The Malaghan Institute is committed to protecting and maintaining the privacy, accuracy, and security of your personal information in accordance with the New Zealand Privacy Act 2020 and the Privacy Amendment Act 2025.
This privacy statement sets out how we collect, use, disclose and hold personal information. The Malaghan Institute may, without notice, amend or modify this privacy statement by uploading the amended statement to our website.
1. Information collection
The Malaghan Institute collects your personal information only in accordance with the New Zealand Privacy Act 2020 and the Privacy Amendment Act 2025.
Where possible, we collect your personal information directly from you, for example, when you submit a form on our website, or speak with us directly.
At times we may collect your personal information from a source other than you. This is called indirect collection and might happen through external providers, referral partners, or event platforms where you have expressed interest in supporting our work.
When we collect your information indirectly, we will take reasonable steps to let you know as soon as practicable. We will tell you:
- that your information has been collected and where it came from
- why we collected it and what we intend to use it for
- who will hold the information and how to contact us
- your right to access the correct information we hold about you
There are limited circumstances where we may not be required to notify you – for example, where you have already been made aware, or where notification is not reasonably practicable. We will record our reasons in those cases.
We will not collect information about you unless you have consented, or the collection is required or authorised by law.
The kinds of personal information we collect from you, and the use of that information depends upon your dealing with us. Generally, the information we collect is:
- Name
- Email address
- Home, business and/or postal address
- Date of birth
- Payment information (where relevant, for donations)
- Communication preferences
- Educational history and qualifications (for job applicants or volunteers)
2. Use of information
We will use your personal information for the purposes for which we collected it, for other related purposes that you would reasonably expect, and as otherwise permitted or required by law. By providing us with your personal information, or by us collecting it from another source with your knowledge, you consent to us holding, using, and disclosing your personal information for the following purposes:
- To offer the most relevant information and updates related to the work we do at Malaghan
- To communicate with you about fundraising, donations, campaigns, causes and events
- To obtain your feedback on our work
- To process any donations you make
- For any other purposes for which you have given permission
Your information will not be used for any purpose to which you would not reasonably expect us to use the information provided.
3. Opting out of communications
Where we use your personal information to send you marketing and promotional information by post, email or telephone, we will provide you with an opportunity to opt-out of receiving such information. By electing not to opt-out, we will assume we have your implied consent to receive similar information and communications in the future.
If you do not wish to receive direct marketing communications from us, please contact us on the details provided at the end of this statement.
4. Storage and security of personal information
The Malaghan Institute takes all reasonable steps to keep personal information accurate and up to date. Ensuring the secure storage of your personal information is very important to us.
We store your personal information in electronic records, and take reasonable, industry standard steps to protect personal information from loss, misuse or unauthorised access, disclosure, or modification. Information is destroyed or permanently de-identified when it is no longer required for any purpose for which it was collected, or when we are no longer required by law to retain it. Employees, volunteers, and data processors working on behalf of the Malaghan Institute are obliged to respect the confidentially of any personal information we hold.
The handling and processing of financial information is managed via highly secure PCI compliant software and payment gateways. Your financial information is encrypted on our servers and no staff can access card details once they have been entered into the system.
5. Disclosure of your information
Without your specific consent on a case-by-case basis we will not sell, rent or otherwise share your personal information with anyone else, in exception of the below statement.
To reduce operating and administrative costs, we may securely transfer data to third-party suppliers and organisations to provide services such as phone calls, printed materials or online communication. These organisations must also comply with, and not breach, the New Zealand Privacy Act of 2020 and are bound by tight agreements which protect your privacy.
6. Website and Cookies
When you access our website we may place small data files (or cookies) on your computer or other device to collect information about which pages you view and how you reach them, what you do when you visit a page, the length of time you remain on the page, and how we perform in providing content to you.
A cookie does not identify individuals personally, but it does identify computers. You can set your browser to notify you when you receive a cookie, and this will provide you with an opportunity to either accept or reject it in each instance.
We may gather your IP address as part of our business activities and to assist with any operational difficulties or support issues with our services. This information does not identify you personally.
7. Notification of changes
If we make any material changes in our privacy practices, we will send an email notification to everyone who has opted to receive communications from us. If the change to this statement would change how your personally identifiable information is treated, then the change will not apply to you without your affirmative consent.
This statement was updated in May 2026 to reflect the Privacy Amendment Act 2025, including the addition of new Information Privacy Principle 3A (IPP3A) relating to indirect collection of personal information.
8. Your right to access and update your information
In accordance with the New Zealand Privacy Act of 2020 you have the right to make a request to access your personal information held by Malaghan Institute. This request is to be made in writing to the address provided at the end of the document. We will require you to provide us with sufficient identification before providing access to your personal information. If we are required or authorised by law to do so, we may refuse access. If you believe the personal information, we hold about you is inaccurate, incomplete or out of date, please contact us at the details shown below. If you satisfy us that any personal information, we hold about you is not accurate, complete or up-to-date, we will amend our records accordingly.
9. Contact information
If you have any questions, concerns or complaints about our management of your personal information, please contact us:
Phone: (04) 499 6914
Email: [email protected]
By post:
Malaghan Institute of Medical Research
PO Box 7060
Newtown
Wellington 6242
We will confirm receipt of your query and respond to you within a reasonable time.
Last updated May 2026