Key privacy messages

We are committed to ensuring that your privacy is protected.

The Privacy Act 2020 requires us to tell you certain things about the personal information we need to carry out our tasks and responsibilities. In line with that, some key privacy messages to note are:

  • We only collect personal information where this is necessary to carry out our functions.
  • We may collect personal information about you either directly from you or from other people or agencies, and we may generate personal information about you when we carry out our functions.
  • We store all of our data (including your personal information) on secure cloud platforms. We protect your data with technical and process controls.
  • You can ask us for a copy of your personal information at any time.
  • We will be as open as we can with you about what information we are collecting and why.
  • We will only use and share personal information where necessary to carry out the functions for which we collected it, or if required by law.

Our privacy practices

We use Google Analytics to help us analyse how visitors use our website, so we can make improvements to our site structure, navigation and content. Google Analytics uses 'cookies', which are text files placed on your computer, to collect standard internet log information and information about how people use our site. This information is collected in an anonymous form and doesn't identify you.

The anonymous information generated by Google Analytics' cookies about your use of this website is transmitted to Google. This information includes the Internet Protocol (IP) address of your computer — the unique number the internet uses to identify and connect with your computer. This is not the same as your email address and is not linked to any personal information about you.

We use Google Analytics information to determine how many people use our website and subsidiary websites. This helps us improve our online services and information to better meet your needs. For example, we can identify how many users visit a particular page and what pages of information they may visit. Google provides this data to us without identifying individual users.

We don't use statistical analytics tools to track or collect any Personally Identifiable Information (PII) from you. Google doesn't associate your IP address with any other data held by Google. We also don't associate any data gathered from this site with PII from any other source, unless you explicitly submit that information using a fill-in form on our website.

Google's privacy policy

Social media cookies

We use external social media sites to provide educational messages and materials, and news for our primary audience — farmers. We also promote events and share events and other relevant information from our shareholder organisations.

Check Facebook, Twitter and YouTube for their cookie policies, which we are not responsible for.

We provide two electronic systems to manage our functions and help you meet your obligations—the NAIT system and MyOSPRI. When you register to use these systems, we will collect the following personal information about you:

PICA (Person In Charge of Animals)

  • full name
  • date of birth
  • postal address
  • physical address
  • telephone number
  • email address

Other User

  • full name
  • telephone number
  • email address

We will use this information to register you as a system user and to correspond with you about your use of the system. 

When you interact with these systems to meet your obligations, we will use the information you provide to us in the ways set out below in relation to our relevant programmes, functions or activities.

Entities may choose to become accredited under the NAIT Standards.

Information about entities is not subject to the Privacy Act 2020. However, personal information may be collected, stored and used as part of the application, assessment, compliance, or complaint investigation processes.

Terms of use for information providers

Personal information we collect about you

Information we collect as part of the accreditation process may include:

  • personal details of the nominated person at the accredited entity
  • business records from the accredited entity that may contain personal information
  • contact details of people making enquiries or providing feedback
  • personal details of people when investigating complaints related to NAIT accredited entities, or the accreditation process.

We may also receive information about a person from:

  • an audit agency that is completing an assessment against the NAIT Standards
  • other agencies that relate directly to NAIT, compliance with the NAIT Act, and any investigations under the NAIT Act that could impact on an entity’s accreditation.

We may generate information about individuals while assisting people through our support centre, responding to any queries you may have, or completing an investigation/audit under the NAIT Standards.

How we use your personal information

To meet our responsibilities under the NAIT Standards, we use personal information to:

  • assess the accreditation application
  • contact the nominated person about a complaint, enquiry, or update to our processes
  • decide whether to investigate a potential breach of the NAIT Standards
  • investigate and resolve a potential breach of the NAIT Standards
  • review and improve the delivery of our services
  • conduct internal statistical analysis and meet our reporting requirements.

We must publish a register of accredited entities on our website. This includes contact details for the organisation. If the organisation has provided personal information as part of their contact details, this may be included on our website

When we share your personal information

We share personal information where necessary to complete duties under the NAIT Standards.

