Privacy Policy
Effective date: August 2025 · KNCM Group Limited · NZBN: 9429053839213
Your privacy matters to us. This policy explains what information we collect, how we use it, and your rights under the NZ Privacy Act 2020.
1. Who we are
KNCM Group Limited (trading as Sling), NZBN: 9429053839213, is the operator of the Sling fundraising platform at slingaotearoa.co.nz (and sling.nz once live). We are a New Zealand company and this policy is governed by the NZ Privacy Act 2020.
Contact our privacy officer: slingnz@outlook.com
2. What information we collect
| Information | Why we collect it | Who provides it |
|---|---|---|
| Name and email address | Account creation and communication | Fundraisers, sponsors |
| Organisation name, type, region | To create your fundraiser page | Fundraisers |
| Individual fundraiser details (name, cause, relationship) | Verification and platform safety | Individual fundraisers |
| Supporter names and emails | Transaction records, notifications | Supporters making bookings, pledges, donations |
| Business name, contact, coverage area | Sponsor profile and billing | Sponsors |
| Payment information | Processed by Stripe — we never see card details | Sponsors (billing), supporters (transactions) |
| Impression and click data | Sponsor analytics and monthly reports | Automatically collected |
| Report submissions | Platform safety and compliance | Anyone reporting a fundraiser |
3. How we use your information
- To operate the Sling platform and your fundraising page
- To send transactional emails (booking confirmations, raffle tickets, donation receipts)
- To send sponsors their monthly performance reports
- To verify fundraisers and ensure platform safety
- To respond to support requests and reports
- To comply with our legal obligations
We do not use your information for advertising. We do not sell your data to third parties. We do not share your data with anyone except as described below.
4. Who we share information with
- Supabase — our database provider, hosted in Japan (Tokyo). Data is encrypted at rest and in transit.
- Stripe — our payment processor. Card details are handled entirely by Stripe and are never stored on Sling's servers.
- Resend — our email provider. Email addresses are passed to Resend to send transactional emails.
- Netlify — our hosting provider.
- NZ authorities — if we are required by law or if we believe fraud is occurring.
All third-party providers are required to handle your data in accordance with their own privacy policies and applicable law.
5. Cookies and tracking
Sling uses minimal tracking. We use session storage (not cookies) to maintain your login state. We do not use advertising cookies or third-party tracking pixels. We do not track you across other websites.
6. How long we keep your data
- Account data — kept for as long as your account is active, plus 12 months after deletion
- Transaction records — kept for 7 years for accounting and legal compliance
- Email logs — kept for 12 months
- Reports — kept for 24 months
7. Your rights under the NZ Privacy Act 2020
You have the right to:
- Access — request a copy of the personal information we hold about you
- Correction — ask us to correct inaccurate information
- Deletion — ask us to delete your account and personal data
- Portability — request your data in a machine-readable format
- Complaint — complain to the Privacy Commissioner at privacy.org.nz if you believe we have breached the Privacy Act
To exercise any of these rights, email us at slingnz@outlook.com. We will respond within 20 working days.
8. Data security
We take reasonable steps to protect your information including:
- All data is encrypted in transit using HTTPS
- Database data is encrypted at rest
- Access to the database is restricted to authorised personnel only
- Row Level Security (RLS) is enabled on all database tables
- Payment processing is handled entirely by Stripe — we never store card numbers
No system is 100% secure. If we become aware of a data breach that affects you, we will notify you as required by the NZ Privacy Act 2020.
9. Children's privacy
Sling accounts require users to be 18 or older. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.
10. Changes to this policy
We may update this privacy policy from time to time. We will notify registered users of significant changes by email. Continued use of Sling after changes are posted constitutes acceptance of the updated policy.
Privacy questions or requests?
KNCM Group Limited · NZBN: 9429053839213 · New Zealand
You can also complain to the NZ Privacy Commissioner at privacy.org.nz