Uniquely Cook Islands Website Privacy & Website Terms of Service Policies

Last Updated: 26th Oct 2025

This document contains two website policies: the Website Privacy Policy and the Website Terms of Service. The Privacy Policy explains how we handle personal information collected through the public website (e.g., pages you browse, contact forms, newsletter sign-ups, human-check/CAPTCHA, and minimal verification analytics). The Terms of Service set the rules for using the website (acceptable use, intellectual property, disclaimers, and liability). Program participation (applications, accreditation, registry publishing, retention) is covered separately in the Program Rules & Requirements (Data Privacy & Retention Schedule).

Both policies were written using privacy and legal best practices: plain-English transparency, purpose-limited and minimal collection, security by design (role-based access, encryption in transit/at rest where supported, rate-limiting/CAPTCHA), short retention periods, and an essential-cookies-only approach. Verification page views/QR scans are counted in aggregate only – no visitor profiling.

Where New Zealand or Australian law applies, we have accommodated the NZ Privacy Act 2020 (Information Privacy Principles, including IPP 12 on cross-border disclosures and notifiable privacy breach duties) and the Australian Privacy Act 1988 (Australian Privacy Principles—APP 1, 3/5, 6, 8/s16C, 11–13) and the Notifiable Data Breaches scheme. We also commit to appropriate cross-border safeguards and provide access and correction rights consistent with these frameworks.

These policies should be reviewed by an appropriate legal authority prior to implementation.

Developer & Content Implementer’s Checklist (ongoing)

  • Header/footer links present: Privacy (Website) | Terms (Website).
  • Privacy page contains: plain-English scope; data inventory; purposes/bases; cross-border statement; security & retention; rights; breach note; change log.
  • Terms page contains: scope; acceptable use; IP; disclaimers & liability (“to the extent permitted by law” + non-excludable rights); links/third parties; changes; governing law/venue.
  • Cookie banner stays off until non-essential analytics or pixels are introduced; when activated, banner provides choices and Privacy page is updated.
  • Cross-border safeguards documented (supplier list + hosting region) and aligned to NZ IPP 12 / AU APP 8; Site Notice lists hosting region/provider.
  • Breach plan on file: internal steps + regulator pathways (NZ NotifyUs; AU NDB).
  • Sign-up flow shows Declarations & Agreements summary with checkboxes; optional comms are opt-in; deep links to Program Rules §10 (data) and §6 (mark usage).
  • Registry page includes a short privacy note: “verification page views are counted in aggregate only; no visitor profiling.”

Uniquely Cook Islands Website Privacy Policy

Last Updated: 26th Oct 2025

  1. Scope of this policy

This policy covers personal information collected through the Uniquely Cook Islands public website and general web services (pages you browse, contact forms, newsletter sign-ups, human-check/CAPTCHA, security logs, and minimal verification analytics).
If you apply to or participate in the program via the Business Portal, privacy, data collection and retention for applicants/participants are set out in the Program Rules & Requirements (Data Privacy & Retention Schedule).

  1. Who we are and how we handle data

Uniquely Cook Islands is administered by the Business Trade & Investment Board (BTIB) as the Program Administrator. A separate Governance Panel sets program policy and hears appeals.
For the website, BTIB is the data controller and uses contracted service providers (processors) for hosting, email, security and related services.
Contact: btib@cookislands.gov.ck | +682 24296 | Address on the site’s Contact page.

  1. What we collect on the website
  • Technical/session data: IP address, device/browser, pages viewed, timestamps, error & security logs, human-check/CAPTCHA signals.
  • Cookies/related tech: essential cookies for session security and bot protection; no advertising cookies.
  • Contact/enquiry data: the details you submit (name, email, message) and our follow-up communications.
  • Newsletter sign-ups: email address and your preferences.
  • Verification traffic (aggregate): counts of visits/QR scans to public registry pages. We do not profile visitors.
  1. Why we use it (purposes & lawful bases)

Provide and secure the site, respond to enquiries, send requested updates, measure basic usage (aggregate only), detect/prevent abuse, and comply with law.
Lawful bases: legitimate interests (site operation, security, aggregate analytics); consent (newsletters); legal obligations where applicable.

