Privacy Policy.

Younity Privacy Policy.

INTRODUCTION.

Younity Limited, Younity South Island and Ingenium NZ Limited (“the Company”, “We”, “Us”, “Our”) comply with the New Zealand Privacy Act 2020 (“the Act”) and the Privacy Amendment Act 2025 when dealing with personal information. “Personal information” is information about an identifiable individual (a natural person).

This policy sets out how we collect, use, disclose, store, and protect your personal information when providing permanent recruitment, contract recruitment, consulting services and other similar professional services. It applies to candidates, contractors, consultants, client contacts, prospective clients, referees, website visitors, and any other individual whose personal information we hold.

This policy does not limit or exclude any of your rights under the Act. For further information on the Act, see www.privacy.org.nz.

WHO WE ARE.

Younity Limited, Younity South Island Limited and Ingenium NZ Limited are a group of companies that specialise in IT & Digital Recruitment and associated services including permanent, fixed-term and contract placements and consulting engagements across New Zealand.

• Registered name: Younity Limited T/A Younity; Younity South Island Limited; Ingenium NZ Limited
• Registered Address: Level 12, 10 Customhouse Quay, Wellington, 6011, New Zealand
• Privacy Officer: Tony Pervan
• Contact: privacy@younity.co.nz | +64 9 217 3726
• Website: www.younity.co.nz

CONSENT.

By providing your personal information to us, including by applying for employment, registering with us, accessing our services, visiting our website, or engaging with Younity on social media, you acknowledge that you have read and understood this Privacy Policy and agree to its terms. In particular, you give your consent to the processing of your personal information in this Privacy Policy.

Where we collect personal information about you from third-party sources (see “Indirect collection” below), we will notify you as required under Information Privacy Principle 3A of the Privacy Act 2020, unless a statutory exception applies.

The notifications set out in this Privacy Policy, including about use, disclosure, rights of access and correction and who holds your personal information apply to both directly and indirectly collected personal information.

CHANGES TO THIS POLICY

We may change this policy from time to time by uploading a revised policy on our website. The change will apply from the date that we upload the revised policy. If you do not agree to any change(s) we make, you should immediately stop using our services and our website. By continuing to use of platforms, products or services, you agree to any modifications that are made to this Privacy Policy.

WHY WE COLLECT YOUR PERSONAL INFORMATION.

We collect, use and disclose your personal information to provide you with permanent and contract recruitment services and other similar professional services, to market our functions and to meet our legal obligations. These include but are not limited to:

• Assessing your suitability for current IT jobs we are recruiting for, and for future relevant IT jobs that may arise
• Presenting your details to current and future employers in the IT sector (with your specific authorisation before each submission)
• Conducting pre-employment, probity and background checks
• Managing your engagement if you are placed as a contractor or consultant (including payroll, timesheets, leave, performance and health and safety)
• Marketing our services, including sending you job alerts, newsletters, blogs and market updates
• Managing our client and prospective client relationships
• Meeting our legal and regulatory obligations
• Conducting anonymised research and statistical analysis
• Protecting and enforcing our legal rights

INFORMATION WE COLLECT DIRECTLY FROM YOU (IPP 3).

We collect personal information directly from you when you:

• Apply for a role or register with us (via our website, SEEK, Trade Me Jobs or other Job Website, LinkedIn, email, phone, or in person)
• Submit your CV, cover letter, portfolio, or other application documents
• Participate in interviews, phone screens, technical assessments, or psychometric tests
• Complete registration, onboarding, probity check or compliance forms
• Provide your tax, banking, KiwiSaver, and payroll details (if engaged as a contractor or employee)
• Correspond with us by email, phone, SMS message, WhatsApp or other instant messaging service, video call and collaboration platforms (Zoom or Microsoft Teams etc), or in person
• Visit our website or use our online portals or software application platforms
• Attend events or networking functions where you provide your details to us
• Engage with social media or other marketing communications such as newsletters
• Provide emergency contact details

The types of personal information we may collect directly from you include:

