Privacy
This policy covers Koru (ikoru.nz). No account is needed to browse. It explains information handling for the questionnaire, website visits and email contact, and your choices and rights.
Last updated:
Questionnaire & search
Questionnaire answers and search terms are used only within the current page. Our application code does not send them to the operator or government, or save them in cookies or persistent browser storage. New searches are not written to the URL. Back and forward can restore searches within this page; refreshing or closing it clears them. Legacy links containing search parameters reach the hosting service before the page removes those parameters. No names, identity documents, IRD numbers or medical records are required.
Analytics & operational logs
When you visit, hosting and network providers may process technical data such as IP addresses, request times and browser details for delivery, security and operation. The site uses Google Analytics (GA4) for visitor analytics and aggregate interaction events that do not include search text, questionnaire answers or contact content, to improve the directory and official links. It has no advertising delivery scripts.
We use Google Analytics (GA4) to understand page views, traffic sources, device and browser types, and approximate location to improve content and the site experience. Google may process visit data using cookies and device identifiers; analytics is not the same as complete anonymity. Interaction events include finder entry views, clicks and placement, starting the finder, completed step numbers, completing the finder and opening official links; they do not record the choices made at each step. We do not explicitly send questionnaire answers, search terms, contact email addresses or messages as custom analytics parameters. Hosting log categories and retention depend on the service configuration and provider policies; this policy does not promise an unverified fixed retention period.
Advertising & cookies
Google AdSense is not currently integrated and we do not use advertising personalisation cookies. Apart from analytics cookies used by GA4 (such as _ga), our feature code sets no cookies and does not persist questionnaire answers, searches or email drafts in browser storage. Hosting services may use technologies needed for security or abuse prevention; external email and official websites have their own cookie policies. You can inspect, restrict or clear cookies in your browser. Our directory and questionnaire do not depend on cookies.
You can restrict or clear browser cookies or use Google’s analytics opt-out tool. Clearing cookies alone does not delete analytics already collected or prevent future collection. Analytics retention depends on GA4 settings and Google’s processing rules. Google Analytics opt-out ↗ · Google Privacy Policy ↗
Contact form & email
When you click Send, the form submits your email address, subject and message over HTTPS to our Cloudflare endpoint, then the email service sends it to the operator inbox configured for info@ikoru.nz. No email app is needed. Unsubmitted content stays in the current page; the site does not store messages in a database. A success notice means the email service accepted the request, not guaranteed inbox delivery.
If you email us, we receive your email address and message to reply, verify and handle your feedback. Include only necessary information. If you contact us about personal information, you may ask about, access or correct information we hold about you. Do not send identity numbers, banking details, questionnaire answers or health records in correction emails.
Contact is voluntary. Withholding your email or message does not affect browsing but may prevent a reply. Received messages are used for correspondence, corrections and privacy or copyright requests, not marketing. The sending endpoint uses IP addresses for short-term rate limiting to prevent abuse; the application does not intentionally log message bodies.
Providers, sharing & overseas processing
We do not sell personal information. Hosting, network and email providers may process information needed to deliver their services, potentially on servers outside New Zealand. Cloudflare processes form submissions and email sending, and the operator’s email provider processes received mail. Google also processes GA4 analytics data. We do not disclose personal information in correspondence to other parties except for service delivery, purposes you authorise, or where permitted or required by law. Overseas disclosures will be handled under applicable New Zealand privacy requirements.
Retention & security
We retain correspondence only as needed to respond, handle feedback, resolve disputes or meet legal obligations, then delete personal information no longer needed. Provider logs and backups follow their retention mechanisms; deletion may not immediately remove backup copies. We will take reasonable measures against unauthorised access, loss or disclosure. Internet transmission and email services cannot guarantee absolute security.
Children & family information
The site serves people seeking support information and their caregivers. Children are not asked to register or submit identity details. Child counts and ages in the questionnaire are used within the page to match family support. Do not email children’s names, identity documents or health records. If we discover unnecessary personal information about a child in correspondence, we will take appropriate steps to delete it.
Access, correction, deletion & complaints
Under New Zealand’s Privacy Act 2020, you may request access to or correction of personal information we hold about you. You may also ask us to delete information no longer needed. Deletion requests are assessed against retention obligations and the data actually held; not all data can necessarily be deleted immediately. We may need proportionate identity verification to avoid disclosing information to the wrong person and will respond within applicable legal timeframes.
Send privacy requests or complaints to info@ikoru.nz. If the issue is not resolved, you can contact the New Zealand Office of the Privacy Commissioner. Office of the Privacy Commissioner ↗
Refreshing or closing the page clears in-app questionnaire and search state; leaving the contact page clears unsubmitted content. You can request access to, correction of or deletion of submitted messages through the contact address above.
Followed topics and feeds
Followed topics are stored only in this browser’s localStorage, without email or questionnaire answers, and are not sent as analytics events. Clear selections and save to stop following; clearing browser data also removes preferences. RSS feeds contain public topic summaries. Your chosen reader may process feed URLs and access records under its own privacy policy. Unfollowing here does not unsubscribe your reader; unsubscribe there separately.
My support list: local storage
When you choose to save an item, localStorage in this browser stores its catalogue ID, your progress status and update time. Questionnaire answers are not stored. Lists and progress are not sent as analytics events; there is no account or cross-device sync. Others using this browser may see your list. Remove items or confirm clearing within My support list; clearing browser data also deletes it. When browser storage is blocked or full, the page reports that saving failed and edits may last only on the current page.
External links
Official links open in a new tab. External sites have their own privacy policies and terms. Submit application information only after confirming that you are on the genuine official site.
Policy changes
We will revise this page and its date when information handling changes. Before changing analytics or enabling advertising or other new data processing features, we will update the relevant disclosures and provide required choices where applicable.