Small plumbing requests to difficult specialised installations, our Master Plumbers will have your job completed to the highest standard.
CCC Approved Drainlayers for when you have a blocked drain, through to commercial and sub-divisional drainage, and anything in between.
Craftsman gasfitters with over 20 years experience, ensuring safe, legal installation of your gas appliances at a high standard.
The Privacy Act has been around since 1993, but to from 1 December 2020 it has been replaced with The Privacy Act 2020
To comply with the Privacy Act our organisation is required to appoint a Privacy Officer, whose role it will be to deal with the privacy issues that arise in the business.
We have listed below the important rules that must be adhered to, remembering that the Privacy Act only relates to individuals, not companies.
When you have read this notice please acknowledge that you have read and understand the contents by putting your name and signature on the reverse side.
Staff should ensure at all times that ‘company records’ are kept secure and out of sight of the general public; this includes clients invoices, statements, payment details, and credit rating information, either written or on a computer monitor.
Staff must not disclose any information relating to clients, or staff, past, present or future, including their address, personal details, their payment record.
Staff must not use access codes to gain entry into a person’s database (client, staff, friend, family or neighbour) without the permission of the individual (written or verbal).
Staff should know that their access to personal information databases is monitored and stays recorded for 5 years.
Staff should know that this information is to be made available, on request, to the individual concerned or the Privacy Commissioner. (In most cases this is the name of the ‘company’ accessing the database and the name of the ‘individual’).
Staff should know that a record of that permission must be kept for 5 years for inspection by the Privacy Commissioner.
Staff must know that they cannot list a debtor with a debt collection agency (including Debtorinfo) until the debt is 30 days past its due by date.
We are required to ensure other parties that store information, data, and personal details on our behalf, about our business and our customers, comply with the new Privacy Laws.
You must report serious privacy breaches to the management so that we can inform the Privacy Commissioner and the affected people.
If the breach has caused or may cause someone serious harm, you need to notify the Privacy Commissioner. ‘Harm’ can Include: loss, damage, or disadvantage, loss of a benefit or right emotional harm, such as significant humiliation or loss of dignity.
When there is a privacy breach, you must tell Management:
MANAGEMENT MUST CONTAIN THE BREACH Management must find out what has happened and take steps to stop the breach from getting worse.
MANAGEMENT MUST ASSESS Management must assess the seriousness of the breach. The Privacy Commission has information here to establish the seriousness of the breach; www.privacy.org.nz/notify-us
MANAGEMENT MUST NOTIFY THE COMMISSIONER If they think it is a serious privacy breach, management must tell the The Privacy Commission as soon as they can. They may also need to tell the people affected, The on line tool NotifyUs is the best way to report privacy breaches to the Commissioner: www.privacy.erg.nz/notify-us
MANAGEMENT MUST PREVENT A FUTURE BREACH When the privacy breach has been resolved and the crisis is over, management and staff must take steps to prevent future breaches.
