Privacy Policy
WILSON PARKING NEW ZEALAND LIMITED
Privacy Policy
Effective from: 1 November 2023
1 Details of this Privacy Policy
1.1 This policy explains how Wilson Parking New Zealand Limited (Wilson) collects and handles your information. In this policy, each reference to Wilson (including terms such as “we”, and “us“) includes our related divisions.
1.2 This Privacy Policy applies to all personal information under the control of Wilson. It does not apply to other personal information collected or held by other entities outside of our control, or to the personal information of our employees, contractors, or directors.
1.3 When we refer to personal information in this Privacy Policy, we mean personal information as defined in the Privacy Act 2020 (Privacy Act), which is any information about an identifiable individual (Personal Information).
1.4 We will not use or share Personal Information that we collect, except as set out in this Privacy Policy (or otherwise as permitted or required by law). This Privacy Policy does not limit or exclude any of your rights under the Privacy Act.
1.5 This Privacy Policy also covers how we make the Personal Information that we hold available to you for access and/or correction by you in the event that such information is inaccurate or incomplete. Whenever we handle Personal Information, we take steps to ensure that appropriate standards of privacy practice and security are applied.
1.6 By interacting with us and/or using our services as set out in this Privacy Policy, you permit us to collect, store, use and disclose your Personal Information in accordance with this Privacy Policy.
1.7 This Privacy Policy may continue to apply to you and your information even after your account is closed, or your relationship with us has come to an end. It also applies to any of your Personal Information collected during any interaction between you and Wilson Parking, even if you are not a Wilson Parking customer.
2 How we collect your Personal Information
2.1 Wilson collects Personal Information in the course of our business. We will collect your Personal Information in a variety of ways, including directly from you, from relevant third parties (for example relevant Crown entities (such as the Waka Kotahi NZ Transport Agency), a credit reporting agency, a debt collection agency, social media outlet, or marketing company), and sometimes automatically as set out in this Privacy Policy.
2.2 Wilson may collect personal information when you, or an organisation you are associated with:
(a) open an account;
(b) enter into an agreement with us to provide or receive a service;
(c) breach an agreement you have entered into with us, including in relation to payment for our services;
(d) communicate with us by telephone, email, post, or via social media, including when you make an enquiry about opening an account or receiving a service;
(e) visit us in person at an office or other Wilson site;
(f) use one of our car park facilities;
(g) pay for parking services; and/or
(h) visit any Wilson website (“Website”).
2.3 The types of Personal Information we collect may include but are not limited to, your name, contact details (phone, email, mailing address), username, password details (if you are signed into the CPMS online portal or Parking Enforcement Services (PES) retail portal), payment details, transaction information (such as time of the transaction, the amount charged, and the location at the time of payment) and vehicle’s licence plate number.
2.4 You can choose to decline to provide your Personal Information, however, this may affect you becoming a customer, us responding to you, us providing you with a service, your use of our car park facilities, your use of our Website, or us otherwise carrying out our general business and administrative functions.
Our website
2.5 We do not collect personally identifiable information from your use of our Website. However, we collect information from your device to understand how you use our Website and improve our services to you.
2.6 This website information is collected by:
a) Using cookies;
b) Collecting website use information, including user location, and internet protocol (IP) addresses; and
c) Analytical tools that we may operate, including but not limited to Google Analytics and Firebase.
2.7 Cookies are small text files placed on your device to collect information about how you browse the Website. The data collected by them may include:
- your IP address and the device you used to access the Website;
- the search terms you used;
- the pages you accessed on our Website and the links you clicked on;
- the date and time you visited our Website;
- the referring website from which you clicked to reach our Website, if applicable;
- your operating system (e.g. Mac OS X, Windows XP);
- the type of web browsers you use (e.g. Mozilla Firefox, Google Chrome).
2.8 You can disable cookies by setting your browser to not accept them. If you disable cookies, you may not be able to use all of the features on our Website.
Payment information
2.9 When you make a payment for services through a machine that we operate (including ticketing machines and Pay & Display Machines), via the CPMS online portal, via our Website, by post or email, over the telephone, and/or via PES payment portal, the additional Personal Information we collect about you may include but is not limited to:
- a) Credit or debit card details; and
- b) Bank account details to process direct debits.