• Your name, date of birth, gender, contact details, address verification and if you are/were known by any other name
• Information about your work history, such as your occupation, employment history and/or details, credit history, education and qualifications, personal and professional skills and attributes, testimonials and feedback, including your curriculum vitae and other documents that may contain further personal information
• Your skills, technical competencies and self-assessments and your responses to interviews, assessments, and tests
• Your salary or rate expectations, availability, notice period, location preferences
• If contracting, whether you operate as a sole trader or limited liability company (and the company name and GST number)
• Your citizenship documentation, work visa or permanent residency status and right to work in New Zealand
• Photographic and/or non-photographic Identification documents (passport, driver licence, documents proving residential address) for verification purposes
• Your bank account details, IRD/GST number, tax code, and KiwiSaver information (if required) if we are paying you
• Your billing details (if we are paying you) such as bank account details, including number, branch, SWIFT code, account holder, and New Zealand Inland Revenue number
• Your emergency contact’s name, relationship, and phone number
• Declared criminal and credit history, employment issue history and medical issue history relevant to employment as part of completing a full application form and/or probity check forms
• Your preferences for how you would like to be contacted
• Feedback on your employment or engagement with a client and/or your experience with Younity as part of our candidate care programme
• Declaration of any conflicts of interest prior to commencement of any role or engagement
• Any other information you choose to provide

INFORMATION WE COLLECT FROM THIRD PARTY SOURCES (IPP 3A).

As part of our recruitment and consulting services, we may collect personal information about you indirectly from sources other than you. Under amendments to the Privacy Act 2020 that are effective 1st May 2026, we are required to notify you when this occurs, unless a statutory exception applies (for example, where the information is publicly available or you are already aware of the collection). Not all indirect collection triggers a notification obligation, where an exception applies, we set this out below.

The third-party sources we may collect your personal information from include:

Sourcing Platforms, Web Searches and Job Boards

• SEEK Talent Search, Trade Me Jobs Profiles or similar platform — your profile data including Curriculum Vitae or Resume, name, contact details, work history, skills, salary expectations, and availability (accessed via paid subscription).
• LinkedIn / LinkedIn Recruiter or similar — your profile data including name, contact details, work history, skills, education, endorsements, and connections. Where this information is publicly available on your profile, an IPP 3A notification will not be made. Where information is accessed via LinkedIn Recruiter subscription tools and is not otherwise publicly available, collection may be notifiable under IPP 3A, see below for further details.
• Boolean / Web search / Google X-Ray search results — your publicly available professional information from company websites, GitHub, Stack Overflow, personal websites, conference speaker listings, Meetup profiles, and other similar sources. Where this information is publicly available, an IPP 3A notification will not be made.

Reference and Background Checks

• Your nominated Referees – past performance feedback, conduct assessment, strengths, areas for development, reason for leaving, and willingness to re-employ and other relevant questions relevant to employment opportunities
• Work History Verification Checks – As requested by clients; full work history
• NZ Ministry of Justice Checks or other Overseas Criminal History checks – criminal conviction history, charges, and court outcomes (via our probity check provider CVCheck, with your consent)
• Credit Checks and Global AML/CFT checks as required – credit history, defaults, judgments, and credit score, AML/CFT checks (via our probity check provider, with your consent and only for specific roles with significant financial responsibility)
• Education Checks — verification of your qualifications as required from NZQA, NZ Universities or other Education providers, and/or overseas educational institutions as required (via our probity check provider, with your consent)
• Certifications/Memberships — Verification of your professional memberships and certifications such as IITP, Microsoft, AWS, Cisco, SAFe, ISACA, PMI, Scrum Alliance etc
• Immigration New Zealand – verification of your visa type, expiry date, and work conditions (via our probity check provider CVCheck, with your consent)
• Waka Kotahi / NZ Transport Agency — your driving licence class, demerit points, and suspension history (directly with NZTA, with your consent and only where the role requires driving)
• Drug and Alcohol Testing — test results (only where the role or employer requires pre-employment testing as required and with consent)
• Psychometric Tests – Information from assessments required by a potential employer as required using various 3rd party providers (as required with consent)

