Buzzly Privacy Policy

Definitions

"Challenges": Refers to the specific activities or tasks posted on the Platform by Clients, designed to solicit insights, ideas, and creative contributions from Users. These challenges are central to the engagement process on Buzzly.

"Clients": Refers to the entities or organizations that post Challenges on the Platform seeking insights and ideas from Users. Clients can include government entities, private sector companies, non-profits, and academic institutions.

"Creator": Refers to any user who submits original ideas, content, or insights in response to Challenges on the Platform. Creators retain ownership of their intellectual property and are rewarded for their contributions.

"Reports": are anonymised insight reports prepared by Buzzly using User data to inform or benefit Clients and/or Buzzly. Examples of reports include trends analysis, thematic reports, content and sentiment reports, articles and journal publications, use cases, etc.

"Platform": Refers to the Buzzly digital platform, including its website, mobile applications, and any related services or features that facilitate engagement, interaction, and rewards for Users.

"Users": Includes all individuals who have registered on the Platform, are providing insights and participating in Challenges. This term encompasses youth participants as well as other individuals who engage with the Platform.

"We", "Us", "Our": Refers to the Platform operated by Auckland Council in partnership with Mission Impact Foundation which facilitates youth engagement and interaction, and its associated entities and representatives.

"You", "Your": Refers to the Users of the Platform, including individuals who participate in Challenges, contribute insights and engage with the Platform’s features.

Introduction

At Buzzly, we are committed to protecting the privacy and security of our Users. The Platform is designed to engage youth in sharing their insights on crucial topics, rewarding them for their valuable contributions. This Privacy Policy outlines how we collect, use, protect, and share personal information in compliance with the Privacy Act 2020 of New Zealand.

By participating in Challenges and providing your insights, you agree to us using this information in accordance with this Privacy Policy, which is aimed at fostering a vibrant community of engaged and recognised contributors. Our objective is to amplify the voices of youth and celebrate their contributions through various communication channels, all while ensuring their privacy and rights are protected.

If you don’t agree with this Privacy Policy, then please do not use the Platform.

Information Collection

We collect personal information that you directly and voluntarily provide to us, including where you upload content to the Platform. We also collect personal information about how you use the Platform. Personal information we collect may include your name, age, mobile number, gender, ethnicity, location and email address.

If you provide us with personal information about another person, you should obtain their consent to do so, having informed them of this Privacy Policy where appropriate.

We automatically collect certain non-personally identifiable information when you visit our website through analytics tools such as Google Analytics (such as the type of browser you are using, the type of operating system you are using and the domain name of your internet service provider).

All collected personal information is used in accordance with and for the purposes described in this Privacy Policy, with a commitment to protecting your privacy and ensuring the security of your personal and financial data.

If you do not provide us with your personal information we may not be able to provide you with access to the Platform, communicate with you or respond to your enquiries.

Use of Information

Our use of your personal information extends to the following purposes:

  • Analysing data to generate valuable insights: We use your responses to Challenges to analyse trends and patterns, which helps us create detailed, anonymised insight reports for Clients.
  • Creating Reports: The Reports are designed to inform and benefit Clients while not identifying you.
    • This may include generating Reports such as the annual "Youth Voices of Aotearoa" report, aimed at amplifying youth perspectives to central government, local government, media, and the general public. Additionally, we may produce Reports tailored to the specific needs of different organisations. In all reports, the data will be anonymised.
  • Promotional activities: We may feature your ideas and insights on our social media platforms and in press releases (on an anonymised basis) to promote Challenges. This showcases the innovative contributions of Users and highlights the impact of their engagement.
  • Case studies and stories: We may conduct interviews with Users to create case studies or stories. These narratives help illustrate the real-world benefits and outcomes of participating in our Challenges, providing inspiration and insight to both current and prospective Users.
  • Enhancing service quality: The collected information helps us improve the overall quality and effectiveness of our services.

Information Sharing and Disclosure

We may share your personal information with Auckland Council and Mission Impact Foundation in connection with the above purposes, as well as any person engaged by us to provide products or services to you on our behalf, where your personal information is necessary for the provision of those products or services.

We do not otherwise sell, trade, or otherwise transfer your personal information to third parties. Any sharing of data other than that described above is done with explicit consent or as required by law, in compliance with the Privacy Act 2020.

User Rights

You have a right to request access to, and correction of, personal information we hold about you. To make a request, you can contact us at the details in the 'Contact Us' section below. Your request will be dealt with in accordance with the Privacy Act 2020.

The accuracy of the information we hold about you is important. Please advise us if your personal information changes to help in ensuring that the information we hold is up to date, complete and relevant.

Data Security

We are committed to ensuring the security of your personal information. Through technical and organisational measures, we strive to protect your data against unauthorized access, loss, or misuse. Our efforts are in compliance with the best practices and legal requirements of New Zealand.

Changes to the Privacy Policy

We reserve the right to update and change this Privacy Policy from time to time including for legal, regulatory, commercial or security purposes or to enable the proper delivery of the Platform. While we will notify Users of any significant changes, we encourage Users to review this policy periodically.

Contact Us

For any questions or concerns regarding this Privacy Policy or the storage of your personal information, please contact us at hello@buzzly.nz
We are dedicated to ensuring transparency and addressing any queries promptly.

Security Policy

Introduction

At Buzzly, we prioritize the security of our Platform and the protection of our Users' personal  information. Our Security Policy outlines the measures and practices in place to safeguard User data against unauthorized access, breaches, and other cyber threats, in compliance with New Zealand's Privacy Act 2020 and international cybersecurity standards.

Changes to the Security Policy

We reserve the right to update and change this Security Policy from time to time including for legal, regulatory, commercial or security purposes or to enable the proper delivery of the Platform. While we will notify Users of any significant changes, we encourage Users to review this policy periodically.

Data Security Measures

Technical Safeguards:

  • Encryption: Utilisation of strong encryption technologies for data at rest and in transit, ensuring that User information is protected from interception and unauthorized access.
  • Access Controls: Implementation of strict access controls and authentication mechanisms to limit access to sensitive data only to authorized personnel, based on their role within the organisation.
  • Network Security: Deployment of robust network security measures, including firewalls, intrusion detection systems, and regular security audits to detect and mitigate potential vulnerabilities.

Physical Safeguards:

  • Secure storage facilities for physical servers and backup systems, with access restricted to authorized personnel only, ensuring the physical integrity and security of data.

Administrative Safeguards:

  • Data Privacy Training: Training program for employees on data privacy laws, responsible handling of User information, and security protocols.
  • Incident Response Plan: A comprehensive incident response plan that outlines procedures for addressing and mitigating security breaches, including notification processes to Users and relevant authorities in accordance with New Zealand law.

User Responsibilities:

  • Users are encouraged to contribute to the Platform's security by:
    • Creating strong, unique passwords for their accounts and updating them regularly;
    • Being vigilant against phishing attempts and reporting suspicious activities to Buzzly's security team;
    • Ensuring the security of their personal devices used to access the Platform.

Incident Response

In the event of a data breach or security incident, Buzzly is committed to:

  • Promptly assessing the incident to determine its scope and impact.
  • Taking immediate action to contain and mitigate the breach.
  • Notifying affected Users and relevant authorities in a timely manner, in line with New Zealand's legal requirements.
  • Conducting a thorough investigation to prevent future incidents, and implementing recommended changes to security measures.

Contact Us

For any questions or concerns regarding this Security Policy, please contact us at hello@buzzly.nz
We are dedicated to ensuring transparency and addressing any queries promptly.