Privacy Policy

High Standards NZ (“we”, “us”) runs highstandards.co.nz, a revision website for New Zealand secondary school students studying NCEA. This policy explains what personal information we collect, why, where it's kept, and the rights you have over it under the New Zealand Privacy Act 2020.

If you have any question about your information, or want it corrected or deleted, email us at hellohighstandards@gmail.com — that address reaches the person responsible for privacy at High Standards NZ.

You can read our revision content without giving us any personal information.

We collect personal information only in these situations:

• When you create an account: your email address and a password. Your password is stored only in a scrambled (hashed) form — we can never see it. We use your email to sign you in, to send account emails you request (like confirmation and password-reset emails), and to contact you about your account if we need to.
• When you use your dashboard: the subjects and levels you choose to save, so we can show them to you when you come back.
• If you are a teacher reviewer: your email address, the subjects you review, and the feedback comments you write, so we can run the content-review process and record who approved each page.
• When you email us: your email address and whatever you choose to tell us, which we use to reply and to improve the site.
• Automatically, as part of running any website:our hosting provider keeps standard technical logs (such as IP addresses, browser type, and pages requested) for security and to keep the site working. We don't use these logs to identify or profile you.

Providing information is always voluntary. If you choose not to create an account, the only thing you miss out on is the dashboard — the revision content works without one.

• We don't sell or rent your personal information to anyone.
• We don't show advertising or share your information with advertisers.
• We don't collect payment information — the site currently has no paid features. If that ever changes, we'll update this policy first.
• We don't run third-party analytics or tracking that follows you around the web.
• We don't ask for more than we need — for example, we never ask for your name, date of birth, school, or address to use the site.

We keep this to the minimum needed for the site to work:

• Login cookies: if you sign in, a cookie keeps you signed in as you move between pages. It exists only for that purpose.
• Local storage on your device: your topic progress ticks and your monthly free-page count are stored in your own browser, not on our servers. They never leave your device, and clearing your browser data removes them.

We don't use advertising or cross-site tracking cookies.

Account information is stored with our database provider, Supabase, and the website runs on Vercel. Like most modern websites, these providers' servers may be located outside New Zealand (for example in Australia or the United States). We choose reputable providers that protect information with safeguards comparable to the protections of New Zealand privacy law, including encryption of data in transit and at rest.

We take reasonable steps to keep your information safe: access to account data is restricted, passwords are hashed, and connections to the site are encrypted (HTTPS). No website can promise perfect security, but if we ever become aware of a privacy breach that risks causing you serious harm, we will notify you and the Office of the Privacy Commissioner as the Privacy Act requires.

Only the service providers that make the site run — our database, hosting, and email delivery providers — and only so they can provide those services to us. They aren't allowed to use your information for their own purposes.

Beyond that, we would only disclose personal information if the law required it (for example, a lawful request from a New Zealand authority) or to protect someone's safety.

We keep your account information while your account exists. If you ask us to delete your account, we delete your personal information within a reasonable time, except where we need to keep a minimal record to meet a legal obligation. Reviewer feedback on content may be kept in anonymised form (with your details removed) as part of the site's editorial history.

Under the Privacy Act 2020 you have the right to:

• Ask what we hold about you— we'll give you a copy of the personal information we have about you.
• Ask us to correct it— if anything we hold is wrong, tell us and we'll fix it.
• Ask us to delete your account and the personal information that goes with it.

To do any of these, email hellohighstandards@gmail.comfrom the address on your account. We'll respond as soon as we can, and always within 20 working days as the Act requires.

If you're not happy with how we've handled your information or your request, you can complain to the Office of the Privacy Commissioner — it's free. Visit privacy.org.nz or call 0800 803 909.

This site is made for secondary school students, and many of our users are under 18. That's exactly why we collect so little: an email address and a password is all an account needs. If you're a parent or guardian and want to ask about — or ask us to delete — information relating to your child, email us at hellohighstandards@gmail.comand we'll help.

If we change what we collect or how we use it, we'll update this page and the “Last updated” date before the change takes effect. If a change is significant — like introducing paid features — we'll also say so clearly on the site.

High Standards NZ
Email: hellohighstandards@gmail.com

See also our Terms and Conditions.