Clients and Other Sources

• Client contacts and/or hiring managers interview feedback about you, timesheet approvals, candidate care calls, contract extension negotiations and other placement or engagement-related information, client recommendations or referrals. Where you are placed as a contractor or consultant, the following information is received on an ongoing basis throughout the duration of your placement or engagement: performance appraisals, conduct or complaint information, health and safety incident information, expenses information, client satisfaction / performance information and client notification of termination.
• Peer or Candidate referrals — your name, contact details, and professional recommendation from another candidate, contractor, referee, client contact or other industry contact
• NZ Companies Register — director details and company associations (publicly available), disqualification details (publicly available)
• Inland Revenue — payday filing responses, KiwiSaver confirmations, student loan and child support deduction notices (if you are on our payroll)
• KiwiSaver scheme providers — enrolment confirmations, contribution rate changes, and opt-out notices
• ACC — claim information if you are injured during a placement
• DIA / NZSIS — security vetting outcomes (for government contracts requiring clearance)
• Event/Function organisers — attendee lists from industry events, conferences, and meetups

We may also collect your personal information from other companies in the Ingenium NZ group, including Verity Consulting Limited.

When we collect personal information about you from any third-party source, we will take reasonable steps to notify you as soon as reasonably practicable after the collection.

Where you have been proactively sourced and have not signed our application form or privacy declaration and consent form, we will take reasonable steps in the circumstances to provide you with an IPP 3A notification at or before our first contact with you, informing you of the collection, its source, and the purposes for which the information will be used.

Notification of collection from a third party source is not required where:

• You have already been made aware of the collection (for example, because you signed our application form and/or our privacy declaration and consent form that refers you to the indirect collection disclosures set out in this Privacy Policy, or the source agency/entity has already informed you)
• Your personal information has been collected from another Ingenium NZ group company (as set out above). You acknowledge that the relevant group company has notified you that your personal information will be shared with us and has made you aware of the matters required by IPP 3A by referring you to the Privacy Policy of that Ingenium NZ group company
• The information is publicly available
• Another exception under the Privacy Act 2020 applies

INFORMATION COLLECTED THROUGH OUR WEBSITE AND DIGITAL SYSTEMS.

When you visit our website, use our portals, or interact with our digital communications, we may automatically collect:

• Your IP address, device identifiers, browser type, operating system, and mobile network information
• Cookie IDs and tracking data (see “Cookies” section below)
• Pages viewed, jobs clicked, search terms used, time on page, and referral source
• Email open and click tracking data (when we send you emails)
• SMS delivery data

This information is collected to improve your experience, analyse website usage, and personalise the content and job opportunities we present to you. Where this data can identify you, it is treated as personal information under this policy.

HOW WE USE YOUR PERSONAL INFORMATION.

We use your personal information to:

• Verify your identity
• Assess your suitability for current and future IT job opportunities or roles
• Conduct permanent, fixed-term, and contract recruitment services on behalf of our clients
• Provide IT consulting services through Verity Consulting
• Carry out reference, probity and other background checks (with your consent)
• Present your details to prospective employers (with your specific authorisation before each submission)
• Manage your engagement if you are placed (payroll, timesheets, leave, performance, health and safety, extensions, candidate care)
• Send you job alerts, market updates, newsletters, and other communications
• Personalise and improve your experience on our website
• Respond to your enquiries and communications
• Keep our records accurate and up to date
• Conduct anonymised research and statistical analysis
• Protect and enforce our legal rights, including defending any claim
• Meet our legal obligations as an employer and recruitment agency

Where we send you marketing communications, we comply with the Unsolicited Electronic Messages Act 2007. Every marketing email includes an unsubscribe option, and we will honour unsubscribe requests promptly.

AI  AND AUTOMATED TOOLS.

• We may use AI-powered features within our recruitment platform and tools, including candidate matching tools in SEEK Talent Search and JobAdder, AI-assisted transcription in video conferencing tools such as CoRecruit and Contented AI, LLMs like ChatGPT, Gemini or Claude, and other AI features in our applicant tracking system or CRM.
• Where AI tools are used to generate summaries, assessments, or candidate matching recommendations, the outputs are always reviewed by a human before any recruitment decision is made.
• If you have concerns about any AI-generated assessment or recommendation, you may raise them with your recruiter or our Privacy Officer.

WHO WE SHARE YOUR PERSONAL INFORMATION WITH (IPP 11).