For example, we may share personal information with the:

  • Ministry for Primary Industries
  • police or another government agency, if required by law (for example, to help with investigating a criminal offence), to report significant misconduct or breach of duty, or where there is a serious threat to health or safety. If our staff are threatened or abused, we may refer this to the police.

NAIT Programme

The NAIT programme, which is managed by OSPRI via its subsidiary NAIT Ltd, is an industry and government initiative that links people, property and relevant classes of livestock in New Zealand. Farmed cattle and deer are traced using NAIT-approved RFID ear tags. Once tagged, each animal is registered in the NAIT system, which is managed and maintained by NAIT Ltd.

Personal information we collect about you

We collect information from you or from third parties through the NAIT system. Some of this information may be personal information about you. The information we collect may include:

  • registration data – see “Registering to use or electronic systems”
  • business data – including your trading name, organisation, Herd Number, NAIT number, and Participant Code
  • animal and location data – NAIT locations and NAIT animals
  • transaction data – animal movements, animal registrations, deceased or missing animals, herd records

We may receive some of the information outlined above from third parties, including: 

  • other PICAs
  • saleyards
  • meat processors
  • vets
  • stock agents
  • internet sources, including the Companies Register and LINZ
  • accredited NAIT entities
  • Ministry for Primary Industries (MPI)
  • Department of Conservation (DOC)
  • Environmental Protection Authority (EPA)

We may generate information about individuals while assisting people through our support centre and responding to any queries you may have.

How we use your personal information

We will use the personal information stored in the NAIT system only for the purposes of administering the National Animal Identification and Tracing Act 2012 (NAIT ACT), including:

  • enabling us, MPI and others to exercise their powers and carry out their functions and duties
  • facilitating the purposes of other laws relating to animals or animal health 
  • providing data supporting productivity, market assurance, and trading requirements
  • providing data to enable a potential purchaser of a NAIT animal to trace the location history of that animal

When we share your personal information

The disclosure of information held in the NAIT system is regulated by sections 42-48 of the NAIT Act, as follows:

  • NAIT Ltd, NAIT officers, and NAIT authorised persons may have access to information when they need it to exercise their powers and carry out their functions and duties
  • authorised MPI officers may have access to information where reasonably necessary to achieve the purposes outlined above
  • any other person must apply for access to information under section 43 of the NAIT Act

Applications for access to information contained in the NAIT system are considered by NAIT Ltd under this process, and will only be granted with the consent of the relevant PICA or if access to the information is reasonably necessary to achieve the purposes set out above. 

TBfree Programme 

The TBfree programme, which is managed by OSPRI via its subsidiary TBfree Ltd, aims to control and then eradicate bovine tuberculosis (TB) in New Zealand. The TBfree programme looks for the disease in all domestic herds through on-farm TB testing and meat works inspection, livestock movement controls, and possum population. The programme implements and operates under the Biosecurity (National Bovine Tuberculosis Pest Management Plan) Order 1998 (Biosecurity Order).

Personal information we collect about you

The Biosecurity Order gives OSPRI information gathering powers and requires PICAs and others to provide certain information. We collect information from you or third parties, and some of this information may be personal information about you. The information we collect may include:

  • full name
  • postal address
  • residential address
  • email address
  • telephone number
  • date of birth
  • Herd Number and NAIT Number
  • trading name
  • herd registration details
  • reactor valuations
  • financial information, including bank account numbers
  • information about your farm
  • disease status and test history

We may generate information about individuals while assisting people through our support centre and responding to any queries you may have.

How we use your personal information

We collect personal information about you for the purposes of monitoring, confirming and managing the presence or otherwise of TB, herd composition and herd location, or for other purposes permitted by the Biosecurity Order or Biosecurity Act 1993.

