Privacy Policy

We collect information you give us directly, and information that becomes known to us through your participation in a Grove, Seed Group, or Group. In plain terms, this falls into six categories:

1. Login and account information — your username, name, display name, and any public pseudonym you choose to set.
2. Grove contact information — your name, membership status, grade or initiation level, Druid teaching order affiliation (if any), and the groups you belong to. This also includes event venue information — where an event is hosted at a private home, we record a venue name (for example, a property name) rather than a street address.
3. Profile information you choose to provide — a profile picture, if you add one (this is entirely optional), and information shared with us if you choose to sign in using a third-party identity provider (currently Google; we may support others, such as Apple or Discord, in future).
4. Event and camp information — event registrations, role signups, and any dietary or accessibility needs you tell us about.
5. Content you provide — blog posts and comments you choose to publish on the platform.
6. Technical and security information, generated automatically — a record of changes made to your data (an audit trail), and limited technical information (such as device or connection information) captured by our error-monitoring tools when something goes wrong.

Different people involved in running Druidry Aotearoa have different levels of access, scoped to what they need:

• Platform administrators have access across the whole platform, for operating and supporting it.
• Content moderators can view posts and comments awaiting review, and hide flagged content, for moderation purposes — they do not have broader access to contact information.
• Grove, Seed Group, and Group administrators have access to their own group’s (and any child groups’) information, for administering that group.
• Group coordinators have narrower access still — read-only contact information plus event management, limited to their specific area of responsibility.
• Other members may see limited information about you — such as your display name, or, if you belong to the same Grove, Seed Group, or Group, your name — depending on your and their membership status. We do not show your email address to other members.
• Separately, the person who hosts and maintains the platform’s underlying technical infrastructure has direct access to it for maintenance and support. This is broader than any in-app role above, and is currently held by one person.
• Group, Grove, and Seed Group administrators may use their own additional tools (for example, email newsletter services) to help administer their group. These tools are independent of Druidry Aotearoa and outside our control — but administrators remain bound by New Zealand law, including the Privacy Act 2020, in how they handle your information wherever it’s held. See our Terms & Conditions for more.
• Anyone, including people who are not logged in, can see content you choose to publish publicly (posts and comments set to public visibility, rather than restricted to your channel or group). You can set a public pseudonym to use instead of your real name or display name on anything you publish publicly.

• If you are not a member of any Grove, Seed Group, or Group and have not logged in for a year and a day, our practice is to archive or dispose of your login details.
• If you are a member, we retain your login details for as long as you belong to any Grove, Seed Group, or Group. Once you have left, or been removed from, all of them, the same year-and-a-day period applies before we archive or dispose of your login details.
• We retain your name and a record of your participation (such as grades, roles, and event attendance) indefinitely, to preserve the accuracy of the Grove’s history — even after you leave or ask us to remove other information about you.
• If you are aged 15 to 17 and create your own account, we ask you to confirm you are old enough, or that a parent or guardian consents. We do not ask for or store your date of birth — only that confirmation, and when it was given. We dispose of that confirmation once enough time has passed that everyone who could have given it is now definitely an adult.

Children who attend Grove activities with a parent or guardian may be recorded in our system by that parent or guardian, or by a Grove administrator, without needing an account or login of their own.

If you are old enough to create your own account (see Retention, above, for our minimum age), you may do so with a parent or guardian’s consent.

We take reasonable technical and organisational measures to protect your information, including multi-factor authentication and passkey support for all accounts, database-level access controls that restrict what each type of user can see, and encrypted connections. Our infrastructure providers maintain independent security certifications. No system can guarantee complete security, but we take this seriously — including going beyond what’s typical for a community organisation of our size.

We may amend this policy from time to time. The date at the top shows when it was last revised. If you keep using Druidry Aotearoa after a change, that means you accept the updated policy.