We may disclose your personal information to the following recipients:

Prospective Employers – Current and Future

• We will share your details (CVs, reference check summaries, probity check results, address verification, assessment results, identification documentation and other relevant details) with prospective employers in the IT sector in New Zealand, and internationally where relevant for permanent, contract or fixed term job opportunities, both current and possible future opportunities.
• We will always seek your authorisation before submitting your details to a named employer for a role.

Within the Ingenium NZ Group of Companies (IPP 11 and IPP 3A)

• Your information may be shared between Younity Limited, Younity South Island Limited, Ingenium NZ Limited and Verity Consulting Limited (all group entities owned by Ingenium NZ Limited) where relevant to IT & digital recruitment, IT consulting, or other employment opportunities across all brands. When one group entity shares your personal information with another group entity, the sharing entity makes a disclosure under IPP 11, and the receiving entity indirectly collects your personal information under IPP 3A, as set out in the IPP 3A section above.

Service Providers

We engage third-party service providers who process personal information on our behalf under section 11 of the Privacy Act 2020. These include but are not limited to:

• Our CRM and/or applicant tracking system providers (JobAdder, HubSpot)
• Our HR, payroll and billing platform providers (PayHero / Karmly / Xero / MyHR)
• Our onboarding platform provider (Onboarded)
• Our probity and background check providers (CV Check)
• Our insurance providers and brokers (Delta Insurance / Southern Cross / Frank Risk Management)
• Our IT platform and application providers and service providers (email, file storage, video conferencing including Microsoft365, Kamal, CoRecruit, ROI-AI, Lumin, Seek Recruiter Profile etc)
• Assessment and testing platform providers (various partners as required with consent)

These service providers process data solely on our behalf and are not permitted to use your information for their own purposes.

Government Agencies & Regulatory Authorities

We disclose personal information to government agencies and regulatory authorities where required by law, including but not limited to:

• Inland Revenue (PAYE, KiwiSaver contributions, student loan and child support deductions etc)
• ACC (workplace injury claims)
• WorkSafe NZ (health and safety incident reporting)
• Ministry of Justice (fines, criminal history etc)

Other Disclosures

We may also disclose your information:

• To professional advisers (legal, accounting) where necessary
• Where required by law, court order, or judicial proceeding
• To protect the rights, property, or safety of Younity Limited, Ingenium NZ Limited, Younity South Island Limited or Verity Consulting Limited, our staff, our clients, or others
• For anonymised statistical analysis or research
• To any other person authorised by you or by law
• Work history verification checks or other reporting requirements as requested by clients

We will not disclose your personal information to any other party without your consent, unless required or permitted by law.

CROSS-BORDER DISCLOSURE (IPP 12).

Some of our IT platforms and service providers may store or process data on servers outside New Zealand. These include:

• JobAdder and/or HubSpot
• Microsoft 365
• CoRecruit (Canadian AI transcription and recording tool)
• Zoom or Microsoft Teams (video conferencing, including recordings where consent is given)
• Dropbox Sign
• ROI AI (Marketing Automation)
• LinkedIn
• SEEK
• Xero
• PayHero / Karmly
• MyHR
• Onboarded
• CVCheck
• Kamal
• Lumin PDF

Where these platforms act as our service providers under section 11 of the Privacy Act, processing data solely on our behalf, the service provider carve-out applies and the transfer is not treated as a disclosure for the purposes of IPP 12.

Where platforms or recipients use data for their own purposes, we will only disclose your personal information outside New Zealand if we have reasonable grounds to believe that the recipient is subject to privacy laws providing comparable safeguards to the Privacy Act 2020, or is required by contract to protect the information comparably, or you have authorised the disclosure after being informed that the recipient may not be required to protect your information to the same standard.

PROTECTING YOUR PERSONAL INFORMATION.

All information collected from you is stored on a secure database and we will take reasonable steps to keep your information safe from loss, unauthorised activity or misuse at all times. The database is password protected and can only be accessed by authorised employees. Our employees are subject to confidentiality agreements as part of their employment contract.

How Long We Keep Your Personal Information

We will retain your personal information for as long as it is needed for the purpose for which it was collected (or any other purpose you have consented to) or for so long as we required by law to retain it, in accordance with Information Privacy Principle 9 of the Privacy Act 2020.

