Full privacy statement

Introduction

“Drive” when used in this privacy statement and the Terms of Use means the Drive website (drive.govt.nz), the Drive Go app and the Drive Community resources.

This privacy statement explains how NZ Transport Agency Waka Kotahi (NZTA) and Accident Compensation Corporation (ACC) (we, us) collect, store, use and share your personal information.

For you to get the most out of Drive, we will collect some personal information from you. We think it is important for you to know when we will collect personal information from you, what we will collect, why we collect it, how we will store it, and how we will use that information. Most importantly, we want you to know that we will protect your personal information, and we will only collect, use and store it in accordance with the Privacy Act 2020.

This privacy statement applies to Drive and it forms part of our Terms of Use.

We may change or update this privacy statement from time to time. If we do, we will post the updated statement on Drive and change the date at the top of the statement. If we are significantly changing the statement, we will display a notice on the Drive website.

Personal information we collect 

We do not collect personal information about you on Drive unless you choose to give it to us. 

The amount and type of information we will collect from you depends on:

  • the type of Drive user you are (eg you may or may not have a registered account with us)
  • what services you would like to access and how
  • whether you are an individual or represent a community or school-based driver education or training programme.

Personal information we collect when you register for an account

This depends on how you register your account, but personal information we may collect from you includes:

  • your name
  • your preferred name
  • date of birth
  • gender
  • ethnic group
  • the type of licence you currently hold (eg no licence, learner, restricted or full)
  • email address.

You may register for an account through the Drive website (drive.govt.nz) or through the Drive Go app.

You may register for an account using your email address.

Or you may register for an account using your Facebook, Google or Apple account. This is called social login. When you use social login, you are authorising the social network to send us your name and email address. We do not collect any other information from your social media account, nor will we share any information about you with the social network. 

If you create your Drive account using your Apple ID, Apple gives you the option to hide your personal email address from us. If you choose this option, Apple will share a uniquely generated address with us instead of sharing your personal email address. This is called a private relay email address. To view the private relay email address associated with your Drive account, go to your Apple device’s account settings.

Personal information we collect when you order Drive Community resources

When you order Drive Community resources, personal information we may collect from you includes:

  • your name
  • name of the organisation you are ordering resources for
  • your role at the organisation
  • delivery address
  • phone number
  • email address
  • website
  • information about your community or school-based driver education or training programme

Website analytics

We may collect the following information about your use of the Drive website:

  • the internet (IP) address you used to access the Drive website
  • the type of device you used to access the Drive website
  • any search terms you used
  • the pages you accessed, the links you clicked on and any documents you downloaded
  • the date and time you visited the Drive website
  • the type of web browser or operating system you used (such as Windows 10 or Google Chrome)

We use Google Analytics Double Click Cookie and demographic interests reporting features, to analyse the web traffic data for us in accordance with Google’s privacy policy.

How Google uses information from sites or apps that use its services

We also use online tools Campaign Manager and Search Ads 360 by Google to understand whether you complete certain activities on the website, the content with which you have interacted and to display relevant content to you.

Campaign Manager uses Google Floodlight tags to recognise users by a cookie ID or device ID which becomes a user ID. User IDs are associated with browsers, not people. If you use multiple devices such as a phone, a tablet and two different browsers on a laptop, each device or browser is identified separately. Similarly, if people share a computer or device, a single user ID might represent multiple people. We make no effort to associate this information with your identity except in rare situations where we need to respond to a security or safety issue.

Cookies

Cookies are small text files that are stored in your browser by websites you visit to save certain information. The next time you visit the website on the same device, the information saved in the cookies will subsequently be accessed on your device so that the website can recognise that you have already accessed and visited it with the browser you use on that device. We use this information to design and display the website in an optimum way in line with your preferences.  

Most browsers allow you to adjust the settings to tell you when you are offered a cookie so you can decide to accept it or not. You may disable or block all cookies but that may cause some features of our website to not work correctly.

Our web analytics respect and ‘do not track’ setting you might have set on your browser, but you can opt out of these Google Analytics features through ‘Google Ad settings’ or by downloading the ‘Google Analytics Opt-out Browser Add-on’.

Google Analytics – types of cookies used

Google Ad settings

Google Analytics Opt-out Browser Add-on

Drive Go app analytics

When you use the Drive Go app we analyse anonymous aggregated information about your use of the app (including visits to screens within the app) and your IP address. In particular we may collect information about which app screens and features you use so that we can analyse, evaluate and improve the app. We use Google Analytics for Firebase to do this. We do not use cookies with the app.

We may also collect and use anonymised information about your device, systems and application software to provide app upgrades, product support, statistical analysis, research and other services related to the app, including any of its features or tools.

We collect information about what stage of your learning you are at and your progress towards ranks and achievements within both the Drive website and Drive Go app. This is so that we can provide you with content and communications that are directly relevant to you and that will assist you on your Drive journey.

