Privacy statement
Introduction
LIGHTN is committed to your privacy. This privacy notice describes how we collect, receive, use, store, share, transfer, and process your personal data when you interact with us through our websites, platforms, products, and services. It also describes your choices and rights regarding your personal data, including your rights to access and correct it. For this notice "personal data" means any information relating to an identified individual.
Our policies and procedures for handling personal data comply with the data protection laws in the countries where we operate, including the New Zealand Privacy Act 2020 and their amendments.
We may share member users' contact details with our contracted customers to promote our SchoolDocs, GPDocs or ECEDocs services and community learning. Additionally, pseudonymised or aggregated non-identifiable usage data is shared with the broader SchoolDocs or GPDocs community to gain insights and share findings.
​
Contact
If you have any questions about this privacy notice or how we handle your information, or if you need to access this notice in a different format due to disability, email: team@ecedocs.co.nz.
​
Or write to us at:
LIGHTN
Level 1/226 Antigua Street
Christchurch Central
Christchurch
8011
New Zealand
​
What information do we collect?
We collect and process your personal data when you interact with us or use our websites, platforms, products, and services. The personal data we collect includes:
-
Your name
-
Job title
-
Work address, email address, and/or phone number
-
IP addresses
-
Professional registration number
-
Username and password
-
Website user information
-
Aggregated non-identifiable website usage data
-
Data related to the browser or device you use to access our website
-
Records of our communications to and from you
-
Internet browser and operating system details
​
LIGHTN does not collect or hold any personally identifiable information about individual patients or patient records nor about individual students.
​
How do we use your information and what is the legal basis for its use?
We process the personal data listed above for the following purposes:
-
To optimise your user experience. LIGHTN may analyse usage data to optimise the user experience, making our platforms more intuitive and efficient. User profile information may also be used to personalise your platform experience to make sure that information and resources that are most appropriate to your role and needs are easily accessible.
-
To optimise SchoolDocs, GPDocs, and ECEDocs community engagement and utility. We share aggregated, non-identifiable usage data with the SchoolDocs, GPDocs, and ECEDocs community programme team. This data helps measure the utility of the SchoolDocs, GPDocs, and ECEDocs community content to build trust and engagement with your SchoolDocs, GPDocs, and ECEDocs site.
-
To promote SchoolDocs, GPDocs, and ECEDocs community learning. Pseudonymised or aggregated non-identifiable usage data is available to the broader SchoolDocs, GPDocs, and ECEDocs community so we can gain insights and learning and share our findings. This may include publication of non-identifiable data for research and evaluation purposes.
-
To establish and fulfil a contract with you. For example, if you make a purchase from us or enter into an agreement to provide or receive services. This may include verifying your identity, taking payments, communicating with you, providing services. We require this information to enter into a contract with you and are unable to do so without it.
-
To enable you to record and report your individual time spent on SchoolDocs, GPDocs, or ECEDocs community for your professional development hours to your registration body.
-
To comply with applicable laws and regulations.
-
With your express consent, to respond to any comments or complaints we may receive from you, or to investigate any complaints received from you or from others, about our website or our products or services.
-
To potentially personalise (i) our communications to you; (ii) our website and platforms; and (iii) products or services for you, in accordance with our legitimate interests.
-
To monitor use of our websites, platforms and online services. We may use your information to help us check, improve, and protect our products, content, services, and websites or platforms, both online and offline, in accordance with our legitimate interests.
-
To potentially monitor any customer account to prevent, investigate, and/or report fraud, terrorism, misrepresentation, security incidents or crime, in accordance with applicable law and our legitimate interests.
-
To potentially invite you to take part in market research or surveys.
​
We may also send you emails related to relevant products and services. You may opt-out at any time, and if you choose to do so, you will not receive these emails. We will not send you direct marketing for third-party products or services, although our products or services may occasionally involve cooperation with third parties.
​
How long do we keep information?
We only keep your personal data for as long as necessary to fulfil the original purpose or a directly related one, or to comply with legal requirements.
​
Our data retention policy outlines how long we keep different types of information, based on its type and purpose. Once the retention period ends, we will either delete or anonymise your data. If deletion is not possible, we will securely store your information and isolate it from further use until it can be deleted.
​
User data supporting SchoolDocs, GPDocs, and ECEDocs community content will be retained and used after leaving the service to maintain the integrity of published documents to all users.
​
Where is my data stored?
We use various security technologies and procedures to protect your personal data from unauthorised access, use, or disclosure. We store your personal data on secure computer servers in a controlled environment. We also use appropriate physical, technical, and organisational measures to safeguard all personal data.
​
Who do we share your data with?
The personal data that we collect from you may be transferred to, and stored outside, your country or region. It may also be processed by staff operating outside your country or region who work for us or for one of our suppliers. In such cases, that country’s data protection laws will have been approved as adequate by the relevant authorities, or other applicable safeguards will be in place.
​
Organisation name: AWS
-
Category of recipient: Storage Provider
-
Country the personal information is sent to: Australia.
​
Your data protection rights
Under data protection laws, we must have a "lawful basis" to collect and use your personal information. The lawful basis we rely on can affect your data protection rights. These rights are summarised below, but the precise rights you have will vary depending on the legal jurisdiction you are located within:
-
Access – You have the right to ask us for copies of your personal information and about where we get it and who we share it with. There are some exemptions which mean you may not receive all the information you ask for.
-
Correction – You have the right to ask us to correct or delete personal information you think is inaccurate or incomplete.
-
Erasure – You have the right to ask us to delete your personal information.
-
Restriction of processing – You have the right to ask us to limit how we can use your personal information.
-
Objection to processing – You have the right to object to the processing of your personal data.
-
Data portability – You have the right to ask that we transfer the personal information you gave us to another organisation or to you.
-
Withdrawal of consent – When we use consent as our lawful basis you have the right to withdraw your consent at any time.
​
If you make a request, we must respond to you within one month.
To make a data protection rights request, contact us using the contact details at the top of this privacy notice.
​
How to complain
If you are worried about how we use your personal data, contact us using the details at the top of this privacy notice.
If you are still not satisfied after we have addressed your complaint, you can contact the Privacy Commissioner https://www.privacy.org.nz/.
​
Cookies
We use cookies on our websites to keep you logged in and optionally to remember your login details.
​
We also use Google Analytics which uses cookies to track activity on our websites. We do not track individual user activity. Tracking page use helps us to focus on pages that are more relevant to your needs.
​
For more information on Google's privacy policies, refer to Google privacy and terms.
Google provides tools to allow you to opt out of Google Analytics.
You can remove cookies from your web browser (this will end your current login session).