Our stated purpose at the point of collection includes considering you for current and future IT job opportunities or consulting roles. This means we retain candidate and contractor information for an ongoing period to match you with opportunities as they arise.

We may retain your curriculum vitae and other application documents on file beyond your initial application for future roles, should you wish for these documents to be deleted, please contact us at the details below.

PRIVACY BREACH NOTIFICATION.

If we become aware of a privacy breach that is likely to cause serious harm to any affected individual, we will:

• Notify the Office of the Privacy Commissioner as soon as practicable
• Notify the affected individuals as soon as practicable
• Take reasonable steps to contain the breach and reduce the risk of harm

This is in accordance with Part 6 of the Privacy Act 2020 (notifiable privacy breaches).

Accessing and correcting your personal information

Subject to certain grounds for refusal under the Act, you have the right to access your readily retrievable personal information that we hold and to request a correction to your personal information. Before you exercise this right, we will need evidence to confirm that you are the individual to whom the personal information relates. Under the Privacy Act 2020, you have the right to:

• Access the personal information we hold about you (IPP 6). We will respond to your request within 20 working days. There is no charge for access requests.
• Request correction of any personal information that is inaccurate, incomplete, or misleading (IPP 7). If we do not agree to a correction, we will attach a statement of the requested correction to your record
• Request deletion of your personal information where no statutory retention obligation applies and the purpose for which it was collected has been fulfilled
• Withdraw consent to specific checks or disclosures at any time (noting this may affect your eligibility for certain roles)
• Unsubscribe from marketing communications at any time using the unsubscribe link in any email, or by contacting us
• Complain to the Office of the Privacy Commissioner if you believe your privacy has been interfered with (privacy.org.nz)

To exercise any of these rights, contact our Privacy Officer at privacy@younity.co.nz.

Your email should provide evidence of who you are and set out the details of your request (e.g. the personal information, or the correction, that you are requesting). Please note that we may not always be able to disclose information obtained from a reference check where it was supplied in confidence and the referee has withheld their consent for the information they provided to be shared. We will advise you if any withholding ground applies.

REFEREES.

We only contact referees that you have nominated and provided contact details for. If we wish to contact a referee not nominated by you, we will seek your express consent first.

When we contact a referee, we collect personal information about you (their feedback and opinions) from them. This is indirect collection under IPP 3A. If you have signed our consent form covering this, the already aware exception applies.

We also collect personal information about the referee directly from them (their name, role, and contact details). We provide referees with a privacy notice at the start of the reference check call or correspondence.

EMERGENCY CONTACTS.

When you provide us with emergency contact details (your emergency contact’s name, relationship, and phone number), we are collecting personal information about your emergency contact from you (a third party relative to them). We ask you to confirm, as part of our onboarding process, that you have informed your emergency contact that you have provided their details to us for emergency purposes.

COOKIES, COMMUNICATIONS AND WEBSITE TRACKING. 

We use cookies (small text files placed on your device) to monitor and improve your experience on our website. Cookies may include:

• Essential cookies — required for the website to function (e.g., session management)
• Analytics cookies — used to understand how visitors use our website (e.g., Google Analytics)
• Preference cookies — used to remember your settings and preferences

You may disable cookies by changing your browser settings. However, disabling cookies may affect the functionality of some parts of our website. We may also use tracking pixels in emails to monitor open rates and click-through rates. You can opt out of email tracking by unsubscribing from our communications.

THIRD-PARTY WEBSITES AND SERVICES.

Our website may contain links to third-party websites, products, and services. If you follow a link to another site, that site’s own privacy policy will apply. We recommend reviewing their privacy policy before providing personal information. We accept no responsibility for third-party privacy practices.

INTERNET USE.

While we take reasonable steps to maintain secure internet connections, the provision of personal information over the internet is at your own risk.

COMPLAINTS.

We take all privacy complaints seriously. If you have a concern about how we have handled your personal information:

• Step 1: Contact our Privacy Officer at privacy@younity.co.nz. We may ask you to put your complaint in writing.
• Step 2: We will investigate your complaint and respond within a reasonable time.
• Step 3: If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner at privacy.org.nz or by calling 0800 803 909.

POLICY DETAILS.

Last updated: 1st May 2026