Privacy Policy

Home / Privacy Policy

Download the Privacy Policy

1. Privacy Statement
   1. Racing Integrity Board (RIB) Website
   2. Effective Date: 27 May 2026
2. Purpose
   1. This Privacy Statement explains how the Racing Integrity Board (RIB) collects,
      uses, stores, and discloses personal information. It also explains your rights
      and choices and highlights considerations that apply because RIB performs its
      statutory objectives and functions under the Racing Industry Act 2020.
3. Key Concepts and Definitions
   1. Personal information
      1. Personal information is information about an identifiable individual.
   2. Sensitive information
      1. Some personal information is sensitive (e.g., health information,
         criminal allegations, biometrics, or information about disciplinary
         matters). Integrity-related submissions may involve sensitive
         information.
   3. Integrity information
      1. For the purposes of this statement, integrity information includes
         information relating to alleged or suspected breaches of racing rules
         or law, integrity risks, intelligence, investigations, compliance
         activity, hearings, and enforcement outcomes.
4. RIB’s Privacy Approach (Privacy Principles in Practice)
   1. The RIB is committed to complying with the Privacy Act 2020, including
      Information Privacy Principle (IPP) 3A, effective from 1 May 2026, in respect of
      all personal information it holds. In practical terms, RIB seeks to:
      1. collect only what is necessary for lawful objectives and functions and
         clearly identified purposes;
      2. be transparent about what is collected and why;
      3. keep personal information secure and limit access to those who need
         it;
      4. keep information accurate, up to date, and complete where it is relied
         on;
      5. retain information only as long as necessary for lawful purposes; and
      6. enable individuals to exercise access and correction rights, subject
         to lawful grounds for withholding.
5. Information RIB Collects
   1. RIB may collect the following types of personal information:
      1. Depending on how you interact with the website, RIB may collect
         information you provide directly such as:
         1. Identity and contact details: name, address (if supplied),
            email address (if supplied), telephone number (if supplied),
            organisation/role, and preferred contact method.
         2. Communications: content of enquiries, requests,
            complaints, tip-offs, and any follow-up correspondence.
         3. Integrity submissions: information you provide about an
            incident or concern (e.g., date/time, location, participants,
            race details), and any relevant supporting material.
         4. Attachments and evidence: documents, photographs,
            video, audio, screenshots, and metadata contained in those
            files.
         5. Declarations and consents: any acknowledgements or
            confirmations you provide in forms or notices.
      2. Information collected automatically by us (and by service providers
         acting on RIB’s behalf) such as:
         1. Technical identifiers: IP address, device type, browser
            type, operating system, language settings.
         2. Usage data: pages viewed, dates/times of access, referring
            pages, time spent on pages, clicks and navigation patterns.
      3. Cookies and similar technologies:
         1. The website may use cookies or similar technologies for
            essential site functionality and security, and for analytics to
            understand how the website is used and to improve
            performance.
      4. Industry participants and stakeholders
         1. RIB collects personal information from racing industry
            participants and other stakeholders in a range of situations
            when they interact with RIB:
         2. RIB generally uses this information to maintain relationships
            within the racing industry, carry out its statutory objectives
            and duties, and for any other use made clear at the time of
            collection or obvious from the circumstances (for example,
            to investigate a complaint).
6. Purpose of Collection and Use
   1. RIB collects and uses personal information for purposes connected with
      operating the website and performing RIB’s lawful objectives and functions
      under the Racing Industry Act 2020, including integrity functions.
7. Security and Risk Management
   1. The RIB takes security very seriously and uses reasonable and appropriate
      security protections to ensure that personal information in its care is not
      misused, lost, disclosed, modified or accessed without proper authorisation.
   2. Access to personal information held by RIB is limited to employees,
      contractors, or subcontractors who need it to do their job or perform a
      legitimate business purpose or function for RIB (for example, maintaining our
      websites).
8. Disclosure of Personal Information
   1. We may disclose your personal information to third parties to enable the RIB
