PHI⑊PIN · Data Compliance
This is our Data Compliance statement — but it's a work in progress. The full and final terms are still under review, so if anything here is unclear or you have a specific question, email john@philpin.com for clarity.
We take the responsible collection, use and protection of personal and business information seriously. This page explains the principles we follow when handling data through this website and the services provided through it.
We aim to collect only the information reasonably required to provide a service, respond to an enquiry or operate the website.
We handle personal information in accordance with applicable privacy and data protection requirements and apply recognised principles of transparency, purpose limitation, data minimisation, accuracy, security and appropriate retention.
Depending on how you use the website, we may process:
We don't intentionally collect sensitive personal information through general website forms unless it is specifically required for a stated purpose.
We process information where it is reasonably necessary to:
Where applicable law requires consent for a particular activity, we will seek that consent.
We aim to collect the minimum amount of personal information necessary for the intended purpose.
Information collected for one purpose won't ordinarily be used for an unrelated purpose without an appropriate legal basis or, where required, further consent.
We take reasonable steps to ensure personal information remains accurate and relevant.
Individuals may contact us to request correction of inaccurate or incomplete personal information.
We use reasonable technical and organisational safeguards designed to protect information from unauthorised access, disclosure, alteration, misuse or loss.
Access to personal information should be limited to people and service providers who reasonably require it to perform their work.
No online system can guarantee complete security, but we review the measures appropriate to the nature of the information we process and the services we provide.
Personal information is retained only for as long as reasonably necessary for the purpose for which it was collected, legitimate business requirements and applicable legal or regulatory obligations.
Information that is no longer required may be securely deleted or anonymised.
We may use third-party service providers to support activities such as:
Where appropriate, we expect service providers processing personal information on our behalf to maintain suitable safeguards and use that information only for authorised purposes.
Analytics Services: john.philpin.com uses Tinylytics for analytics. wiki.philpin.com uses Google Analytics. Both services collect and process data about visitor behaviour and site usage in accordance with their respective privacy policies. Users may opt out of these services through browser settings or the service provider's opt-out mechanisms. philpin.com does not use third-party analytics services.
Some technology and service providers may process information outside the country in which it was originally collected.
Where applicable data protection law imposes requirements on international transfers, we take reasonable steps to use appropriate safeguards.
Depending on the applicable law and your location, you may have rights relating to your personal information, including rights to:
Requests can be made using the contact details provided on this website.
If we become aware of a personal data breach, we will assess its nature, scope and potential impact.
Where applicable law requires notification to affected individuals, regulators or other authorities, we will take reasonable steps to make those notifications within the required period.
Our approach is intended to support compliance with applicable privacy and data protection legislation in the jurisdictions relevant to our operations and users.
Depending on the circumstances, this may include requirements arising under the New Zealand Privacy Act 2020, the UK General Data Protection Regulation and Data Protection Act 2018, the EU General Data Protection Regulation, and applicable United States federal or state privacy legislation.
The application of particular laws depends on factors including where an organisation operates, where individuals are located and the nature of the data processing involved.
We periodically review our data practices, technology providers and security arrangements to ensure they remain appropriate for the information we process.
Where our services or processing activities change materially, we may update our policies and procedures accordingly.
This Data Compliance statement should be read alongside our Privacy Policy.
The Privacy Policy explains how personal information is collected and used. This statement describes the broader principles and controls we apply to the management of that information.
Questions about our data practices, compliance arrangements or the exercise of data rights can be submitted using the contact details provided on this website.