Credit or debit card details are not stored by Wilson.
2.10 When you make a payment for services by way of credit or debit card you do so either through ADVAM or WINDCAVE, which are secure PCI-compliant third-party payment providers that we engage. ADVAM and WINDCAVE have embedded fields in our digital platforms. The Personal Information that is collected about you by these third-party payment providers may include, but is not limited to:
a) Credit or debit card details; and
b) Bank account details to process direct debits.
These third parties have their own privacy policies, which you are recommended to view[ here].[1]
Online marketing / marketing communications
2.11 We may use the Personal Information we collect from you to market and advertise our services to you. We may also engage third-party digital marketing providers to market and advertise our services to you.
2.12 By creating and holding a customer account with Wilson, you agree to receive marketing communications from us, which may include digital marketing. You can unsubscribe from receiving marketing material from us at any time.
3 How we use your Personal Information
3.1 We will not use or disclose your Personal Information except in accordance with this Privacy Policy and the Privacy Act. The Personal Information we hold about you may be used for any of our business purposes and for related purposes, including, but not limited, to:
- a) confirm and verify your identity;
- b) confirm and verify the details and ownership of your vehicle;
- c) provide you with our goods or services;
- d) monitor the security of our carparking facilities;
- e) to send you a notice or reminder of a breach of our terms and conditions of parking;
- f) provide our Website to you;
- g) facilitate and administer your account with us;
- h) invoice you and/or process payments from you;
- i) communicate with you including responding to your emails, calls, requests, and/or feedback;
- j) carry out credit checks, debt recovery, and/or debt collection;
- k) improve our Website to give you a better user experience;
- l) advertise and market our goods and services to you;
- m) promote and market the goods and/or services of our related entities and/or third-party service providers to you;
- n) carry out our general business and administrative functions;
- o) protect and/or enforce our legal rights and interests, including defending any claim; and
- p) for any other reason permitted under the Privacy Act (with your consent, for a directly related purpose, or where the law permits or requires it).
How we use aggregate information and statistics
3.2 We may use aggregated information from our Website to improve the quality of our Website, services, and for statistical and market research purposes. This aggregated information is not associated with any individual person. We may use this data in aggregate form as a statistical measure, but not in a manner that would identify any individual personally.
3.3 We may also make aggregated information about our business to prospective investors, bankers, and purchasers for due diligence purposes. This information may include but is not limited to, the number of customers, geographic spread, turnover, transaction types and values. This aggregated information for due diligence purposes is not associated with any individual person. We may use this data in aggregate form for due diligence purposes, but not in a manner that would identify any individual personally.
4 Disclosure of your Personal Information
4.1 We do not sell, lend, trade, rent, exchange, or otherwise disclose your Personal Information to any third party without permission.
4.2 Personal Information may be disclosed to third parties for the purposes outlined above at clause 3, and for directly related purposes, including those required by the Privacy Act.
4.3 Some of these third parties may include, but are not limited to:
a) Entities related to Wilson, including ParkMate Limited;
b) Third-party service providers, suppliers, or contractors with whom we do ordinary business (including land owners and their agents, payment systems operators, mailing service providers, credit reporting agencies debt collection agencies, email marketing providers, digital solutions and distribution platform providers, analytics providers, and web content management providers); and
c) Third-party service providers who provide us with data storage, data visualization, software, web-hosting, and servers.
5 Storage and security of your Personal Information
5.1 We store information in physical and electronic format, at our premises and the premises of our service providers, which may include storage on the cloud. We take all reasonable steps to ensure that we keep your Personal Information secure, both in electronic and hard copy format, and to protect against loss, unauthorised access, use, modification, disclosure, or other misuse.
5.2 Any organisations that provide us with support services are required to appropriately safeguard the privacy of any Personal Information provided to them. Without limiting the foregoing, we or our service providers may store your Personal Information using third-party cloud-based services and storage subject to appropriate safeguards.
5.3 We will primarily collect and process Personal Information in New Zealand. However, because our Website, and customer portals can be accessed from outside New Zealand, Personal Information may be collected from people elsewhere in the world. The third-party service providers that we partner with may also collect, process and store Personal Information outside of New Zealand.
