Create a bespoke document in minutes, or upload and review your own.
Get your first 2 documents free
Your data doesn't train Genie's AI
You keep IP ownership of your information
Privacy Notice
I need a privacy notice for a New Zealand-based e-commerce website that collects personal data from users, including their contact information and purchase history, ensuring compliance with local privacy laws and providing clear information on data usage, storage, and user rights.
What is a Privacy Notice?
A Privacy Notice tells people how your organization collects, uses, and protects their personal information. It's a key document required under New Zealand's Privacy Act 2020 that helps build trust with customers, employees, and other stakeholders by being open about your data practices.
The notice must explain what information you gather, why you need it, who you share it with, and how long you keep it. It should also outline how people can access or correct their details, file complaints, and exercise their privacy rights. Good notices are clear, specific, and easy to find - usually on websites, forms, or other points where people share their data.
When should you use a Privacy Notice?
You need a Privacy Notice whenever you start collecting personal information from customers, employees, or other individuals in New Zealand. This includes launching a new website, opening a physical store, hiring staff, or introducing digital services that gather user data.
Update your Privacy Notice when making significant changes to how you handle information - like adopting new data collection methods, sharing data with different partners, or expanding into new services. The Privacy Act 2020 requires clear communication about these practices, and having an up-to-date notice helps avoid complaints, builds trust, and demonstrates compliance with privacy principles.
What are the different types of Privacy Notice?
- Website Privacy Notice: Focuses on online data collection, cookies, and digital tracking practices for website visitors
- Employee Privacy Notice: Covers workplace data handling, including HR records, performance data, and staff monitoring
- Standard Privacy Notice: A comprehensive template suitable for general business operations and customer interactions
- Company Privacy Notice: Broader scope covering all company stakeholders, including suppliers and business partners
- Data Collection Notice: Specifically addresses direct data gathering activities and special category information
Who should typically use a Privacy Notice?
- Business Owners & Directors: Responsible for approving and implementing privacy policies across their organizations
- Legal Teams: Draft and review Privacy Notices to ensure compliance with the Privacy Act 2020 and related regulations
- Privacy Officers: Maintain and update notices, handle privacy-related queries, and oversee data protection practices
- IT Departments: Implement technical measures described in the notice and manage data security protocols
- Customers & Employees: Main beneficiaries who rely on Privacy Notices to understand how their personal information is handled
- Third-Party Partners: Must comply with privacy requirements when handling shared data under service agreements
How do you write a Privacy Notice?
- Data Audit: Map out all personal information your organization collects, stores, and shares
- Purpose Review: Document why you collect each type of data and how you use it
- Security Check: List your data protection measures and security protocols
- Third-Party Analysis: Identify all external partners who receive or process your data
- Access Rights: Detail how individuals can view, correct, or request deletion of their information
- Plain Language: Write clearly and avoid technical jargon - our platform helps generate legally sound Privacy Notices that meet all requirements
- Internal Review: Have key stakeholders check the notice matches actual practices
What should be included in a Privacy Notice?
- Identity Details: Your organization's name, contact information, and Privacy Officer details
- Data Collection: Types of personal information collected and methods of collection
- Usage Statement: How and why you use the collected information
- Data Sharing: Who you share information with and under what circumstances
- Storage & Security: How you protect and store personal information
- Access Rights: How individuals can access, correct, or request deletion of their data
- Complaints Process: Steps for filing privacy concerns and contact details for the Privacy Commissioner
- Cookie Policy: Details about website tracking technologies, if applicable
- Updates Process: How you'll notify people about changes to your privacy practices
What's the difference between a Privacy Notice and a Data Processing Notice?
A Privacy Notice is often confused with a Data Processing Notice, but they serve different purposes under New Zealand's Privacy Act 2020. While both deal with personal information, their scope and application differ significantly.
- Primary Purpose: Privacy Notices provide a broad overview of all data handling practices, while Data Processing Notices focus specifically on how particular data sets are processed for specific purposes
- Timing of Use: Privacy Notices are ongoing documents displayed continuously, whereas Data Processing Notices are often issued for specific processing activities or changes
- Legal Requirements: Privacy Notices are mandatory for all organizations collecting personal data, but Data Processing Notices are typically required only for special processing activities or when sharing data with third parties
- Content Scope: Privacy Notices cover all aspects of data handling, including collection, storage, and rights. Data Processing Notices detail specific processing operations, methods, and safeguards
Download our whitepaper on the future of AI in Legal
ұԾ’s Security Promise
Genie is the safest place to draft. Here’s how we prioritise your privacy and security.
Your documents are private:
We do not train on your data; ұԾ’s AI improves independently
All data stored on Genie is private to your organisation
Your documents are protected:
Your documents are protected by ultra-secure 256-bit encryption
Our bank-grade security infrastructure undergoes regular external audits
We are ISO27001 certified, so your data is secure
Organizational security
You retain IP ownership of your documents
You have full control over your data and who gets to see it
Innovation in privacy:
Genie partnered with the Computational Privacy Department at Imperial College London
Together, we ran a £1 million research project on privacy and anonymity in legal contracts
Want to know more?
Visit our for more details and real-time security updates.
Read our Privacy Policy.