Privacy policy

The Station Hair Company Limited (“The Station”) values the privacy of its customers and other people whose Personal Information we hold. The purpose of this document is to help you understand what you can expect from The Station when we hold your Personal Information.

SCOPE OF THIS POLICY
This policy applies to Personal Information collected by The Station and our obligations under the Privacy Act.

DEFINITIONS
“Personal Information” means information about an identifiable individual (being a natural person, not a corporate body), as defined in the Privacy Act.

“Privacy Act” means the Privacy Act 2020.

"Privacy Breach" means unauthorised or accidental access to, or disclosure, alteration, loss, or destruction of, Personal Information, or an action that prevents The Station from accessing the information either temporarily or permanently.

PRINCIPLES
These principles are subject to requirements in other Acts of Parliament which may override the principles, in which case we are not bound by them. There may be some other circumstances where strict adherence to the principles is not reasonably possible. The Station will endeavour to adhere to the principles so far as is reasonably possible.

Collecting information
We will only collect Personal Information where it is needed for a lawful purpose connected with a function or activity of The Station.

Personal Information should be collected directly from the individual, unless an exception listed in principle 2 of the Privacy Act applies and allows collection from a third party.

We collect Personal Information through The Station’s website www.thestationhair.co.nz from any contact with us or when you use our services. 

Where Personal Information is being collected from an individual, we will take reasonable steps to ensure that the individual is aware:

  • that we are collecting the information;
  • what information is being collected;
  • why the information is being collected;
  • any law (if any) which authorises or requires the collection of the information and whether it is voluntary or mandatory for the individual to supply the information;
  • the consequences (if any) if the requested information is not provided;
  • how the information will be used;
  • who the information will be shared with; and
  • what rights they have to access and correct that information.

We will not collect Personal Information by unlawful means or by means that are unfair or unreasonably intrusive.

Once we have the information
We will ensure reasonable security safeguards protect the Personal Information we hold from loss, unauthorised use, and misuse.

Individuals are entitled to receive confirmation of whether The Station holds any Personal Information about them and access their Personal Information. Individuals who access their Personal Information should be advised that they may request the correction of that information.

We will not use Personal Information without taking reasonable steps (if any) to ensure it is accurate, up to date, complete, relevant, and not misleading.

Personal Information will only be used for the purpose for which it was collected, unless an exception listed in principle 10 of the Privacy Act applies and allows use for other purposes.

Unique identifiers will only be assigned to individuals if it is necessary to enable The Station to carry out one or more of its functions efficiently. Unique identifiers will only be assigned to individuals whose identities are clearly established and the risk of misuse of a unique identifier will be minimised.

We will not keep Personal Information for longer than required by lawful purposes or by law.

Accessing and correcting the information
Where we hold Personal Information, the individual concerned shall be entitled to request correction of the information and request that a statement of correction be attached to the Personal Information.

  • We will take reasonable steps to ensure the Personal Information is accurate, up to date, complete and not misleading.
  • We are not required to correct the Personal Information if we disagree with the correction. However, if this is the case, the “correction” will be attached to the Personal Information.
  • Where we receive a request for correction of Personal Information we will inform you of the action taken as a result of the request.

Disclosing the information
We will not disclose Personal Information to another person or agency unless we believe on reasonable grounds:

  • The disclosure is directly related to the purposes in connection with which the Personal Information was obtained;
  • The Personal Information is publicly available and disclosure is not unfair or unreasonable;
  • The disclosure is authorised by the individual concerned;
  • The Personal Information is to be used in a form where the individual concerned is not identifiable; or
  • Non-compliance is necessary for one or more of the reasons stated in principle 11 of the Privacy Act.

We will only disclose Personal information to a foreign person or entity where one of the following applies:

  • the individual concerned authorises the disclosure after being expressly informed that the foreign person or entity may not be required to protect the information in a way that provides comparable safeguards to the Privacy Act;
  • the foreign person or entity is carrying on business in New Zealand and The Station reasonably believes the foreign person or entity is subject to the Privacy Act;
  • The Station reasonably believes the foreign person or entity is subject to laws that provide comparable safeguards to the Privacy Act.

PRIVACY BREACHES
The Station will notify the Privacy Commissioner as soon as practicable after becoming aware that a notifiable Privacy Breach has occurred and will comply with the notification requirements in section 117 of the Privacy Act.

The Station will notify affected individuals as soon as practicable after becoming aware that a notifiable Privacy Breach has occurred.

PRIVACY OFFICER
We have a privacy officer who is responsible for:

  • Maintaining this policy and relevant processes;
  • Supporting staff with complying with the policy;
  • Liaising with third parties in respect of privacy matters, including the Privacy Commissioner or other relevant regulators;
  • Dealing with any requests we receive under the Privacy Act; and
  • Managing any privacy complaints received.

For requests or complaints please contact the privacy officer:
Nicole Bourne
Hello@thestationhair.co.nz

REVIEW OF POLICY

Policy Date: June 2021
Reviewed: March 2025