Privacy Policy

At Drake, your privacy is important to us.

We respect your personal information, and your privacy is important to us. This Privacy Policy explains how we collect personal information and how we maintain, handle, use, store and disclose the personal information we hold. This Privacy Policy covers Drake New Zealand Ltd and all its related companies (“Drake”, “us”, “we”).

Drake is bound by the Information Privacy Principles (“IPPs”) under the Privacy Act 2020 (“the Act”), as amended from time to time. We give effect to these laws by adhering to the IPPs in our dealings with your personal information.

This Privacy Policy may be amended from time to time as required by law and as such we encourage you to regularly check our privacy policy so that you are aware of any updates and changes which have been made.

All information held by Drake of the types described below will be governed by this Privacy Policy.

At Drake, we are committed to protecting the privacy of the information that you provide us with, and we aim to be open and transparent about how we manage your personal information.

What types of personal information may we collect and hold?

Personal information

Under the Act, “personal information” means information about an identifiable individual. Examples of personal information include, without limitation, information regarding your contact details, work experience, qualifications, aptitude test results, opinions about your work performance (for example your references), incidents at the workplace, and other information obtained or received by us in connection with your possible and actual work placements.

Sensitive information

Some personal information is particularly sensitive and warrants extra care in its collection and handling. This includes information about your health or disability, racial or ethnic origin, political opinions, membership of a political association, religious or philosophical beliefs, sexual preferences or practices, criminal record, or membership of a trade union. As required under privacy laws, sensitive information can, in most cases, only be disclosed with your express, informed consent.

Health information

Health information is a category of sensitive personal information. It includes information about your health or disability (at any time), your expressed wishes about future health services, or health services provided or to be provided to you, and includes personal information collected to provide, or in the course of providing, a health service. Drake handles health information in accordance with the Health Information Privacy Code 2020 and the Act. In most cases, health information can only be disclosed with your express, informed consent.

How does Drake collect your personal information?

Drake provides different kinds of services, and we will only ask you to provide the necessary personal information that is relevant to the particular service that you have requested Drake to provide. Drake may collect some or all of the following information:

• ID information such as your name, postal address, email, telephone numbers and date of birth.

• Other contact details or information which is publicly available (for example through social media or the internet).

• Residency or citizenship status (such as, but not limited to, whether you are on a visa or are a citizen or resident of New Zealand, to ensure that you are able to work legally in New Zealand).

• Qualifications, certificates, accreditation, work history, resume and information otherwise provided in our application forms (this includes any forms that you complete for Drake or any other information you provide in connection with your application).

• References Drake receives about you.

• Results of inquiries that we might make of your former employers, work colleagues, professional associations, registration bodies or other entities which have worked with you.

• Results of any competency, medical test, background checks, health questionnaires, psychological tests or personality and behavioural profiles.

• Salary/benefit information, bank account details, IRD number, KiwiSaver fund and any other information we require to ensure that you are paid and that Drake complies with its legal obligations where Drake is your employer, or else your employer outsources their payroll functions to Drake.

• Drivers licence number and other licences as required (for example if you hold a forklift licence).

• Information about your hobbies and interests.

• Details of any dealings you have with us and/or our clients.

• Information we receive about any insurance investigations, claims, litigation, registration or professional disciplinary matter, criminal matter, inquest or inquiry in which you were involved.

• Information which we receive about a workplace accident in which you were involved.

• Any other additional information about you which you provide to us (including through our website).

If you consent, Drake may also collect sensitive information about you, including, without limitation, your membership in a trade union, health information, and information from police checks. It is entirely up to you to choose the information that you provide to Drake.

If you choose not to provide Drake with particular information that has been requested:

• Drake may not be best placed to provide the service that you require.

• Drake may be limited in our ability to locate suitable work for you.

• Drake may be limited in our ability to place you in work.

Purposes for which Drake may collect and use your personal information

Drake uses highly skilled consultants to provide permanent and temporary recruitment services that respond to the needs of both employers and applicants by helping to place the right person in the right position, as well as supplying temporary staffing (labour hire) to a wide range of businesses in many industries.

Drake also provides services such as training, development and e-learning, assessment and certification, employee assistance programmes (“EAP”), career and organisational development, business technologies, outsourcing and outplacement services. We use the information we collect to provide these services to clients, job seekers and contractors and to provide training programmes. In our permanent and temporary recruitment and labour hire businesses, the personal information that we collect from you is used to provide recruitment and contracting services, for example, by matching applicants or contractors to clients’ needs.

In our non-recruitment businesses, your personal information is used to enable Drake to deliver the product or services that you require.

Your personal information and sensitive information may also be used in connection with the following purposes:

• For services which you have requested Drake to provide to you.

• Your actual or possible work placement.

• Career guidance or management.

• Your performance appraisals.

• Our assessment of your ongoing performance and prospects.

• Any test or assessment (including medical tests and assessments) that you might be required to undergo.

• Our identification of your training needs.

• Informing you of possible work opportunities, relevant candidates, or other events such as training or information sessions by direct mail/email/SMS.

• Any workplace rehabilitation.

• Our management and resolution of any complaint, inquiry or investigation in which you are involved.

• Credit checks on potential or existing clients.

• Any insurance claim or proposal that requires disclosure of your personal or sensitive information.

• Undertaking criminal reference checks.

