Privacy Policy

We are Dry July NZ Trust.

We provide:

• the Dry July Website (at (at http://www.dryjuly.co.nz) (the Dry July Website); and
• the Dry July program (Dry July), which is website-based initiative where an individual or group can take on the challenge of a month long sponsored abstinence from alcohol and funds raised go directly to benefit the lives of people affected by cancer.

We respect your right to privacy. This Dry July Privacy Policy sets out:

• how we may collect your personal information;
• how we will handle the personal information which we collect; and
• how and why we may use and disclose this information from time to time.

This Dry July Privacy Policy forms part of "Our Agreement". By agreeing to Our Agreement, you consent to the collection, and use and disclosure of your personal information as described in this Dry July Privacy Policy.Some of the capitalised terms used in these Terms and Conditions are defined elsewhere in Our Agreement.

In addition to www.dryjuly.co.nz, this Privacy Policy and Our Agreement also apply to any other Dry July branded Website or co-branded websites (including sub-domains, international versions, and mobile versions).If you are using any such website, then references to "the Dry July Website" in this Privacy Policy or Our Agreement shall be read as references to that website.

We may review and update this Dry July Privacy Policy from time to time to take account of, for example, new laws, technology and changes to Dry July or the Dry July Website. We will notify you through regular notifications posted on the Dry July Website. We will also notify you on this page.

You should review this page regularly.

You should direct any questions or complaints to our Privacy Officer at [email protected]. We will endeavour to respond to any complaint within a reasonable time (usually 30 days). If you are not satisfied with our response, you may take your complaint to the Office of the New Zealand Privacy Commissioner.

You should not be a participant with Dry July, make any donations or place any purchase orders on the Dry July Website, or access or use the Dry July Website if you do not agree to anything in this Dry July Privacy Policy.

This Dry July Privacy Policy was last updated on 1^st May 2019.

Personal information which may be collected by us

We may collect the following personal information:

• Information relating to Your Account: In accordance with Our Agreement we require all Participants to have an active account with us (Account). To open your Account you must provide us with certain personal information and we will collect and hold this information. This personal information may include, for example, your name, address, post code and phone number.We require this to be able to identify you and for security purposes. If you choose not to provide the personal information we request, we will not be able to let you open or keep open your Account. We may also collect information relating to your use of your Account.
• Your Content: You may post on or make available to the Dry July Website your content and information, including information about you and the actions you take, any photos, video, or text or other forms of content (Your Content). Your Content will be publicly available. You grant us a licence to Your Content under Our Agreement.If you authorise a third party to post or make available any personal information about you on the Dry July Website, you consent to that content being used by us in accordance with Our Agreement with that third party.
• Being a part of Dry July: If you are a Participant or Donor, we may collect and hold information in relation to your participation with Dry July. This may include information such as who you sponsor or who sponsors you, donations made by you or related to you (if you are a Participant) and purchase orders placed by you. If you choose to use our opt-in services, we will ask you for the information needed to send the communication or have it sent to you and we may keep information about our communications with you.
• Using the Dry July Website: We collect and hold details of your access to and use of the Dry July Website. This includes your browser type and IP address. In addition, we store certain information from your browser using "cookies." A cookie is a piece of data stored on the user's computer tied to information about the user. We use session ID cookies to confirm that users are logged in. These cookies terminate once the user closes the browser. You can remove or block this cookie using the settings in your browser if you want to disable this convenience feature.

If you interact with us for purposes other than those outlined above, we may collect and handle personal information in connection with those purposes on a case by case basis and in accordance with applicable privacy laws.

While we generally collect personal information directly from you, depending on the circumstances, we may also collect personal information from publically available sources and third parties, such as recruitment agencies and your previous employers (such as if you apply for an employment or other position with us), and from our contractors and business / charitable partners.

If we collect personal information about you from a third party we will, where appropriate, request that the third party inform you that we are holding such information, how we will use and disclose it, and that you may contact us to gain access to and correct and update the information.

Information we will not collect

We do not collect any credit card or debit card information from you.

All donations and payments are made through the Braintree Payment System (https://www.braintreepayments.com) (Payment System). The provider of the Payment System may retain your payment and credit card details. We do not collect or hold your credit card information, either from you or from the Payment System provider.

Purposes of collecting, using and disclosing your personal information

Your personal information may be collected, held, used and disclosed by us to:

• verify your identity;
• if you are a Participant, enable you to open and use Your Account;
• if you are a Participant, have a profile page on the Dry July Website;
• enable you to be a Participant or Donor;
• enable you to otherwise access and use the Dry July Website, including uploading and sharing Your Content;
• troubleshooting and rectifying or altering Dry July;
• facilitate the sharing of Your Content;
• administer and manage Dry July and the Dry July Website;
• administer and manage your access to and use of the Dry July Website;
• communicate with our Payment System;
• implementing and conducting risk management, cyber security or fraud protection activities in connection with Dry July and the Dry July Website;
• maintain, undertake research into and develop Dry July and the Dry July Website; and communicate with you, or permit other people to communicate with you, in accordance with Our Agreement; and
• provide you with information about future Dry July events and initiatives which may be of interest to you;
• optimise and customise the user experience (including content and advertising) for users of the Dry July Website;
• communicate with you, including (but not limited to) emailing you tax donation receipts; and
• otherwise manage and operate our business and comply with our legal and regulatory obligations.

Storage and Security

We hold personal information in a range of formats, including secure physical records and electronic files (on our intranet system or in cloud storage), and in some cases, records on third party servers, which may be located overseas.

