Skip to main content

Privacy policy.

When we refer to ‘we’ (or ‘our’ or ‘us’), we are referring to Koru School. Our school is located in Mangere, Auckland, New Zealand.

We are a New Zealand educational institution, a full primary school. If you want to find out more about our school, click here.

How we collect your data

When you use our website, your personal data is collected in the following ways:
Information you manually enter on our website or forms. For example, when we ask for your contact information, via email, if you follow our social media channels or contact us via any of these online tools. If you don’t want to provide this data, you don’t have to.

Automatic Information collection: Some information we collect happens automatically as an outcome of you visiting our website. This is information like IP address, device type, session time etc. We also track your behaviour on our websites and services (like Electronic Direct Mail) which shows us the pages you view and the route you take to get there. This data helps us to understand your useage of our website, and assists us in tailoring the user experience to (hopefully!) be better for you. Some of this information is tracked using tracking technologies like cookies.
Third party information: we don’t buy data and we do not sell data. Any information we source which is supplementary to what you provide us is collected from publicly available information repositories. We collect and use this information to better understand your needs and improve our website.
If we collect personal data, we use it in the following instances:
To engage in a contract with you.

Where we have legitimate interests to process the personal data and they’re not overridden by your rights, or in accordance with a legal obligation, or where we have your consent.

If we don’t collect your personal data, our contacts or communication may be limited.

If you don’t have a current (or historical) relationship with us and you feel you have had your details acquired without your permission, please let us know and we will remove your data.

How we use your data

We use your personal information to better tailor our website, and to maintain our relationship with you. This includes:
Using the information we have to communicate with you, via email, phone or in person.

Improving the service of our website, for example, by analysing your use of our website so that we can iteratively improve our services.
Guarding against security breaches by ensuring personal information is authenticated.

How we share your data:

We will only disclose your personal data to third parties in the following instances;
If they are regulators, law enforcement bodies, government agencies, courts or other third parties where we think it’s necessary to comply with applicable laws or regulations, or to exercise, establish or defend our legal rights. Where possible and appropriate, we will notify you of this type of disclosure.


Our website developers and hosting services encrypt traffic to and from our website using SHA-256 with RSA Encryption. We do not ask for or store credit card details on our site, or ask for any payments, money or money transfers via our website or social media channels.


The length of time we keep your personal data depends on what it is and whether we have an ongoing business need to retain it (for example, to provide you with a service you’ve requested or to comply with applicable legal responsibilities)

We’ll retain your personal data for as long as we have a relationship with you and for a period of time afterwards where we have an ongoing need to retain it, in accordance with our data retention policies and practices. Following that period, we’ll make sure it’s deleted or anonymised.

Your rights

It’s your personal data and you have certain rights relating to it. When it comes to marketing communications, you can ask us not to send you these at any time – just click unsubscribe at the footnote of the email.

You also have rights to:
Understand what personal data of yours we hold – and to ensure it is accurate.
Request a copy of your personal data, or ask us to limit, or delete/remove what we have.

You can exercise these rights at any time by sending an email to

If you are unhappy with the steps we have taken to meet best practice privacy policy regulations, please get in touch with us – we are always looking to improve our website