Privacy Policy

1. Introduction

JTR Global OpenWings Limited ("JTR", "we", "us", "our") collects personal information from you when you use JTR Global OpenWings Assist. This policy explains what we collect, why, who sees it, and what you can do about it. We handle your information in accordance with the Privacy Act 2020 and its information privacy principles.

The agency responsible for your information is JTR Global OpenWings Limited, Auckland, New Zealand. Our contact details are in Section 14.

2. What we collect, and why (collection notice)

We collect personal information directly from you — through our website forms, your account, email, phone calls and messages with your assistant — and occasionally from a third party you have asked us to deal with on your behalf, such as a landlord, employer or education provider.

• Name, email, phone number, address — to identify you, hold your account, contact you, and complete forms in your name.
• Your visa type or status, and whether you are already in New Zealand or arriving — to understand what practical help you need and which services and providers are relevant to you.
• Arrival date, the kind of work you are looking for, your accommodation needs — to carry out the searches and applications you have asked us to make.
• Documents you send us — CV, references, passport or visa copies, proof of address, bank or budget details — to organise, store and submit them with applications on your instructions.
• Payment details — to take payment. Card details are handled by Stripe and never reach our systems.
• Messages between you and your assistant — to provide the service, keep a record of what you asked for, and resolve any dispute.
• Basic website usage data — to keep the site working and see which pages people use.

Is it compulsory? No. Giving us your information is voluntary. But if you don't give us the details a particular task needs — for example, the information a rental application asks for — we won't be able to complete that task for you, and we may not be able to provide the plan you have paid for. We will tell you at the time if that is the case.

We only collect what we actually need for the help you have asked for. We don't collect information by unfair or unreasonably intrusive means, and we don't ask for information about you that has nothing to do with your request.

3. Sensitive information and identity documents

Some of what you may send us is sensitive: immigration and visa status, passport and identity documents, health information, or financial hardship details. We treat this with extra care.

• We ask for identity documents only where a specific application or provider requires them, and we tell you which one.
• Access is limited to the assistant working on your request and the staff who supervise them.
• We do not disclose your visa status, health or financial information to a provider unless it is necessary for the request you have asked us to make, and we will tell you before we do.
• We delete document copies once the purpose they were collected for is finished, unless we are required to keep them (see Section 11).
• We will never record information about you on a form that we know to be false, and we will not use your documents for any purpose other than the one you gave them to us for.

4. How we use your information

• To provide the assistance you have asked for — searches, applications, forms, bookings, calls and check-ins.
• To hold and manage your account, and to give you access to member listings.
• To introduce you to a specific provider where that is what you have asked us to do.
• To take payment and keep the financial records the law requires us to keep.
• To answer your questions, and to handle a complaint or dispute.
• To keep the site secure, and to understand in aggregate how it is used.
• To meet our legal obligations.

We do not use your information for a new, unrelated purpose without asking you first, and we do not sell it, rent it out, or trade it. We do not use automated decision-making or profiling to decide what help you get.

5. Who we share it with

We disclose your personal information only where one of these applies: you have authorised it, it is directly connected to the purpose you gave it to us for, or the law requires it.

• Providers you have asked us to approach — a landlord for a rental application, an employer for a job application, an education provider for an enrolment, a Licensed Immigration Adviser or lawyer for advice you have asked us to arrange. We share only what that application needs, and we tell you what we are sending. Each provider is independently responsible for your information once they hold it, under their own privacy practices.
• Our service providers — the platforms we use to run the site, hold accounts and take payment (see Section 6). They handle your information only to provide that service to us.
• Where the law requires it — for example a lawful request from a government agency, a court order, or where disclosure is necessary to prevent a serious threat to someone's life or health.

We do not pass your details to providers for their own marketing, and we do not add you to anyone else's list.

6. Information held or sent overseas

Some of the tools we use store information outside New Zealand. Where that happens, we take reasonable steps to satisfy ourselves the information will be protected by comparable safeguards, as the Privacy Act requires.

• Netlify (United States) — hosts this website, your account and your sign-in details.
• Stripe (United States, with operations in Australia and elsewhere) — processes payments and holds your card details under its own PCI-compliant terms.
• Google (United States) — provides our email and, where used, website fonts and analytics.

If you would rather not have your information stored overseas, contact us before signing up and we will explain what we can and cannot do offline.

7. Storage, security and breaches

We take reasonable safeguards against loss, misuse and unauthorised access: access is limited to staff who need it for your request, accounts are password-protected, the site is served over HTTPS, and we don't keep documents longer than we need them. No online service can promise perfect security.

If we suffer a privacy breach that is likely to cause you serious harm, we will notify you and the Office of the Privacy Commissioner as soon as practicable, as the Privacy Act 2020 requires, and tell you what happened and what to do about it.

8. Cookies, analytics and location

Our site sets a small number of cookies. The ones we can't do without are the sign-in cookies that keep you logged in to your account — if you block cookies for this site, signing in will not work. We may also use basic analytics to count page visits in aggregate; that data is not used to identify you.

If the site ever asks for your location, that is optional and only used to sort listings by distance at the time you ask. We do not store your location history, and declining costs you nothing but the convenience. You can clear or block cookies at any time in your browser settings.

9. Marketing and unsubscribing

We will email or message you about the help you have asked for and about your membership — that is us doing the job you paid for. We will only send you promotional messages if you have agreed to receive them, and every promotional message will identify us clearly and include a working unsubscribe link, as the Unsolicited Electronic Messages Act 2007 requires. Unsubscribing takes effect promptly and does not affect the service messages you need.

10. Your rights: access and correction

Under the Privacy Act 2020 you have the right to:

• Ask for the information we hold about you, and get a copy of it.
• Ask us to correct it if it's wrong. If we don't agree to make a change, you can ask us to attach a statement of the correction you sought, and we will.
• Withdraw your consent to us contacting a provider on your behalf, or to marketing, at any time.
• Ask us to delete information we no longer need. We will, unless we are required to keep it (see Section 11).

Email us at the address in Section 14. We will confirm your identity, then respond and decide your request within 20 working days. Access and correction are free; if a charge were ever justified we would tell you before doing the work. If we have to refuse a request, we will tell you why and how to complain about it.

11. How long we keep information

• Financial records (invoices, payment records) — 7 years, as required by New Zealand tax law.
• Your account and service records — for as long as your account is open, then 2 years after it closes, in case of a later question or dispute.
• Identity and supporting documents — until the application they were collected for is finished, then deleted within 3 months unless you ask us to hold them for a further application.
• Contact form and email enquiries — 12 months if they don't lead to an engagement.
• Website analytics — aggregated, and not held against your identity.

We don't keep personal information for longer than we need it for a lawful purpose. When a period ends we securely delete or anonymise the information.

12. Children's privacy

Our service is intended for adults. If you're arranging support for a family member who is a minor, please contact us directly rather than submitting their personal information through the website, so we can agree what is appropriate to collect.

13. Changes to this policy

We may update this policy from time to time. We'll post any changes on this page with a new "last updated" date. If a change materially affects how we handle information you have already given us, we will tell you directly.

14. Contact us and how to complain

To ask about this policy, request access or correction, or make a privacy complaint, contact our privacy contact at info.jtrglobalopenwings@gmail.com or +64 27 802 6015, or write to us in Auckland, New Zealand.

You can complain to us first and we will respond, but you don't have to. You may complain directly to the New Zealand Office of the Privacy Commissioner at any time, and using our service never takes that right away.