Legal
Privacy Policy
Last updated: August 2026
1. Introduction
This Privacy Policy explains how Kiwi Nurse Academy ("we", "our", "us") collects, uses, and protects your personal information when you use our website:
https://kiwinurseacademy.co.nz
and any services provided through it.
We are committed to protecting your privacy in accordance with the New Zealand Privacy Act 2020.
This policy tells you how we handle your information. Where consent is required, we will ask for it at the relevant point.
2. Definitions
- Account - A user account created to access our services
- Personal Data - Information that identifies you (e.g. name, email)
- Usage Data - Data collected automatically (e.g. IP address, browser type)
- Service - Our website and all services provided through it
- Service Providers - Third-party providers that help us operate our services
- You - The user of our website or services
3. Information We Collect
3.1 Personal Information
We may collect:
- Full name
- Email address
- Account login details
- Payment-related information (processed via third parties)
We do not store full payment card details.
3.2 Usage Data
We automatically collect:
- IP address
- Browser type and version
- Device information
- Pages visited and time spent
- Interaction with our website
3.3 Cookies and Tracking Technologies
We use cookies and similar technologies to:
- Enable core functionality
- Improve user experience
- Analyse usage and performance
Types of cookies we use:
- Essential cookies - required for login and core features
- Analytics cookies - to understand user behaviour
- Functionality cookies - remember preferences
You can disable cookies in your browser settings, but some features may not work properly.
3.4 Third-Party Login (if applicable)
If you sign in using third-party services (e.g. Google), we may receive:
- Your name
- Email address
This depends on your privacy settings with those platforms.
3.5 Visa Support Information
If you use the optional visa support service, we may collect:
- Your visa support enquiry and contact preferences
- Relevant profile information you provide through your account
- Visa application documents and information you upload to your private case workspace
- Case messages, document statuses, application progress, dates, and audit history
- AI-generated case summaries requested by an authorised adviser or administrator
Do not include passports, financial records, medical information, or immigration documents in the initial enquiry form. Upload requested documents only through the private case workspace.
4. How We Use Your Information
We use your data to:
- Provide and maintain our services
- Create and manage your account
- Deliver purchased courses and content
- Process payments
- Communicate with you (support, updates)
- Improve our platform and user experience
- Monitor usage and prevent misuse
- Send relevant updates or offers (you can opt out)
- Create and administer a visa support case after you submit an enquiry
- Enable the assigned licensed immigration adviser to assess your enquiry, request documents, provide updates, and deliver any service you choose to engage
- Generate a structured case summary for an authorised adviser when they request one
5. Sharing Your Information
We may share your data with:
- Service Providers
- Payment processors (e.g. Stripe)
- Hosting providers (e.g. Vercel, cloud platforms)
- Analytics tools (e.g. PostHog or similar)
These providers only process data on our behalf.
Independent Immigration Adviser
If you submit a visa support enquiry, we share the enquiry information with our independent licensed immigration adviser partner so they can contact you and assess whether to offer their services. If a visa case proceeds, the assigned adviser can access the information and documents in that case. The adviser provides immigration services independently under the adviser engagement described in our Terms and Conditions.
AI and Document Processing Providers
An authorised adviser or administrator may request an AI-generated case summary. For that purpose, relevant profile fields and text extracted from submitted visa documents may be sent to a contracted AI service provider. We limit the information sent to what is needed for the summary. Private storage addresses and document access links are not sent to the AI provider.
AI summaries assist the adviser with reviewing the case. They do not decide visa eligibility, predict approval, make an immigration decision, or automatically change the status of a visa case. The adviser must review the source information.
Legal Requirements
We may disclose information if required to:
- Comply with legal obligations
- Respond to lawful requests
- Protect our rights or users
Business Transfers
If our business is sold or restructured, your data may be transferred as part of that process.
6. International Data Transfers
Your data may be stored or processed outside New Zealand (e.g. cloud providers).
We take reasonable steps to ensure your data is protected in accordance with this Privacy Policy.
7. Data Retention
We retain your personal data only as long as necessary to:
- Provide services
- Meet legal obligations
- Resolve disputes
Usage data may be retained for analytics and security purposes.
Visa case information, documents, generated summaries, and audit records are retained only for as long as reasonably required to provide the service, meet professional or legal obligations, resolve disputes, and maintain security. Different records may have different retention periods. When information is no longer required, we take reasonable steps to delete or de-identify it.
8. Your Rights
Under New Zealand privacy law, you have the right to:
- Access your personal information
- Request correction of your information
- Request deletion (where applicable)
You can do this by contacting us (see Section 13).
9. Security
Personal information collected through our platform is encrypted while it is transmitted and is stored using encryption at rest. We also use layered technical and organisational safeguards, including:
- Secure hosting environments
- Encrypted connections using HTTPS
- Encryption at rest through our hosting and storage providers
- Role-based access control (RBAC), so features and information are available only to authorised roles
- Case-level authorisation for visa information, documents, and adviser actions
- Private storage for visa application documents, with no public document access
- Access limited to the student, assigned adviser, or authorised administrator where appropriate for the requested action
We regularly review access and security controls. No online system can guarantee absolute security, but we take reasonable steps to prevent unauthorised access, disclosure, alteration, or loss.
10. Children's Privacy
Our services are not intended for individuals under the age of 13.
We do not knowingly collect personal data from children.
11. Third-Party Links
Our website may contain links to other websites.
We are not responsible for their privacy practices.
12. Changes to This Policy
We may update this Privacy Policy from time to time.
Updates will be posted on this page with a revised date.
Continued use of our website means you accept the updated policy.
13. Contact Us
If you have any questions or requests regarding this Privacy Policy: