Privacy statement

Last updated 18 May 2026

This Privacy Statement sets out how the XRB (we, us or our) manages personal information you provide to us, it covers all information collected or held by the XRB from all sources and in all formats                                                                                

Statistical information                                                  

On this website we use web measurement tools, like Google Analytics, to collect statistical information about your visit. We use this information to help us understand how people are using xrb.govt.nz and to improve the site. The information will be viewable by site administrators and certain other staff.

These tools do not identify the individuals using the site. We can see a record of what people do on the site, but not who they are. The information we collect includes:

  • your top-level domain name, for example .co.nz
  • the search terms you use
  • the pages you visit on the site and the links you select
  • the date, time and duration of your visit
  • the site you visited before arriving at xrb.govt.nz
  • your operating system, for example Windows 10, Linux or Mac OS
  • the kind of technology you use, for example desktop, mobile, tablet
  • the type of internet browser you’re using to view xrb.govt.nz – for example Chrome or Internet Explorer.

This website uses temporary cookies to help balance the load on our servers. Cookies are small text files that are sent by a website and stored on your computer's hard drive to collect information about how you browse the website. These cookies do not collect any personal data and are deleted when you close your browser. You can choose to disable the use of cookies, but this may affect your ability to use some of the site's features and view some content."                                             

This site also uses Google Analytics, a web analytics service provided by Google Inc. Google Analytics uses cookies. The information generated by the cookie about your use of the site is transmitted to, and stored by, Google on servers in the United States.

Google uses this information to:

  • evaluate how you use this site
  • compile reports on site activity
  • provide you with other services related to site activity and internet usage.

Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Google will not associate your IP address with any other data held by Google. When you use this site you consent to the processing of data about you by Google, in the manner and for the purposes set out above.

Newsletter subscription                                                                                       

When you subscribe to our newsletter, we will only use your personal information for managing your subscription and assessing newsletter effectiveness. You can unsubscribe from any newsletter at any time.

Our newsletter is managed using a third-party tool called MailChimp

MailChimp provides analytics to the XRB on how people interact with our newsletter (for example, how many subscribers have opened emails or clicked on links). This means that the XRB and  MailChimp will be able to see your name, email and details about which links in XRB newsletters you have clicked on.

The XRB only uses this information to assess newsletter effectiveness.                                                            

How we collect information                                                    

We collect your personal information so we can:

  • perform our statutory functions
  • contact you
  • work out how we can help you
  • register you for an event
  • register you for our communications or newsletters
  • obtain your submission to our consultation
  • review and improve the delivery of our services, including conducting satisfaction surveys
  • gather and analyse your views and feedback                                                   

We collect information from you when you:

  • talk to us over the phone
  • send us an email or a submission
  • subscribe to our newsletter
  • apply for a vacancy
  • register for an event or meeting
  • submit a modified auditors report                                                

Types of information we collect include:

  • your contact details – address, telephone numbers, email
  • identification details – name, address, organisation, job title
  • other information you submit to us                              

Sharing your information                                             

Sometimes we need to share your information with people or organisations outside of the XRB.

We received modified audit and assurance reports on our website from auditors and assurance practitioners. Besides our staff, we share information collected in the form with:

  • the FMA, Companies Office, Registrar of Incorporated Societies in order to share modified audit and assurance reports received across agencies to ensure a complete record is maintained.

All submissions to our consultations will be published on the XRB website unless confidentiality is requested.  If you object to the release of any information in your submission, please identify the specific parts and the reasons under the Official Information Act 1982. We reserve the right not to publish defamatory submissions

Where any information provided (which may include personal information) to us constitute public records, it will be retained to the extent required by the Public Records Act 2005. 

We may also be required to disclose information under the Official Information Act 1982 or to a Parliamentary Select Committee or Parliament in response to a Parliamentary Question. Disclosures of official information may contain your personal information.       

Events                                                      

Should you decide to attend one of our webinars or virtual events, you may need to sign-up to the platform through which it is provided (such as Zoom), and for your use of their service, they will be the data controller. To find information about how they process your personal information, please see their privacy information — for example, for Zoom, on their website.        

https://www.zoom.com/en/trust/privacy/privacy-statement/                            

Please note that we may photograph or record our events. These materials may be used for internal and external promotion by the XRB. If you object to appearing in recordings or photographs, please contact enquiries@xrb.govt.nz to let us know ahead of the event.                                                        

Managing your information

You have the right to ask for a copy of any personal information we hold about you, and to ask for it to be corrected if you think it is wrong. If you’d like to ask for a copy of your information, or to have it corrected, please contact us at enquiries@xrb.govt.nz                                                  

The Privacy Commissioner's website has more information on the privacy laws in New Zealand.

Privacy Commissioner

You can contact the Privacy Commissioner at:

Office of the Privacy Commissioner

PO Box 10094

Wellington 6143

Privacy statement