Course Enrolment: 
When you enrol in a course through Teachable, the platform collects your name, email address, and any information required for course participation. Payment card details are processed securely by Stripe and are not stored by OLLI.

Newsletter Subscriptions: 
When you subscribe to our newsletters, promotions, or updates about new courses, we collect your name and email address.

Contact Forms: 
Information you provide when making inquiries or requesting support.

Unique Identifiers: 
In the course of providing our services, we and Teachable may assign unique identifiers such as user IDs, enrolment IDs, or course participant numbers. We use these identifiers to manage your enrolments, track course progress, and operate our systems. We do not use government-issued identifiers.

Purpose of Personal Information Collection via Third-Party Platform (Teachable)

This information is collected to process your enrolment, facilitate secure payment transactions, and provide you with access to course materials. Additionally, it enables accurate records of course progress and communication of important updates to support the learning experience.

Non-Personal Information

We also collect non-personal information that does not directly identify you, including but not limited to:

• Device Information: IP addresses, browser type, operating system, device identifiers, and mobile network information.

• Usage Data: Information about how you interact with our website, such as pages visited, time spent on pages, clickstream data, and referring URLs.

• Cookies and Tracking Technologies: Data collected through cookies, web beacons, and similar technologies used for analytics, advertising, and to enhance user experience.

How We Use Your Personal Information

We use your personal information for the following purposes:

• Providing Services: To enrol you in courses, process payments, and provide access to educational materials.

• Communications: To send newsletters, promotional materials, updates about new courses, and respond to your inquiries.

• Improving Our Services: To analyse website usage and enhance user experience.

• Marketing and Advertising: To deliver targeted advertisements and measure the effectiveness of marketing campaigns.

• IT and Data Security: To monitor and secure systems from unauthorised access, cyber threats, and other security risks.

Essential Service Communications: 
Essential service-related communications, such as enrolment confirmations, course updates, and important notices, may be sent even where marketing communications are declined. Opting out of marketing does not affect access to necessary service messages.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies, which may be set by us or by our service providers, for the following purposes:

Types of Cookies We Use:

• Strictly necessary cookies: Required for core site functionality, security, and access to your account. These cannot be disabled through our cookie tools.

• Performance and analytics cookies: Help us understand how the website and courses are used so we can improve our services, including through tools such as Google Analytics.

• Functional cookies: Remember your preferences, such as language and display settings, and enhance your experience.

• Advertising and marketing cookies: Enable us and our partners to provide more relevant advertising and measure the effectiveness of campaigns. These are optional.

• Enhance User Experience: Remember your preferences and personalise content.

• Analytics: Collect information about website traffic and usage patterns via tools like Google Analytics.

• Advertising: Provide you with targeted advertisements based on your interests

You can manage non-essential cookies in two ways:

• Browser settings: Most browsers allow you to block or delete cookies. If you disable certain cookies, some features of our website or courses may not function as intended.

• Consent Management Platform (CMP): When you first visit our website, you will see a cookie banner and CMP that allows you to accept all cookies, reject non-essential cookies, or make granular choices. You can revisit and change your cookie preferences at any time by using the CMP link or icon on our website.

Google Analytics and similar tools may collect information about your device, IP address, and usage patterns. Where feasible, IP anonymisation and other safeguards are used. These tools are configured in line with applicable data privacy laws and are not used to directly identify you without consent. Users can also opt out of Google Analytics by using the Google Analytics opt-out browser add-on or adjusting cookie preferences.

Disclosure of Personal Information

We may disclose your personal information in the following circumstances:

Third-Party Service Providers

• Teachable: Your information is shared with Teachable for course enrolment and delivery.

• Payment Processors: To securely process payments.

• Email Marketing Services: To send newsletters and promotional materials.

Workshop Facilitators for Collaborative Training: 
If you book into any training delivered by OLLI in collaboration with Tōtara Hospice, such as syringe driver training, you agree that the information necessary to administer and deliver that training may be shared with the relevant workshop facilitator. This may include your name, contact details, booking details, and any other information reasonably required for attendance management, communication, and workshop delivery.

Analytics and Advertising Providers: 
Limited information, such as cookie identifiers or hashed email addresses, may be shared with analytics and advertising providers to help understand performance and deliver more relevant content. Personal information is not sold. Any sharing is restricted to the purposes described in this Privacy Policy and is subject to contractual and security safeguards.

Legal Obligations

We may disclose your information to comply with laws, regulations, court orders, or government requests.

Privacy Breach Notifications

In the event of a privacy breach likely to cause serious harm, OLLI will notify affected individuals and the New Zealand Privacy Commissioner as soon as practicable, in compliance with the Privacy Act 2020. We will also take immediate steps to mitigate harm and prevent future breaches.

Internal processes are maintained for identifying, assessing, and responding to privacy incidents, including steps to contain the breach, investigate the cause, and implement improvements to reduce the likelihood of similar events.

International Data Transfers

Transfer to Third-Party Platform: 
By enrolling in our courses, you acknowledge that your personal information will be transferred to and processed by Teachable, which is located outside of New Zealand.

Overseas Privacy Protections: 
Teachable currently operates primarily from the United States, and may also process information in other jurisdictions identified in Teachable’s own privacy policy. Those jurisdictions may have different privacy laws and requirements from New Zealand, we encourage you to review Teachable’s Privacy alongside OLLI’s.

Your Consent: 
By providing your personal information and enrolling in our courses, you expressly consent to the international transfer of your data. 

Steps are taken to ensure that Teachable and other overseas service providers have appropriate privacy and security safeguards, prior to engaging with them. This may include security certifications or frameworks. These are reviewed periodically, and this Privacy Policy will be updated if overseas providers or applicable safeguards change.

Privacy Governance: 
OLLI operates under Tōtara Hospice, which has appointed a Privacy Officer responsible for overseeing compliance with the Privacy Act 2020. The Privacy Officer and relevant staff monitor privacy risks, review policies and practices, and provide guidance on how personal information is handled across OLLI services.

Your Rights Under the New Zealand Privacy Act 2020

You have the right to:

• Access Your Personal Information: Request a copy of the personal data held about you.

• Correct Your Personal Information: Request corrections to any inaccurate or outdated personal information.

• Withdraw Consent: Opt out of marketing communications by using the unsubscribe link or contacting us directly.

• Data Portability: Request a copy of your personal data in a structured, machine-readable format.

• Complain: Escalate concerns to the New Zealand Privacy Commissioner if you believe your privacy has been breached.

To exercise these rights, please contact us using the details provided in the “Contact Us” section and clearly state the nature of your request, for example “Privacy request – access” or “Privacy request – correction.” Identity may need to be verified before a response is provided. Access and correction requests are intended to be responded to within 20 working days, in line with the expectations of the Privacy Act 2020.

Retention of Personal Information

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this Privacy Policy or to comply with legal obligations.

Newsletter Subscribers: If you unsubscribe, your contact information will be removed from the mailing list.

Course Participants: Enrolment and academic records are retained as required for educational and legal purposes.

Where practical, indicative retention periods are applied, for example keeping core enrolment records for a number of years to meet legal and audit requirements, after which information is securely deleted, anonymised, or archived unless a longer period is required by law.