  1. Sharing

We share data with service providers under contract and confidentiality and disclose information if required by law or to protect rights and safety.

  1. International transfers

Some providers may process data outside the Cook Islands. We use reputable vendors and appropriate contractual/technical safeguards. Where New Zealand or Australian privacy law applies to a user or process, we take steps consistent with NZ Privacy Act 2020 (IPP 12) and the Australian Privacy Principles (APP 8 / s16C) for overseas disclosures. Our current hosting region/provider will be listed on the Site Notice page.

  1. Security

Controls include role-based access, encryption in transit/at rest where supported, password rules and email verification where accounts exist, rate-limiting, and CAPTCHA. We operate an incident response and breach notification process (see §10).

  1. Retention
  • Security/error logs: up to 90 days.
  • Contact enquiries: life of the enquiry plus up to 12 months.
  • Newsletter data: until you unsubscribe or the newsletter ceases.
  • Aggregate verification counts: retained without personal identifiers.
  1. Your choices & rights

Unsubscribe from newsletters at any time. You may request access to or correction of your personal information. Contact BTIB for assistance.

  1. Data breaches

In the unlikely event of a data breach affecting your personal information, we will assess and notify affected individuals and relevant authorities in line with applicable law (e.g., NZ Privacy Act 2020 notifiable privacy breaches; Australia’s Notifiable Data Breaches scheme).

  1. Cookies

We use essential cookies only. If we introduce non-essential analytics or third-party pixels, we will show a cookie banner with choices and update this policy.

  1. Children

The website is intended for adults and businesses. We do not knowingly collect children’s personal information through the site.

  1. Changes

We will update this page if the policy changes and show the Last updated date above.

 

Terms of Service

Last updated: 26th Oct 2025

  1. Scope & acceptance

These Terms govern your use of the Uniquely Cook Islands website provided by BTIB as Program Administrator. By using the site, you agree to these Terms and the Website Privacy Policy.
Participation in the Uniquely Cook Islands program (including mark/token usage) is governed by the Program Rules & Requirements, not these Terms.

  1. Definitions

Program Administrator means BTIB.
Governance Panel means the independent panel that sets program policy/standards and hears appeals.
Website means public pages and general web services, excluding Business Portal processes governed by the Program Rules.

  1. Using the site

Keep any login details secure (where accounts are offered). Do not misuse the site (no scraping, security probing, spam, or unlawful content). We may suspend or restrict access to protect the site and users.

  1. Content & intellectual property

The Uniquely Cook Islands mark/tokens and site content are protected. Except as permitted by law, do not copy, modify, or exploit content without permission. Use of the mark/tokens in trade is governed exclusively by the Program Rules.

  1. Third-party services/links

We are not responsible for third-party sites or services linked from our website.

  1. Disclaimers

The site is provided “as is.” We do not warrant uninterrupted or error-free operation, or completeness of information. Nothing on the site is legal advice.

  1. Liability

To the extent permitted by law, we exclude liability for indirect or consequential loss. Any site-related liability is capped at a reasonable amount and remains subject to non-excludable consumer rights (including under the Australian Consumer Law).

  1. Indemnity

You indemnify us against losses arising from your unlawful or prohibited use of the site.

  1. Changes to the site/terms

We may change, suspend, or withdraw parts of the site. We may update these Terms; the effective date will be posted.

  1. Governing law & venue

Cook Islands law applies, with courts/tribunals in Avarua, Cook Islands, unless mandatory local law requires otherwise.

  1. Contact

See the Website Privacy Policy for BTIB contact details.

Last Updated: 02/10/2025

Scroll to Top