Privacy Policy

Skills Active Aotearoa Limited | September 2026

NZRRP Privacy Statement

1. Who we are

The New Zealand Register of Recreation Professionals (NZRRP) is operated by Skills Active Aotearoa Limited. NZRRP is a public register used to verify selected professional qualifications, registrations and currency information in the recreation sector. ActiveCV is the connected account and record-management service through which authorised users and administrators manage information shown on NZRRP.

2. Scope

This statement explains how we collect, use, disclose, retain and protect personal information in connection with NZRRP. It applies to information collected directly from you and information received from connected systems or authorised third parties. It should be read with the ActiveCV Privacy Statement and applicable registration conditions.

3. Information we share

  • Identity and contact details, such as your name, workplace and region.
  • Qualification, certification, registration, re-registration, assessment, continuing professional development, workplace-link and expiry information.
  • Information supplied by workplaces, assessors, national bodies, education providers, connected systems or public/official registers where authorised and relevant.
  • Communications, support requests, audit records and technical information needed to operate, secure and improve the service.

4. Why we use personal information

  • To publish the approved subset of information on NZRRP so members of the public and relevant organisations can verify current status.
  • To process registration and re-registration activity, resolve errors and respond to enquiries.
  • To carry out quality assurance, audit, fraud prevention, security monitoring and legal or regulatory functions.
  • To improve the accessibility, reliability and usefulness of NZRRP and connected services.

5. Information shown publicly

NZRRP displays only the fields approved for public verification. Before publication, the website and account journey must clearly identify each public field and provide an appropriate choice or notice. Proposed public fields are: Name, supplied photo (when authorised), Workplace, Qualification, date achieved and expiry of registration period and Region. Public availability does not authorise unrelated reuse, bulk extraction, profiling, marketing or republication.

6. Collection from other sources

We may receive personal information from ActiveCV, Te Mahi Ako Enrolment information, your workplace, an assessor, a national body, an education provider, NZQA or another authorised source. Where Privacy Act 2020 information privacy principle 3A applies, we will take reasonable steps to notify you of the collection and the matters required by law unless an exception applies. The final notice must be aligned with each actual data flow.

7. Sharing and overseas handling

We may share personal information with service providers acting for us, authorised administrators, relevant registration or quality-assurance bodies, and regulators or law-enforcement agencies where permitted or required by law. We will not sell personal information. If information is disclosed to an overseas person or organisation, we will comply with information privacy principle 12, including checking for comparable safeguards or obtaining informed authorisation where required.

8. Cookies and analytics

NZRRP uses essential cookies necessary for operation and analytics.

9. Security and privacy breaches

We use reasonable administrative, technical and physical safeguards appropriate to the information and risks involved. No internet service can guarantee absolute security. We assess suspected privacy breaches and, where a breach has caused or is likely to cause serious harm, notify the Privacy Commissioner and affected people as soon as practicable as required by the Privacy Act 2020.

10. Retention

Active CV and registers that provide information to NZRRP to display personal information only for as long as reasonably required for the purposes for which it was collected, to maintain appropriate registration and audit records, and to meet legal obligations. Information on those registers is subject to their retention policy.

11. Your rights and choices

  • Request access to personal information we hold about you and ask for correction.
  • Update eligible information and privacy choices through ActiveCV.
  • Ask us to review the accuracy, publication or continued visibility of information on NZRRP. Removal from public view may not require deletion of records we must lawfully retain.
  • Withdraw consent where processing depends on consent, without affecting earlier lawful activity.
  • Make a privacy complaint to us and, if unresolved, contact the Office of the Privacy Commissioner.

12. Contact

Privacy Officer, Skills Active Aotearoa Limited
Email: privacy@temahiako.org.nz
Postal address: PO Box 2183, Wellington 6140, New Zealand
Website contact page: https://temahiako.org.nz/about-us/contact-us

13. Changes

We may update this statement when our services, data practices or legal obligations change. We will publish the effective date and give additional notice where a change is material or affects existing choices.