      to carry out its statutory objectives and functions under the Racing Industry Act
      2020. Such disclosure will be made in compliance with the New Zealand
      Privacy Act 2020, including Information Privacy Principle 3A (IPP3A).
   2. The disclosure of your personal information to third parties will occur only
      where necessary for the performance of RIB’s lawful objectives and functions,
      including ensuring the integrity and compliance of the racing industry.
   3. Disclosures may occur to, but are not limited to, the following categories of
      recipients:
      1. Service providers – RIB may share information with trusted service providers that support
         the website and RIB operations (e.g., hosting, IT support,
         cybersecurity, analytics, communications tools). These providers are
         expected to handle information securely and only for authorised
         purposes.
      2. Racing integrity and regulatory partners (including NZTR, HRNZ, TAB NZ,
         and Entain) – RIB may share information with relevant bodies where appropriate for
         integrity purposes, including to progress investigations, monitor
         compliance, take enforcement action, coordinate regulatory
         responses, reduce integrity risk, and verify information received.
      3. Law enforcement and other government agencies – RIB may disclose personal information to law enforcement or other
         agencies where necessary and lawful, disclosure is required or
         permitted by law; or it is necessary to prevent or lessen a serious
         threat to public safety or an individual’s life or health.
      4. Disciplinary or adjudicative processes –  RIB may disclose information for prosecutions under the Rules of
         Racing, hearings, disciplinary proceedings, or decision-making
         processes (including but not limited to providing information to
         decision-makers, panels, committees or tribunals, where
         applicable). In such contexts, information may be disclosed to
         affected persons to ensure procedural fairness, subject to lawful
         grounds to withhold information (for example, to protect sources,
         witnesses, investigative methods, or safety).
      5. Legal advisers and professional support – RIB may disclose information to professional advisers (e.g., legal
         counsel) where necessary for RIB’s functions, litigation, or legal risk
         management.
      6. Publication (where applicable) – If RIB publishes decisions, outcomes, or reports, it may include
         personal information where lawful and appropriate.
9. Confidentiality, Source Protection, and Limits on What We Can Tell You
   1. Because RIB performs integrity functions, there are circumstances where:
      1. RIB may not be able to confirm whether an investigation is occurring;
      2. RIB may not be able to provide updates or details about investigations
         or outcomes;
      3. RIB may need to withhold information to protect the integrity of an
         investigation, litigation, protect informants or witnesses, or meet
         legal obligations.
   2. If you submit a tip-off or complaint, RIB will handle it carefully, but RIB may be
      limited in what it can disclose to you about actions taken.
10. Rights of access and correction
    1. Under the Privacy Act 2020, you have the right to:
       1. Access: Request access to personal information held about you; and
       2. Correction: Request correction of personal information if it is
          inaccurate, incomplete, or misleading.
    2. RIB may limit access or refuse requests where lawful grounds apply,
       particularly in integrity and enforcement contexts (e.g. to protect
       investigations, litigation, sources, or safety). If a request is refused, RIB will
       provide reasons and explain your options for complaint.
11. Information About Others
    1. If you provide information about another person (e.g. in a tip-off), only provide
       what is necessary and relevant under the objectives and functions the Racing
       Industry Act 2020. RIB will manage such information in accordance with the
       Privacy Act 2020, investigative integrity, and procedural fairness.
12. Security and Retention
    1. RIB takes reasonable steps to protect personal information through measures
       such as access controls, encryption, secure hosting, and staff training.
       Personal information is retained only as long as necessary for lawful purposes,
       after which it is securely disposed of or de-identified.
13. Cross-Border Data Transfers
    1. RIB may use third-party service providers to process or store information in
       New Zealand or overseas.
14. Changes to this Privacy Statement
    1. RIB may update this Privacy Statement to reflect changes in legal
       requirements, website functionality, or operational practices. Updated
       versions will be published on the RIB website with the effective date.
15. Contacting RIB
    1. For privacy-related requests or complaints, please contact RIB through the
       channels provided on the website. Complaints may also be directed to the
       Office of the Privacy Commissioner in New Zealand.