We use a range of security measures to protect the personal information we hold, including by ensuring that data centres are subject to identity and access management and employees and third parties are subject to information security obligations.

We will destroy or de-identify personal information once it is no longer needed for a valid purpose or required to be kept by law.

The Terms and Conditions which form part of Our Agreement also contain further information about our information security practices.

Marketing

With your consent or where otherwise permitted by law, we may send you certain communications from us or third parties in relation to marketing, news about Dry July, news about beneficiaries, or other information available from time to time.

You may opt out at any time if you no longer wish to receive direct marketing messages from us. You can make this request:

• by clicking on an unsubscribe link in an email you receive from us;
• via the "Account Settings" on the Dry July Website; or
• by contacting [email protected]

Note that unsubscribing via SMS will only unsubscribe you from receiving marketing via SMS messages, but not emails/calls.

Other people's information

If you provide to Dry July or post on or make available to the Dry July Website any personal information of another person, you must:

• have that person's prior written consent to do so;
• ensure they are aware of this Dry July Privacy Policy; and
• ensure their consent allows us to use and disclose their personal information in the same way that we may use and disclose your personal information.

Disclosure of your personal information

In order to be able to manage Dry July and operate the Dry July Website, and without limiting the section titled "Purposes of collecting, using and disclosing your personal information" above, we may disclose your personal information to third parties for the following purposes:

• if you are a Participant, to open and use your Account;
• so you can access and use the Dry July Website, including uploading and sharing Your Content;
• so we can administer, manage and support Dry July and the Dry July Website for you (including your access to and use of the Dry July Website);
• so we can ensure your donations and purchase orders are properly accounted for with the Payment System provider;
• so we can fulfil your purchase orders;
• so we can conduct risk management, cyber security or fraud protection activities in connection with Dry July and the Dry July Website; and
• so we can undertake research into and develop Dry July and the Dry July Website to make it better.

The types of organisations to which we disclose information for these purposes include:

• organisations which carry out IT services for us related to Dry July and the Dry July Website including our physical housing, monitoring and backup of the servers for the Dry July Website, support and maintenance for the Dry July Website; and
• organisations which provide services to enable fulfilment of your purchase orders.

Some of the third parties we disclose personal information to are located overseas. Australia and Singapore are the main overseas country in which these recipients of your personal information are located.

If you consent to the disclosure of your personal information overseas, Dry July will not be responsible for ensuring overseas entities' compliance with New Zealand privacy law in relation to that personal information.

If you are a Participant we will display your name and image on your profile page of the Dry July Website. Your email address or other contact information will not be displayed in any form through the Dry July Website. If you are a Donor we will normally display your name on the profile page of the Participant to whom you have made a donation. When making a donation, you have the option of checking a box marked "Anonymous Donation". If you check this box, your name will not be disclosed to the Participant nor will your name be displayed on the Dry July Website.

If you are a Participant, we may also provide your postcode information from your Account to Google Maps (but not other personal information) so Google Maps can display information about participation in Dry July. This is unlikely to identify you.

We may also disclose information to third parties you have indicated you want to share your information with for a particular purpose, including through opting in to a particular form of communication (by checking a box or by other means that allows Dry July to pass your information onto third parties). This may include beneficiaries, third parties that provide goods or services, or our sponsors or supporters who may wish to contact you from time to time. They may also include marketing, market participation and research companies.

Where consent has not been provided we may provide information which has been de-identified (so that it is no longer personal information and does not identify you) to:

• organisations which carry out marketing, market and participation research for us for the purpose of carrying out such research and providing us with advice;
• organisations which provide us with support, sponsorship or are beneficiaries.

We take reasonable steps to ensure that any third parties who we disclose your personal information to are bound by confidentiality and privacy obligations in relation to the protection of your personal information.

We may disclose your personal information to Facebook so that Facebook can send you advertisements about future Dry July events and initiatives. Your details will be hashed before they are sent to Facebook, and Facebook only briefly uses the data for matching purposes then deletes it: https://www.facebook.com/ads/manage/customaudiences/tos.php If you would prefer not to see these advertisements or wish to opt out of having your details provided to Facebook, please contact us on [email protected].

In addition, we may disclose your personal information:

• to your authorised representatives or your legal advisers (when requested by you to do so);
• as required, permitted or authorised by law, including to government and regulatory authorities and other organisations; and
• to our professional advisers, including our accountants, auditors, insurers and lawyers.

Changes to personal information

Management of personal information in your Account and Your Content is governed by you. You are responsible for changing these as required by you from time to time.

We require your assistance to ensure that the personal information we collect, use and disclose and which you use and disclose to us is accurate, complete and up-to-date. We ask that you:

• let us know if there are any errors in your personal information which we have collected; and
• keep us up-to-date with changes to your personal information which we have collected such as your name or e-mail address.

If you have difficulty in doing this, you should contact us for help by emailing us at [email protected].

You have a right to request access to (and/or correction of) the personal information we hold about you. In order to do this, please email us at [email protected] or call 1300 DRY JULY.

If you have any queries about our privacy practices or would like to make a complaint, then please contact us using the details above. We take all complaints seriously, and will respond to your complaint within a reasonable period. If we do not resolve a complaint to your satisfaction, then you may take your complaint to the Office of the New Zealand Privacy Commissioner.

Please check this policy regularly as it is updated from time to time. If you cease to agree with its terms, then please let us know. Continued participation in Dry July activities (such as continued access to and use of the Dry July website) will be understood by us to indicate that you agree to this Privacy Policy as updated from time to time.