Privacy policy

The website and the Satisfy Volunteers app are run by Satisfy Food Rescue, based in Rangiora, North Canterbury, for our volunteers and volunteer coordinators. We are responsible for the personal information you give us here and handle it in line with the New Zealand Privacy Act 2020.

Only what we need to run volunteering safely:

• Your application. Your name, email address, phone number, suburb, year of birth, the roles you are interested in, your availability and anything you tell us in the volunteer form.
• Your profile. Your phone number, suburb, emergency contact's name and phone number, a note about your availability, whether you are happy to be asked for last-minute cover, your roles and your regular slot.
• Your volunteering. The shifts you book, cancel and attend, the training you have done and the sessions you sign up for, and the times you mark yourself away, with the reason you choose (holiday, sick or other) and any note you add.
• Coordinator notes. Notes coordinators write and a record of contact with you, such as phone calls and changes to your profile, roles or account.
• Messages. A copy of the emails and app notifications we send you, and whether they were delivered.
• Signing in. How you sign in (see below), when you last signed in, and for each signed-in device the browser or phone it is. If you use the app and allow notifications, your phone's notification address and name.

We do not use analytics, advertising or tracking cookies. The only cookies keep you signed in and complete a sign-in with Google or a passkey.

• Password. We store only a one-way hash of your password, never the password itself, so nobody at Satisfy can see it.
• Google. If you choose “Continue with Google”, Google tells us your email address, whether Google has verified it, and an identifier for your Google account. We use these only to match you to the volunteer account Satisfy has already set up for you: Google sign-in never creates an account. We do not receive your Google password and ask for no access to your Gmail, contacts, calendar or anything else in your Google account. Google's own privacy policy also applies.
• Passkeys. We store the public half of the passkey and the name you give it. The private half never leaves your device, and a passkey gives us no access to anything else on it.
• Sign-in links. Invite and password reset links work once and expire. We keep only a fingerprint of each link, never the link itself.

In Sign-in and security you can remove a passkey, disconnect Google and sign out your other devices.

We use your information to:

• set up and protect your account and keep you signed in;
• roster you onto shifts and keep track of who is covering each one;
• contact you about your shifts, training and account, including reminders and, if you have said yes to it, requests for last-minute cover;
• make sure you have the training each role needs before you book it;
• reach your emergency contact if something happens to you while volunteering;
• report on our volunteering in totals that do not name you, and meet our legal and health and safety duties.

Satisfy's volunteer coordinators see your profile, history and notes so they can roster and look after volunteers. Other volunteers cannot see your details. We also use a few services that handle information for us:

• Infoodle, our supporter database, where the volunteer form arrives and where we keep your contact details.
• Resend, which delivers our emails.
• Expo, which delivers app notifications through Apple's and Google's notification services.
• Google, if you sign in with Google.
• Our hosting provider, which runs the server and database the website and app use.

Some of these services store or process information outside New Zealand. We share only what each one needs to do its job, and otherwise disclose personal information only when the law requires or allows it, for example to deal with a serious threat to someone's safety.

We keep your information while you volunteer with us and afterwards only as long as we need it for our legal, safety and reporting duties. A browser is signed out after 30 days without use, and after 180 days at most; the app after 180 days without use. When you stop volunteering a coordinator closes your account, which signs you out everywhere. You can ask us to delete your information at any time; we may need to keep some records where the law requires it.

Only you and authorised coordinators can see your information. Everything is sent over encrypted connections, sign-in is limited to stop password guessing, and coordinators' access is checked on every page. No system is perfectly secure, but we take reasonable steps to protect your information and review them as the service changes.

You can ask to see the information we hold about you and ask us to correct it. You can update most of it yourself in your profile and Sign-in and security. For anything else, including deleting your information, email volunteering@satisfyfoodrescue.org.nz. If you are not happy with how we have handled your information, you can complain to the Office of the Privacy Commissioner.

We may update this policy as the website and app change. We will update the date at the top, and tell volunteers by email about any significant change.

For any question or request about your privacy, email volunteering@satisfyfoodrescue.org.nz.