WILSON PARKING NEW ZEALAND LIMITED
Effective from: 1 November 2023
1.1 This policy explains how Wilson Parking New Zealand Limited (Wilson) collects and handles your information. In this policy, each reference to Wilson (including terms such as “we”, and “us“) includes our related divisions.
2 How we collect your Personal Information
2.2 Wilson may collect personal information when you, or an organisation you are associated with:
(a) open an account;
(b) enter into an agreement with us to provide or receive a service;
(c) breach an agreement you have entered into with us, including in relation to payment for our services;
(d) communicate with us by telephone, email, post, or via social media, including when you make an enquiry about opening an account or receiving a service;
(e) visit us in person at an office or other Wilson site;
(f) use one of our car park facilities;
(g) pay for parking services; and/or
(h) visit any Wilson website (“Website”).
2.3 The types of Personal Information we collect may include but are not limited to, your name, contact details (phone, email, mailing address), username, password details (if you are signed into the CPMS online portal or Parking Enforcement Services (PES) retail portal), payment details, transaction information (such as time of the transaction, the amount charged, and the location at the time of payment) and vehicle’s licence plate number.
2.4 You can choose to decline to provide your Personal Information, however, this may affect you becoming a customer, us responding to you, us providing you with a service, your use of our car park facilities, your use of our Website, or us otherwise carrying out our general business and administrative functions.
2.5 We do not collect personally identifiable information from your use of our Website. However, we collect information from your device to understand how you use our Website and improve our services to you.
2.6 This website information is collected by:
a) Using cookies;
b) Collecting website use information, including user location, and internet protocol (IP) addresses; and
c) Analytical tools that we may operate, including but not limited to Google Analytics and Firebase.
2.7 Cookies are small text files placed on your device to collect information about how you browse the Website. The data collected by them may include:
- your IP address and the device you used to access the Website;
- the search terms you used;
- the pages you accessed on our Website and the links you clicked on;
- the date and time you visited our Website;
- the referring website from which you clicked to reach our Website, if applicable;
- your operating system (e.g. Mac OS X, Windows XP);
- the type of web browsers you use (e.g. Mozilla Firefox, Google Chrome).
2.8 You can disable cookies by setting your browser to not accept them. If you disable cookies, you may not be able to use all of the features on our Website.
2.9 When you make a payment for services through a machine that we operate (including ticketing machines and Pay & Display Machines), via the CPMS online portal, via our Website, by post or email, over the telephone, and/or via PES payment portal, the additional Personal Information we collect about you may include but is not limited to:
- a) Credit or debit card details; and
- b) Bank account details to process direct debits.
Credit or debit card details are not stored by Wilson.
2.10 When you make a payment for services by way of credit or debit card you do so either through ADVAM or WINDCAVE, which are secure PCI-compliant third-party payment providers that we engage. ADVAM and WINDCAVE have embedded fields in our digital platforms. The Personal Information that is collected about you by these third-party payment providers may include, but is not limited to:
a) Credit or debit card details; and
b) Bank account details to process direct debits.
These third parties have their own privacy policies, which you are recommended to view[ here].
Online marketing / marketing communications
2.11 We may use the Personal Information we collect from you to market and advertise our services to you. We may also engage third-party digital marketing providers to market and advertise our services to you.
2.12 By creating and holding a customer account with Wilson, you agree to receive marketing communications from us, which may include digital marketing. You can unsubscribe from receiving marketing material from us at any time.
3 How we use your Personal Information
- a) confirm and verify your identity;
- b) confirm and verify the details and ownership of your vehicle;
- c) provide you with our goods or services;
- d) monitor the security of our carparking facilities;
- e) to send you a notice or reminder of a breach of our terms and conditions of parking;
- f) provide our Website to you;
- g) facilitate and administer your account with us;
- h) invoice you and/or process payments from you;
- i) communicate with you including responding to your emails, calls, requests, and/or feedback;
- j) carry out credit checks, debt recovery, and/or debt collection;
- k) improve our Website to give you a better user experience;
- l) advertise and market our goods and services to you;
- m) promote and market the goods and/or services of our related entities and/or third-party service providers to you;
- n) carry out our general business and administrative functions;
- o) protect and/or enforce our legal rights and interests, including defending any claim; and
- p) for any other reason permitted under the Privacy Act (with your consent, for a directly related purpose, or where the law permits or requires it).
How we use aggregate information and statistics
3.2 We may use aggregated information from our Website to improve the quality of our Website, services, and for statistical and market research purposes. This aggregated information is not associated with any individual person. We may use this data in aggregate form as a statistical measure, but not in a manner that would identify any individual personally.
3.3 We may also make aggregated information about our business to prospective investors, bankers, and purchasers for due diligence purposes. This information may include but is not limited to, the number of customers, geographic spread, turnover, transaction types and values. This aggregated information for due diligence purposes is not associated with any individual person. We may use this data in aggregate form for due diligence purposes, but not in a manner that would identify any individual personally.
