Privacy Statement

Breast Cancer Foundation NZ takes care to ensure personal information is:

• Collect for a clear and lawful purpose
• Used appropriately and respectfully
• Protected from loss or misuse

Personal information includes anything that can identify you, including contact details, photographs, donation history, health information, and personal stories.

In almost all cases we collect personal information directly from you when you engage with us, including as a donor, volunteer, or user of our health or support services. This could be via our website, social media, web chat, our nurse advice lines or services, or at one of our fundraising or community education events.

In most cases we will only collect information about you from someone else either with your consent (for example, from your health care provider for the purpose of providing you with health services) or where the law allows us to.

We may also collect your contact details from carefully selected organisations that are permitted to share your information with us for marketing or fundraising purposes.

When we first contact you using information obtained from a third party, we will tell you where we obtained your information, unless an exception under the Privacy Act 2020 applies.

Providing your information to us is voluntary. However, if you choose not to provide it, it may affect the services we can offer you.

We use personal information to carry out our work, including to:

• Deliver health and support services (including our nurse advice line)
• Fund and support breast cancer research
• Raise awareness and share stories
• Deliver education programmes
• Communicate with you
• Meet our legal obligations

Please see below for more detail about how we process personal information about particular groups (such as donors, users of our health services, and volunteers).

To carry out our work we may share your information with:

• Our trusted service providers (e.g. IT providers, payment processing, fundraising and email platforms, auditors)
• Health or support providers (where we fund services for you such as counselling and you have agreed to this sharing)
• Others where you have provided consent or where we are allowed or required by law (e.g. regulatory authorities).

We expect those we share information with to protect it. We do not sell your personal information.

We may contact you to:

• Provide information or services you have requested
• Send updates about our work, activities, and fundraising

You can opt out of receiving these communications at any time by using the unsubscribe option (where available) or contacting us. We may use information about how you interact with our communications (for example, whether emails are opened) to help improve how we communicate.

Breast Cancer Foundation NZ uses cookies and similar technologies on our websites to understand how people use the websites, determine the effectiveness of our advertising campaigns, and measure donations resulting from social media advertising.

The cookies and tracking tools we use include Google Analytics 4, Meta Pixel, Google Ads Conversion Tracking, LinkedIn Insight Tags, TikTok Pixel, Crazy Egg and CRM tracking.

We also use these tools to show relevant ads (including fundraising, education and awareness, and nurse support services) to people who may be interested in or benefit from our work.

We may share information about you with Meta to create custom audiences on Meta platforms and may also use Meta Lookalike Audiences to identify people with similar characteristics to you so we can promote our services and fundraising campaigns to new audiences.

We provide links to other organisations’ websites from our website. We are not responsible for how those other organisations handle personal information, and you should read their privacy policies before sharing any personal information with them.

You can:

• Ask for access to your personal information
• Ask for it to be corrected

To do this, please contact us using the details below.

We collect your name, date of birth, contact details, and donation details to process donations, provide receipts, and communicate with you about our work, including our fundraising activities. You can opt out of these communications at any time.

If you wish to donate anonymously, please contact us via supportercare@bcf.org.nz or on 0800 902 732 so that we can facilitate this.

If you host your own fundraising event for us, we may also collect other information that you choose to share with us about your event (such as photographs).

We do not hold credit card details. We use reputable third-party service providers to process credit card payments.

We analyse information about donors to help us to improve our services and fundraising efforts and may use comments provided by donors in our promotional materials on a de-identified basis.

We collect your contact details and information about your skills, experience and interests to support your volunteering. We will use this information to communicate with you about volunteering opportunities, and to coordinate and manage volunteering activity for example to help us raise funds or as a consumer (advisor). We may also share volunteer information with other volunteers to coordinate and manage specific volunteering activities (for example, your local volunteer area coordinator who would contact you with more information about your Pink Ribbon Street Appeal volunteering shift).

If you attend events, take part in education activities, or request information or resources, we may collect your contact details to:

• Provide information and resources
• Obtain feedback including by surveys
• Follow up where requested
• Send updates about our work (you can opt out)

We may also take video and photographs of you attending an event (such as participating in a Pink Ribbon Walk) and use these for promotional purposes (such as on our social media).

If you visit one of our Pink Campervans, we may collect your name and contact details so that we can enrol you in a screening programme, send you information and resources, or connect you to our support nurses or another of our services.

We may host or support online communities (for example, myBC or Pink Ribbon Breakfast host groups on Facebook) where people can connect and share information and their experiences.

Information you share in these spaces is visible to others in the same group and is subject to the platform’s own practices (for example, Meta’s privacy policies).

For myBC, we manage the site, moderate comments, and support members. We do not use the information shared within myBC for anything else.

We collect contact details and information about your situation, including health information and your NHI number, to provide support and advice. We may also use this information to improve these support services.

These services include our nurse advice services. We make records of our interactions with you by phone or email to support continuity of care and use technology (such as matching phone numbers) to recognise and welcome repeat callers. With your permission we may collect or disclose information about you to your health care provider(s).

If we fund support services for you (such as physiotherapy or counselling) we may share relevant information about you with the service provider. We will also collect limited, non-health information from these providers (for example, to confirm services for billing purposes).

If you provide us with information about other people (such as whānau or friends) when using our support services, we assume you have their permission to share this information with us.

We treat health information with particular care. We store it in a secure, fit for purpose patient management system, and strictly control who can access this information to those providing the relevant service. For example, only our nurses have access to information provided via the nurse advice line.

We collect professional and contact information to assess funding applications and manage research projects. We also use this information to communicate with researchers and medical professionals about events we host or support.

Sometimes Breast Cancer Foundation NZ will carry out its own research. If you participate in our research, we will provide you with a separate privacy statement that will explain clearly to you how your personal information will be handled in that research project.

If you choose to share your breast cancer story with us, we may use it to:

• Raise awareness
• Support fundraising and advocacy

We will always seek your permission to do this and will explain how your story will be used. You can always ask us to stop using your story if you change your mind – contact us at intouch@bcf.org.nz

In the course of carrying out our work we also collect and use personal information about other individuals, such as people who apply to be included in our Breast Cancer Service Directory, or who book an education event. We use this information for the purpose it was provided to us for.

We apply strong technical and organisational measures to safeguard your data, including using secure systems; access controls and restricted access to information; TLS/SSL encryption for data in transit and the secure processing of credit card payments through Stripe, a PCI DSS–compliant payment provider. We do not store full card details in our systems; only secure tokens are retained to support donations. We may hold your information in either electronic or hard copy form.

We keep information only as long as needed for our purposes and legal obligations. We are required to keep health information for a minimum period of ten years from our last contact with you if we have provided you with health services (such as support via our nurse advice line). Once we no longer need to keep personal information, we will securely destroy it.