How we secure and manage your data

When we collect personal data about you, we only collect what is necessary, and security is key. That is why we protect your information using industry standard measures and limit access to this data to only those that really need it. Such as:

• Legal entities when required under New Zealand Privacy Law Principles and/or the New Zealand Crimes Act (with prior notice when feasible).

• Cases where you've given us explicit consent.
  

In order to prevent unauthorised access or disclosure to your data, we have put in place suitable physical, electronic and procedural safeguards. Such as:

• Modern authentication and password management.

• Least privilege concept towards administration access.

• Observability of platform and website for threat monitoring and disruption.

• Cloud hosted provider, Amazon (AWS), for resiliency and high availability. 

• Testing, assurance and compliance measures.

The HeyPenny platform provides modern industry-standard levels of security and encryption. This means all traffic, including any containing personal information, is transmitted to and from the platform using strong end-to-end encryption. Further encryption is added to all file and data storage components, including any backups of said storage components.

These steps aim to secure your information and protect it from misuse, interference, loss and unauthorised access, modification and disclosure. While we are committed to security, we cannot guarantee the security of any information that is transmitted to or by us over the internet. The transmission and exchange of information is carried out at your own risk.