Drive Go app tracking information

When you use the Drive Go app, we will ask you to allow us to track your in-car location, speed and distance travelled using GPS sensors in your mobile device. This is so that you can track your driving experience and we can provide you with helpful feedback and insights. We will only use the information collected to improve your experience and for evaluation purposes. Unless required by law, we will not share this information with any other person, and in particular, your speed data will not be shared with any enforcement agency or be used for enforcement purposes. 

How we store your information

We take your privacy seriously and will store the information we collect about you securely.

We use Okta, a cloud-based identity management service based in San Francisco to manage access to some NZTA services, including Drive. Okta provides a secure single sign-on service that allows users to log in to NZTA systems and apps connected to Okta with a single ID and password. When you sign-up to use Drive the email address you provide and the password you create will be stored in Okta. You will register with your email address and you will not be able to change or update this. We recommend therefore, that you use an email address that is unique to you and is not used by anyone else. You will be able to reset your password if you have forgotten it or wish to change it for security reasons, without needing to contact us.

Other information you provide through Drive will be encrypted and stored within the Drive database for a maximum of ten years from the date your account was last active.

Deleting your account

You may delete your account at any time in your account settings. If you choose to delete your account, your personal information will be deleted from our system.

Uninstalling the Drive Go app from your device will not delete or deactivate your Drive account. You will need to delete or deactivate your account through account settings within the app before you uninstall it. 

Deleting your account means that the following information about you will be immediately deleted from the Drive database (if held):

  • your name
  • preferred name
  • date of birth
  • gender
  • ethnic group
  • email address.

Anonymised information from deleted accounts will be retained for ten years, after which it will be securely deleted.

Why we collect your information

We may collect information from you for the following purposes:

  • to allow you to create a registered account in order to login to, and use, Drive
  • to respond to any questions or correspondence from you
  • to help us to assess what content to provide to you, based on the stage of your driver education and your progress through the Drive programme
  • to help you track and evaluate your driving experience and receive helpful feedback and insights
  • to calculate and record your achievements (such as your total driving time at different speeds and during certain weather and environmental conditions) and display these to you
  • to help us evaluate and improve the effectiveness of Drive. This may include:
    • undertaking a statistical analysis (which will not be published in a form that would identify any individual) to see if Drive users are more or less likely to be driving a vehicle in an injury-causing accident, compared with other learner drivers
    • inviting you to take part in market research (but you will not be able to be personally identified by any information we use for research).

Information about you we may use to evaluate Drive

To evaluate and improve Drive, we monitor the following:

  • the demographic profile of people who sign up to Drive
  • the number of people who signed up to drive who made ACC motor vehicle-related claims compared to other young drivers.

As part of this evaluation, each month ACC match data from people who signed up to Drive with the ACC motor claims register. The information about Drive users we match to this source is:

  • your name
  • date of birth.

This information may only be used for evaluation purposes and must be kept confidential by the people and organisations conducting the evaluation. Any information collected about you as part of this evaluation will not affect any current or future ACC claims or any current or future driver licence applications and it will not be used for enforcement purposes. No individual will be identified in any reports, summaries or other documents that are produced as a result of the evaluation, whether they are published or not. 

How we may use and disclose your information

We may disclose the information we collect about you to the following people for the following purposes:

  • we will need to give our respective employees, contractors, agents and advisors (including our web and mobile app develops and web and app hosting providers) limited access to the information you provide us in order to run Drive. This access includes managing and storing your information and undertaking statistical analysis. All these people have agreed to deal with your information in accordance with the Privacy Act 2022 and this Privacy Policy; and
  • we may disclose anonymised information used for market research or statistical analysis to internal or external analysts and then publicly in the form of aggregated, anonymised results; and
  • if you order Drive Community resources, your name, organisation name, email, phone number and delivery address details will be provided to our third-party provider in order to print, assemble and distribute your resources. Your contact details may also be used by us to make contact with you to seek further information about your organisation, your order, to confirm delivery, or to offer follow up support in the use of the resources.

Otherwise, we generally do not share your information with others unless this is necessary for one of the purposes for which you gave us the information. Occasionally, we may be required by law to disclose your information – for instance, to investigate a criminal offence, or there may be safety reasons for disclosing it.

Sometimes we may ask you if we can collect more information or use your information in another way.

When we send you messages

If you are a registered account holder, we may sometimes need to send you messages directly related to your Drive account, for example, a reminder if you have not logged into your account in a while, or to invite you to participate in user research.

We may also ask you if you want to receive other messages from us, such as newsletters. We will only send you messages that are not directly related to your Drive account if you agree to this. If you have agreed to us sending you this type of message, you can unsubscribe at any time by clicking the ‘unsubscribe’ link in any message, by updating the settings on your user dashboard, or by contacting us: drive@nzta.govt.nz