5.4 If at any time we need to send Personal Information outside of New Zealand to an overseas agency that may use the information for its own purposes, we will:
a) take steps to ensure that we believe on reasonable grounds that the overseas agency receiving the Personal Information is subject to privacy protections that, overall, provide comparable safeguards to those provided under the Privacy Act;
b) enter into a binding contractual agreement with the overseas agency receiving the Personal Information confirming that it will protect the Personal Information in a way that, overall, provides comparable safeguards to those provided under the Privacy Act; or
c) obtain the express authorisation of the individual concerned to disclose their Personal Information overseas after expressly informing them that the overseas agency may not be required to protect the information in a way that, overall, provides comparable safeguards to those provided under the Privacy Act.
6 Storage and security of customer account details
6.1 If you are a Wilson customer, you are responsible for your customer login details, including your account number, email, and password. You are responsible for all actions taken using your customer login, including the actions of any person you share your account number, email address and password with.
6.2 You should not share your customer login details with anyone else, except your joint account holder (if applicable), or your directors and/or employees (if you are a business).
7 Credit card security
7.1 Wilson may collect credit or debit card payment details when payment for services is made through our Website, via the CPMS online portal, via Pay & Display machines, ticket machines and/or PES payment portal, by email or post mail, or over the telephone.
7.2 Wilson takes reasonable steps to protect Personal Information against unauthorised access by using Secure Sockets (SSL) technology for payments made using credit or debit cards.
7.3 Your credit or debit card details will be encrypted, securely processed and stored by ADVAM and Windcave, our trusted PCI-compliant payment providers.
7.4 As outlined above, credit or debit card details are not stored by Wilson.
8 Retention of your Personal Information
8.1 We will retain your Personal Information for as long as it is required for the purpose/s for which it was collected, or otherwise as required by law.
8.2 In most cases, once Personal Information is no longer required, we will securely destroy it or otherwise delete all identifying details so that only anonymised data is retained.
9 Accuracy, and your right to Access and Correct
9.1 We take reasonable steps to ensure your Personal Information that we hold is accurate, up-to-date, complete, relevant, and not misleading.
9.2 You can request access to, or correction of, any Personal Information that we hold about you. If you make an access or correction request, we will ask you to verify your identity and we may ask you to specify what information you require. If your access request relates to CCTV footage or licence plate recognition images, please read our CCTV/Image Request Policy before contacting us.
9.3 If you are a Wilson Parking customer you can access and update some of the Personal Information we hold on you by logging in to your account on our Website.
9.4 Subject to certain grounds for refusal set out in the Privacy Act, if you believe that your Personal Information is not accurate, up to date, complete or relevant, or you wish to request that your Personal Information that we hold is provided to you please contact make contact with our Privacy Officer on:
Email: privacy@wilsonparking.co.nz
Mail: PO Box 8290, Newmarket, Auckland 1149
10 Mandatory reporting of notifiable privacy breaches
10.1 If your Personal Information is involved in a privacy breach which we reasonably believe is notifiable or must be reported in accordance with the Privacy Act (“Notifiable Privacy Breach”), we will inform the affected individual/s and report the Notifiable Privacy Breach to the New Zealand Office of the Privacy Commissioner, in accordance with our obligations under the Privacy Act.
11 Changes to this Privacy Policy
11.1 We may update this Privacy Policy from time to time. We will notify you of any such updates by publishing the updated Privacy Policy on our Website. The revised Privacy Policy will apply from the date that we upload it to the Website.
11.2 We encourage you to review this Privacy Policy periodically on our Website to stay informed about how we are helping to protect Personal Information. Your continued use of the Website and our goods and services constitutes your agreement to this Privacy Policy as updated.
12 Contact and complaints
12.1 Please contact us at privacy@wilsonparking.co.nz if you have any questions, concerns, or complaints in relation to this Privacy Policy or the protection of your Personal Information. Our Privacy Officer will investigate and respond to any complaints or concerns as soon as possible and in accordance with the time frames and procedures set out in the Privacy Act.
12.2 If you are not satisfied with how we have handled your complaint, you can complain to the Office of the Privacy Commissioner[2].
[1] Privacy Policy | ADVAM and Windcave | Privacy Policy Page
