OpenAccess logo, circles representing the letters OA in Braille

OpenAccess

Privacy statement

Our commitment to privacy

OpenAccess commits to protecting your privacy. We take all reasonable steps to ensure the security of the information we hold and to be open and transparent about how we collect, use, and store personal information. The Privacy Act 2020 principles guide OpenAccess.


This website

Cloudflare

This website uses Cloudflare for DNS, hosting, security, and processing analytics data.

Cloudflare may automatically collect technical information from visitors, such as your IP address, browser type, and general location (such as country or region).

Cloudflare may set cookies in your browser for performance, security, and anti-bot purposes. For more information on Cloudflare’s cookies, read Cloudflare Cookies.

For more information on Cloudflare’s privacy practices, refer to the Cloudflare Privacy Policy and Cookie Policy.

OpenAccess Telemetry

OpenAccess Telemetry is a privacy-focused system used to understand how people use this website — without compromising privacy.

Most websites use Google Analytics, which can be invasive and tracks users across the web. OpenAccess doesn’t use Google Analytics.

OpenAccess Telemetry collects data such as:

  • IP address
  • city and country (based on IP)
  • user agent string
  • the page you visited
  • when you leave a page
  • clicks on elements
  • the duration of the visit
  • scroll position.

OpenAccess Telemetry does not use cookies. The only information it stores in your browser is an anonymous session ID kept in sessionStorage, which automatically deletes when you close your browser.

OpenAccess Telemetry does not track you across sessions, devices, or websites. We don’t share data with third-party advertisers or analytics providers.

OpenAccess Telemetry stores data in Axiom. For more information, refer to the Axiom Privacy Policy.

If you want to stop the transmission of OpenAccess Telemetry data, you can opt out with this link: switch off telemetry. Opting out disables OpenAccess Telemetry but does not affect technical data collected by Cloudflare.

You can re-enable telemetry with this link: switch telemetry on.

If you opt out, your browser will store the preference in localStorage and it will persist across browser sessions until you clear localStorage.


Data security

Data security

OpenAccess takes cybersecurity seriously. We take all reasonable steps to protect the information we hold from loss, unauthorised access, or misuse.

OpenAccess protects systems used for storing or accessing personal information using strong authentication controls, including multi-factor authentication (MFA).

We use reputable cloud service providers with strong security practices.

Where appropriate, we encrypt data in transit and at rest.

We regularly review access permissions, software updates, and potential vulnerabilities. We also limit the amount of personal information we collect and store to reduce risk.


Payments and invoicing

Payments and invoicing

OpenAccess uses Hnry to manage invoicing, tax, and payments. When you receive an invoice from us or make a payment, Hnry processes your information securely.

For more information, refer to the Hnry Privacy Policy.


Communications

Communications

If you contact OpenAccess, we will only use the information you provide to respond to your enquiry or carry out any requested work.

We do not use your details for marketing, and we do not share your information with third parties.

Our third-party email provider, Microsoft 365, stores our emails.

OpenAccess stores communication records for up to 7 years.


Overseas disclosures

Overseas disclosures

Some of our third-party service providers (such as Cloudflare, Microsoft, and Axiom) may store or process data outside New Zealand. We review all third-party service provider privacy policies to ensure they meet appropriate standards of privacy protection.


General information handling

General information handling

OpenAccess may collect, use, or store personal information in ways not specifically described above, depending on the nature of our work with clients, partners, or website visitors.

In all cases, the Privacy Act 2020 principles guide OpenAccess.

This applies to all interactions with OpenAccess, including digital accessibility consulting, audits, training, and related services.


Enquiries

The laws of Aotearoa New Zealand govern this privacy statement.

Under New Zealand’s Privacy Act 2020, you have the right to request access to any personal information OpenAccess holds about you, and to ask for a correction if you believe that information is inaccurate.

To make a privacy-related request, contact:

--------------------

Changelog

Last updated on: 29 April 2025