• For research, development, business systems and infrastructure testing, and other business purposes to assist us in providing our services to you.

• Our direct marketing to you about products and services, advising you of industry news and events, promotions and competitions, reports and other information. Where we do send you marketing material, you will be able to unsubscribe from such communication.

• Internal training to improve the delivery of our services.

Where we collect information from

Drake collects information in a number of ways, including:

• Directly from you, when you provide information by phone, email or in documents such as an application form or resume.

• Directly from you through our website, when you fill out a form, write a comment, make an enquiry or complaint, fill in an order form or subscribe to our publications, services or marketing and events.

• By contacting the referees that you have nominated.

• From clients to whom services are supplied as part of our businesses.

• By searching publicly available information (for example, the internet).

• Information collected from visitors to our website (including via mobile access). When you visit our website or access our online services, Drake may collect your Internet Protocol (IP) address. An IP address is a numerical label assigned to each device connected to a computer network and is used to identify your device for the purposes of communication and security. The collection of IP addresses assists us in maintaining the security and integrity of our systems, analysing website traffic, diagnosing technical issues, and improving user experience. In some cases, IP addresses may also be used for fraud prevention and to comply with applicable laws. IP addresses are generally not linked to personally identifiable information. However, in limited circumstances, such as when required by law or when investigating suspected misuse or unauthorised activity, we may be able to associate an IP address with other information we hold about you. Drake may also collect information about our website users collectively, which may include data about your location (i.e. city and country), internet browser type, language, operating system, service provider, screen resolution and whether you are visiting for the first time or revisiting our website.

Disclosures

We may disclose personal information to our clients for the purpose of recruiting you to specific positions, or for supplying your services to clients as a labour hire worker. We may also disclose your personal information to the following parties outside of Drake:

• Drake’s agents, contractors (e.g. people who are authorised to administer our computer systems or to other recruitment suppliers, where we are working on a joint recruitment project), professional advisers, consultants and representatives.

• You and your referees in making enquiries.

• Your financial institution and others relating to your remuneration and benefits.

• Government bodies or others as required or authorised by law.

• Drake’s related companies and any companies involved in a corporate or business restructure by Drake.

• Drake’s clients, including potential and actual employers.

• Related Drake entities and potential employers who may be located in New Zealand or overseas, where such disclosure is necessary for the provision of services and appropriate privacy safeguards are in place in accordance with the Act.

• Referees.

• External providers of online services such as training and inductions.

• Our insurers.

• Professional associations or registration bodies that have a legitimate interest in the disclosure of your personal information.

• Accident Compensation Corporation (ACC) or other workers’ compensation bodies.

• Any person with a lawful entitlement to obtain the information.

Management of personal information held by Drake

Drake’s staff members have signed confidentiality undertakings and have been provided with privacy training to ensure that they understand Drake’s responsibilities under the Act and their obligation to maintain the confidentiality of your information and respect your rights under the Act. Drake treats all breaches of privacy very seriously, and any unauthorised use or disclosure of your personal information by our employees may result in disciplinary action.

Drake has appointed a Privacy Officer to ensure that Drake’s management of your personal information is in accordance with this Privacy Policy and all relevant privacy legislation.

Privacy breaches

The Privacy Act 2020 requires Drake to notify the Privacy Commissioner and affected individuals where a privacy breach has caused, or is likely to cause, serious harm. Drake takes privacy breaches seriously and has processes in place to assess and respond to privacy incidents and, where required, notify affected individuals and the Privacy Commissioner in accordance with the Act.

If you believe your personal information held by Drake has been subject to a privacy breach, please contact our Privacy Officer using the details at the end of this policy.

How does Drake store and protect your personal information?

The security of your information is extremely important to us. We make all reasonable efforts to ensure that information is stored securely both in electronic and physical form. To ensure that your personal information is secure, Drake holds your personal information in a combination of secure computer storage facilities, paper-based files and other records. Drake takes the steps which are reasonably necessary to protect your personal information we hold about you from misuse, interference, loss, unauthorised access, modification or disclosure.

We may need to maintain records for a significant period of time due to statutory requirements or as otherwise required. However, when we consider personal information is no longer required, we take reasonable steps to dispose of this information in a secure manner or to de-identify the records.

Correcting or updating information held by Drake

Drake takes reasonable steps to ensure that all information we collect, use or disclose about you is accurate, complete and up to date. If you believe that there is an error or information is missing, please notify Drake and we will work with you to correct or add the information as soon as possible.

Access to your personal information

You may request access to the personal information Drake holds about you at any time (subject to some exceptions provided by law). Under the Act, Drake is required to respond to your request within 20 working days of receiving it.

If you would like to know what information we hold about you, please contact us. For security reasons, you may be required to put your request in writing.

Enquiries and complaints

You can make enquiries, requests to access, delete or correct your information, or if you believe that our organisation has breached your privacy rights in any way, or you would like to discuss any issues about our Privacy Policy, please contact our Privacy Officer in writing:

Privacy Officer

Drake New Zealand Ltd

Ground Floor, 45 O’Rorke Road, Penrose, Auckland 1061

Email: [email protected]

Phone: 0800 840 940

We will endeavour to satisfy any questions or concerns that you have. For more information about privacy in New Zealand, you can visit the Office of the Privacy Commissioner’s website at www.privacy.org.nz.