Purpose and Application
This policy outlines the obligations Goodwin Turner Lawyers Limited and Mediation HQ has in managing the personal information we hold about our clients, potential clients, persons associated with our clients, employees, contractors, users of our website and others. We collect and hold information when it is necessary for business purposes and/or to meet our legal obligations.
We will comply with the New Zealand Privacy Act 2020 (the “Act”) and the privacy principles set out in the Act in respect of all your personal information.
Why does Goodwin Turner collect personal information?
We collect personal information in order to conduct our business, to provide and market our services and to meet our legal obligations, including (but not limited to) anti-money laundering compliance obligations.
Who does Goodwin Turner collect personal information about?
We may collect and hold personal information about (but not limited to):
- Clients, business associates and potential clients and their employees;
- Individuals we deal with in the course of acting for clients;
- Suppliers and their employees;
- Prospective employees, employees and contractors; and
- Other people who come into contact with a member of Goodwin Turner.
What personal information does Goodwin Turner collect?
In general, the type of personal information we collect and hold includes (but is not limited to): names, addresses, contact details including phone numbers and email addresses, dates of birth, occupations, job titles, evidence of source of wealth/funds and other information which assists us with conducting our business, providing and marketing our services and meeting our legal obligations, including under the Anti-Money Laundering and Countering Financing of Terrorism Act 2009.
How we collect your data
We will generally collect personal information directly from individuals which may be provided by way of completing forms, face to face meetings, interviews, business cards, email messages and telephone conversations. We may also collect personal information from a third party including another lawyer acting on the other side of your transaction.
Some information we collect happens automatically as an outcome of you visiting our website or using or services. This is information includes IP address, device type, session time etc. Some of this information is tracked using tracking technologies like “cookies”. Cookies are small data files that are stored on your computer when you visit a website.. Although you may configure your web browser to not accept cookies, you may experience a loss of functionality and personalisation as a result.
If we don’t collect your personal data, our services that we are able to offer you may be limited.
How we use your data
We use your personal information to represent and advise you, answer any queries you might have, keep you updated if anything changes, and to maintain our relationship with you. This includes:
- Using the information we have to communicate with you, via email, phone, video calling or in person, to assist with any engagement with us that you’ve initiated. Please note that if at any time you don’t wish to receive any communications from us, and want to “opt out” of communication, please let us know and we will update our records accordingly.
- Improving our service offering for example, by analysing your use of our website and services so that we can improve our services.
How we share your data:
We will only disclose your personal data to third parties in the following instances;
- If the third party is a subsidiary owned by Goodwin Turner Lawyers Limited.
- If the third party provider or partner is helping us to provide our services.
- If required by regulators, law enforcement bodies, government agencies, courts or other third parties to comply with applicable laws or regulations, or to exercise, establish or defend our legal rights. Where possible and appropriate, we will notify you of this type of disclosure.
International Data Transfers
When we share data, it may be transferred to, and processed in, countries other than the country you reside in. Some of the parties who help us run our website and/or process any payments you are making through our site may be based or have their servers overseas, but we ensure that our upstream providers are reputable parties with robust privacy protection which extends to your personal information.
We encrypt traffic to and from our website using SHA-256 with RSA Encryption. We do not store credit card details on-site; we use a tokenised payment system and credit card details are stored securely off-site by our 3rd-party payment gateway provider eWAY.
We take all practical and reasonable steps to keep your information safe from unauthorized access, use or disclosure, including by selecting service providers with robust IT systems and limiting access to employees and suppliers on a need to know basis.
However, it is not possible to guarantee that information will be completely secure at all times.
If we become aware of a notifiable privacy breach, we will immediately notify the Commissioner and will also notify any affected individual unless we are unable to do so under section 116 of the act.
The length of time we keep your personal data depends on what it is and whether we have an ongoing business need or legal requirement to retain it.
It’s your personal data and you have certain rights relating to it.
You also have rights to:
- Understand what personal data of yours we hold – and to ensure it is accurate.
- Request a copy of your personal data, or ask us to limit, or delete/remove what we have.