Privacy statement

Draft. This statement is being reviewed and may change before Hana launches publicly.

Hana helps people discover local creative events and the artists behind them. This statement explains what personal information Hana collects, why, and what you can do about it, in line with the New Zealand Privacy Act 2020.

What we collect from artists

• Your email address and a password when you sign up. Your password is stored only in a protected (hashed) form; we can never see it.
• Your profile: the display name, creative disciplines, home town or region, bio and photo you choose to give us. Your profile is public once you verify your email.
• Your events: the details you enter, which are public once your email is verified.

We collect only what Hana needs to show your profile and events and to keep your account secure.

Unverified accounts

If you don't verify your email address within 7 days of signing up, your account and everything in it are deleted automatically.

Photos

When you upload a photo, we resize it and remove its hidden details (metadata), including any location data showing where it was taken.

Cookies

• A sign-in cookie keeps you signed in, and a security cookie protects forms from misuse.
• If you choose a region or town, a cookie called hana_location on your device remembers it for up to a year, so you see local events next time. It isn't linked to an account. Choosing "All of New Zealand" removes it.

We don't use advertising or tracking cookies.

Email

We send you emails only about your account (for example, to verify your email or reset your password). They're sent through Microsoft Azure Communication Services. Message content is processed in the service's data location for Hana (Australia); like many internet services, messages may pass through other countries on the way.

Where your information is stored

Hana's database and photos are stored in Microsoft Azure's Australia East region (Sydney).

Your rights

You can ask to see the personal information we hold about you, to correct it, or to delete your account and everything in it. We'll respond within 20 working days, as the Privacy Act 2020 requires.

The contact address for privacy requests will be added here before Hana launches publicly.

You can also contact the Office of the Privacy Commissioner if you have a concern.