4 Disclosure of your Personal Information
4.1 We do not sell, lend, trade, rent, exchange, or otherwise disclose your Personal Information to any third party without permission.
4.2 Personal Information may be disclosed to third parties for the purposes outlined above at clause 3, and for directly related purposes, including those required by the Privacy Act.
4.3 Some of these third parties may include, but are not limited to:
a) Entities related to Wilson, including ParkMate Limited;
b) Third-party service providers, suppliers, or contractors with whom we do ordinary business (including land owners and their agents, payment systems operators, mailing service providers, credit reporting agencies debt collection agencies, email marketing providers, digital solutions and distribution platform providers, analytics providers, and web content management providers); and
c) Third-party service providers who provide us with data storage, data visualization, software, web-hosting, and servers.
5 Storage and security of your Personal Information
5.1 We store information in physical and electronic format, at our premises and the premises of our service providers, which may include storage on the cloud. We take all reasonable steps to ensure that we keep your Personal Information secure, both in electronic and hard copy format, and to protect against loss, unauthorised access, use, modification, disclosure, or other misuse.
5.2 Any organisations that provide us with support services are required to appropriately safeguard the privacy of any Personal Information provided to them. Without limiting the foregoing, we or our service providers may store your Personal Information using third-party cloud-based services and storage subject to appropriate safeguards.
5.3 We will primarily collect and process Personal Information in New Zealand. However, because our Website, and customer portals can be accessed from outside New Zealand, Personal Information may be collected from people elsewhere in the world. The third-party service providers that we partner with may also collect, process and store Personal Information outside of New Zealand.
5.4 If at any time we need to send Personal Information outside of New Zealand to an overseas agency that may use the information for its own purposes, we will:
a) take steps to ensure that we believe on reasonable grounds that the overseas agency receiving the Personal Information is subject to privacy protections that, overall, provide comparable safeguards to those provided under the Privacy Act;
b) enter into a binding contractual agreement with the overseas agency receiving the Personal Information confirming that it will protect the Personal Information in a way that, overall, provides comparable safeguards to those provided under the Privacy Act; or
c) obtain the express authorisation of the individual concerned to disclose their Personal Information overseas after expressly informing them that the overseas agency may not be required to protect the information in a way that, overall, provides comparable safeguards to those provided under the Privacy Act.
6 Storage and security of customer account details
6.1 If you are a Wilson customer, you are responsible for your customer login details, including your account number, email, and password. You are responsible for all actions taken using your customer login, including the actions of any person you share your account number, email address and password with.
6.2 You should not share your customer login details with anyone else, except your joint account holder (if applicable), or your directors and/or employees (if you are a business).
7 Credit card security
7.1 Wilson may collect credit or debit card payment details when payment for services is made through our Website, via the CPMS online portal, via Pay & Display machines, ticket machines and/or PES payment portal, by email or post mail, or over the telephone.
7.2 Wilson takes reasonable steps to protect Personal Information against unauthorised access by using Secure Sockets (SSL) technology for payments made using credit or debit cards.
7.3 Your credit or debit card details will be encrypted, securely processed and stored by ADVAM and Windcave, our trusted PCI-compliant payment providers.
7.4 As outlined above, credit or debit card details are not stored by Wilson.
8 Retention of your Personal Information
8.1 We will retain your Personal Information for as long as it is required for the purpose/s for which it was collected, or otherwise as required by law.
8.2 In most cases, once Personal Information is no longer required, we will securely destroy it or otherwise delete all identifying details so that only anonymised data is retained.
9 Accuracy, and your right to Access and Correct
9.1 We take reasonable steps to ensure your Personal Information that we hold is accurate, up-to-date, complete, relevant, and not misleading.
9.2 You can request access to, or correction of, any Personal Information that we hold about you. If you make an access or correction request, we will ask you to verify your identity and we may ask you to specify what information you require. If your access request relates to CCTV footage or licence plate recognition images, please read our CCTV/Image Request Policy before contacting us.
9.3 If you are a Wilson Parking customer you can access and update some of the Personal Information we hold on you by logging in to your account on our Website.
9.4 Subject to certain grounds for refusal set out in the Privacy Act, if you believe that your Personal Information is not accurate, up to date, complete or relevant, or you wish to request that your Personal Information that we hold is provided to you please contact make contact with our Privacy Officer on:
Mail: PO Box 8290, Newmarket, Auckland 1149
10 Mandatory reporting of notifiable privacy breaches
10.1 If your Personal Information is involved in a privacy breach which we reasonably believe is notifiable or must be reported in accordance with the Privacy Act (“Notifiable Privacy Breach”), we will inform the affected individual/s and report the Notifiable Privacy Breach to the New Zealand Office of the Privacy Commissioner, in accordance with our obligations under the Privacy Act.
12 Contact and complaints
12.2 If you are not satisfied with how we have handled your complaint, you can complain to the Office of the Privacy Commissioner.