How we look after your information

Update Details lets owners send changes to their details to the trusts they belong to. Arise Software runs it on behalf of those trusts. Our privacy policy covers the rest of this website.

What we collect

• The details you type: your name, date of birth, contact details and the changes you ask for.
• The documents you add, such as photo ID or bank proof.
• The date and time you sent them, and the internet address they came from, to help stop misuse.

Who sees it

Only the office staff of the trusts you tick, who sign in with a password and a code sent to their email. Each trust sees only the updates sent to it. Arise Software staff can see them only to keep the site running.

What happens to it

• The trust's office uses your details to find you in their owner register, check your identity and update their records.
• Your documents are deleted 30 days after every trust you ticked has finished your update.
• A record of what was changed, when and by whom is kept, as the trust must keep for its owner register.
• Emails from this site never contain your documents, address, bank account or IRD number. Emails to you say which trusts you sent your update to and what kind of change it was.

Where it is kept

Your details and documents are stored in Aotearoa New Zealand.

Your rights

Under the Privacy Act 2020 you can ask to see or correct the information held about you. Contact the office of the trust you sent your update to, and quote your reference number.

Trust offices asking to take part

A trust office can ask Arise to set up Update Details for its trusts on our page for trusts. We keep what that form holds: the name, role and email address of the person asking, their office's name and notification addresses, the trusts, the names and email addresses of the people who will check updates, where their GDPro database is, anything else they wrote, and the date, time, internet address and browser it came from.

• We use these details only to set up Update Details for those trusts and to contact the person who asked.
• Apart from emails to the person who asked, nothing is emailed to anyone named in the form until Arise has checked the request with the trust, using contact details we already hold.
• A request we decline is deleted after 180 days, and one our spam checks stop is deleted after 30 days. A request that leads to set-up is kept as the record of who asked for it.
• This site also keeps a log of the emails it sends about a request: the text for 90 days, and who each went to and when for longer. The copy emailed to Arise's support inbox is kept there as our correspondence.