1. Our Commitment

We recognise that as Māori our data is connected to whakapapa, identity, and collective wellbeing. We are guided by Te Mana Raraunga Māori Data Sovereignty principles, the Privacy Act 2020 (NZ), and ethical Kaupapa Māori research standards.

2. What Information We Collect

We may collect: name, email address, billing information, course engagement data, survey responses, device/browser information, and voluntary demographic data. If you consent separately, we may collect research-related information and feedback on language use experiences. We do not collect sensitive personal health or financial data beyond payment processing.

3. How We Use Your Information

We use information to deliver courses, provide access to materials, communicate about enrolment and updates, improve course quality, monitor engagement, and conduct ethical research (where consent is provided). We do not sell your data.

4. Māori Data Sovereignty Statement

Where learner data relates to Māori language use, identity, or whānau experiences:

It will be treated with respect
It will not be used in ways that harm Māori interests
Any research use will be anonymised unless explicit consent is given
Aggregated reporting will avoid identifying individuals or small communities

Data governance remains under Mauri Oho Limited.

5. Payment Processing

Payments are processed through secure third-party providers such as Stripe and Thinkific, which comply with PCI-DSS standards. We do not store credit card numbers.

6. Third-Party Services

We use platforms including Thinkific (course hosting), email service providers, payment gateways, and analytics tools. These providers store data outside of Aotearoa New Zealand. By enrolling, you acknowledge that your data may be processed in other jurisdictions under appropriate safeguards.

7. Cookies & Analytics

We use cookies to maintain login sessions, improve user experience, and monitor engagement. You may disable cookies in your browser settings.

8. Your Rights (Privacy Act 2020)

You have the right to access your personal information, request correction, withdraw marketing consent, and request deletion (subject to legal retention obligations). To exercise these rights, contact: [email protected]

9. Data Retention

We retain personal data for the duration of course access, as required for tax and legal obligations, and for research only where consent has been given. When no longer required, data is securely deleted.

10. Changes to This Policy

We may update this policy periodically. Continued use of the platform constitutes acceptance of the updated version.