Privacy Policy

Last updated: 7 July 2026

BringMeSunshine Group ("we", "us", "our") is committed to protecting your privacy. This policy explains how we collect, use, store and share personal information across our websites and products, including OneGoodDeed, OurFamilyRocks and LearnToRead. We comply with the New Zealand Privacy Act 2020 and, for users in the European Union and European Economic Area, the General Data Protection Regulation (GDPR).

1. Who we are

BringMeSunshine Group is the data controller for personal information collected through this website and our products. Contact details are set out at the end of this policy.

2. Information we collect

3. How we use your information

We use personal information to provide and improve our products, respond to enquiries, keep our services safe and secure, comply with legal obligations, and — with your consent — send you updates about our products.

4. Legal bases for processing (EU/EEA users)

Where the GDPR applies, we process personal data on the following legal bases: performance of a contract (providing our services to you); legitimate interests (improving and securing our services); consent (marketing communications and non-essential cookies); and compliance with legal obligations.

5. Cookies

We use essential cookies to make our sites work, and optional analytics cookies to understand how they are used. Where required by law, we ask for your consent before setting non-essential cookies. You can manage cookies through your browser settings.

6. Sharing your information

We do not sell your personal information. We share it only with service providers who help us operate our products (such as hosting and analytics providers) under appropriate contractual protections, with authorities where required by law, or with your consent.

7. International transfers

Your information may be processed outside New Zealand or the EU/EEA. Where it is, we ensure comparable safeguards are in place, including transfer mechanisms recognised under the GDPR (such as the European Commission's Standard Contractual Clauses) and the cross-border disclosure requirements of the New Zealand Privacy Act 2020 (IPP 12).

8. Retention

We keep personal information only as long as needed for the purposes described above or as required by law, after which it is securely deleted or anonymised.

9. Your rights

Under the New Zealand Privacy Act 2020 you have the right to access and correct your personal information. If you are in the EU/EEA, you additionally have the rights to erasure, restriction of processing, data portability, objection to processing, and to withdraw consent at any time. To exercise any of these rights, contact us using the details below.

You may also complain to a supervisory authority: in New Zealand, the Office of the Privacy Commissioner (privacy.org.nz); in the EU/EEA, your local data protection authority.

10. Children

Some of our products, such as LearnToRead, are designed for families. Where a product is used by children, we collect the minimum information necessary and require parental or guardian consent where the law requires it.

11. Security

We take reasonable technical and organisational measures to protect personal information against loss, misuse and unauthorised access, and we notify affected people and regulators of notifiable privacy breaches as required by law.

12. Changes to this policy

We may update this policy from time to time. The "last updated" date above shows when it was last revised. Material changes will be highlighted on this page.

13. Contact us

Questions or requests about this policy can be sent to: privacy@bringmesunshinegroup.com, BringMeSunshine Group, New Zealand.