pages carry no advertising and no third-party tracking of any kind. There is no Google Analytics here, no advertising pixel, no social network's script, and nothing that follows you to another website. Nothing on this site is loaded from anybody else: even the typefaces are served from here, so that reading a page or filling in a form does not announce you to a company you have never heard of.

We do count how many times each page is read. As a page loads, your browser fetches a single invisible image from this site, and we add one to a number. What that number is kept against is the page, the date, and whether the link you followed was one we had tagged ourselves: a link in our newsletter, for instance. Nothing about you is kept beside it: not your name, not your IP address, not your device, and not which pages you read in what order. We hold counts, not visits, so there is no record of your reading to ask us for and none to lose. Pages that can only be reached by a private link we sent you are counted as that kind of page and never as your link.

Our payment processor's own page sets the cookies it needs to take a payment safely; those are described in its own privacy policy, linked from the payment page.

Last updated 15 September 2026.

↑