When we share your personal information

To meet the purposes of the TBfree programme, we may need to share your personal information with:

  • MPI
  • AsureQuality
  • AgResearch
  • meat processors
  • stock agents
  • vets
  • other PICAs who may be affected, including neighbouring properties

Animal Status Declarations

Animal Status Declarations (ASDs) can be submitted to us electronically via MyOSPRI or as paper forms. We collect personal information about you in an ASD for the purposes of:

  • enabling you to meet your obligations under the Animal Products Act 1999 and Biosecurity Act 1993
  • making your information available to the intended receiver of livestock to the extent permitted or required by the Animal Products Act 1999
  • enabling us, MPI and others to improve disease management and prevention capabilities and to respond to biosecurity incursions or dangers

Personal information we collect about you

We may collect, use and share personal information when we engage with the public and agencies. This can happen when we:

  • manage our enquiries function
  • run public consultations and receive submissions
  • engage with the community in other ways — through our website or communications activities (such as events, surveys, newsletters and industry groups).

The information we may collect when you engage with us includes:

  • your name (if you choose to provide it)
  • your contact details, including your address, email address or phone number
  • the content of your enquiry (our support centre does record calls)
  • any questions or comments you submit via our consultation documents
  • details of any events you have registered for, including dietary or other specific requirements
  • your responses to surveys or focus group discussions (usually these will be captured in an anonymised form).

We only collect the personal information you choose to give us — for example, you can decide how much detail to provide us as background to an enquiry. You can also opt out of our communications activities, such as receiving our newsletter, at any time.

How we use your personal information

We will only use the personal information you provide to:

  • deliver the services you have requested (such as registering you for an event, responding to an enquiry, or processing your submission)
  • carry out our lawful functions.

We may use your personal information to:

  • contact you about your request, query or registration
  • consider and respond to your enquiry
  • improve our website and the delivery of our online services
  • do internal statistical analysis and meet our reporting requirements.

When we share your personal information

We do not generally share your personal information with third parties (other than third parties providing services to us). However, we may share your personal information in the following circumstances:

  • To appropriately respond to your enquiry.
  • If you make a submission to us as part of a public consultation process, such as commenting on a change to a standard, we may publish your submission as a standard part of the consultation process. If there is any personal information in that submission or if we want to publish any personally identifiable information alongside the submission, we will either tell you that is our intention upfront before you submit, or get your consent first.
  • We may make consultation submissions available in response to requests under the Official Information Act.
  • We may share personal information with the police or another government agency, if required by law (for example, to help with investigating a criminal offence), to report significant misconduct or breach of duty, or where there is a serious threat to health or safety. If our staff are threatened or abused, we may refer this to the police.

Links to social media services

We use social media services, such as Facebook, to communicate with the public about our work. When you communicate with us using these services, the social media service may collect your personal information for its own purposes.

These services may track your use of our website on pages where their links are displayed. If you are logged into those services (including any Google service) while using our site, their tracking will be associated with their profile of you.

Storage and security

We take all reasonable steps to ensure the personal information we collect is protected against loss, unauthorised access and disclosure or any other misuse.

We ensure that our third-party data processors can meet our privacy and security requirements. We are satisfied, for example, that Microsoft has adequate security and privacy safeguards in place to protect information it holds on our behalf.

Your privacy rights

The Privacy Act gives you a range of rights.

Requesting access to, or correction of your information

You have the right to request a copy of the personal information we hold about you (whether we have collected it from you directly or from a third party). You also have the right to ask us to correct your information if you think it is wrong.

We will process your request as soon as possible, and no later than 20 working days after we receive it. We will be as open as we can with you. We may occasionally need to withhold personal information under sections 49 to 53 of the Privacy Act — for example, where the information appears in legal advice, or releasing the information could threaten someone's safety. However, we will only ever withhold information where necessary.

Opting out of certain uses of your information

You can opt out of receiving our newsletter or being included on any other subscription list or newsfeed by following the unsubscribe link at the end of the email, or contacting us.

Complaining about our privacy practices

Let us know if you have concerns about our privacy practices, whether they relate to the way we collect or share information about you, or our decision on your access request. This allows us to try and resolve things for you, and helps us to identify and fix any problems with our processes.

If we can't resolve your concerns, you have the right to complain to the Privacy Commissioner about our actions.

How to contact us

You can contact us by: