Tō tūmataitinga · Your privacy
Privacy Policy
The short version: we only collect what you give us, we use it to run the kaupapa, we never sell it, and you can ask us what we hold about you at any time.
Who we are
Ātea is operated by Te Ahi Tahutahu Charitable Trust, a charitable trust based at 266 The Strand, Whakatāne, Aotearoa New Zealand. We handle personal information in line with the New Zealand Privacy Act 2020. Questions about this policy or your information can go to info@atea.art.
What we collect
Forms on this site — when you contact us, join the pānui (newsletter) list, or express interest in a kaupapa, we collect what you give us: typically your name, email address and your message.
Koha and payments — when you give a koha or pay for something by card, the payment is processed by Stripe on their secure pages. Your card number never reaches our systems. We receive your name, email address, and the amount, so we can receipt and account for your koha.
Applications — stallholder, food vendor and volunteer applications are collected through our form partners (Airtable and Fillout/Zite) and include the details those forms ask for.
Member accounts — if you create a login, we hold your email address and account details, and use cookies to keep you signed in. We don't use advertising or tracking cookies.
How we use it
We use your information to run Ātea: replying to you, sending the pānui you asked for, processing and receipting koha, managing markets and events, and keeping the Trust's books in order. We don't sell your information, and we don't use it for advertising.
Who we share it with
Your information is stored and processed by the services that run this site and our kaupapa: Stripe (payments), Supabase (member accounts), Airtable and Make (forms and programme management), Fillout/Zite (applications and bookings), Vercel (website hosting) and Xero (accounting). Each holds only what it needs for its job, under its own security and privacy obligations. Some of these providers store data outside New Zealand. Beyond that, we only disclose personal information if the law requires it.
How we keep it safe
This site is served over HTTPS. Payments are handled end-to-end by Stripe, a certified PCI-DSS Level 1 payment provider. Access to the systems above is limited to the small crew who run Ātea, protected by passwords and two-factor authentication. We keep records only as long as we need them for the purposes above, or as trust and tax law requires.
Your rights
Under the Privacy Act 2020 you can ask us for a copy of the personal information we hold about you, and ask us to correct or delete it. Email info@atea.art and we'll sort it. You can unsubscribe from the pānui any time using the link in any email. If you're not happy with how we've handled something, you can complain to the Office of the Privacy Commissioner (privacy.org.nz).
Changes
If we change this policy, the new version goes up on this page with a new date. This version: 9 July 2026.