Privacy notice for Harbour
This notice explains how and when Harbour collects personal information, what we do with it and how to ask to see or change it.
Purpose
The purpose of this privacy notice is to explain what information this independent information and document service holds and how the portal uses it.
Harbour is not Immigration New Zealand, the New Zealand Government or RealMe. We do not issue visas or determine immigration status.
Use of personal information
The portal uses information provided by authorized staff and customers to:
- manage customer accounts and assigned documents
- check the name and passport details entered for document access
- help staff find records using application and client numbers
- record basic access and administration events.
Sharing your personal information
Authorized staff enter a customer name, passport details, an optional application number and client number, a document category and an original PDF. Customers enter a username and password, then their name and passport number when checking an assigned document.
The full passport number entered for lookup is transformed into a keyed hash. The record holds that hash and the last four passport characters rather than a readable full passport number. Uploaded PDFs may themselves contain personal information.
How document access works
The server checks the name and passport details against the available record assigned to the signed-in account. A match creates 10 minutes of document access for that session. An account cannot use this check to access another customer’s record.
Feedback you provide
The page-helpfulness options are local controls. They do not currently submit or store a feedback response. Email links open your own email application; your email provider and the recipient handle any message you choose to send.
Do not send passport scans, passwords or sensitive documents through an unverified contact channel.
User research participation
This installation does not include a user research registration form, screen recording or a research-participant database.
Storage and deletion of information
Documents are held in private server storage and delivered through an authorized route. Staff manage customer records, including application and client numbers, through the admin panel.
Updating, archiving or deleting a record revokes existing document access. Deleting a document record also removes its stored PDF. Your service provider is responsible for retention of original records and backups.
Session and activity information
The portal stores session information and basic event descriptions, such as a document being added or downloaded. Session metadata can include an IP address and browser details. Event descriptions do not include full passport numbers or customer contact information.
When scheduled maintenance is running, it removes expired sessions and activity or staff-access records older than 90 days. Hosting providers may retain separate access logs.
Records and disclosure statement
This is an independent service. The portal does not provide a live government verification or make a visa decision. Contact your service provider for its full business privacy policy, retention arrangements and handling of requests about personal information.
Access and correct your personal information
Questions and corrections
Contact your service provider through your established contact channel if you want to:
- ask what information is held about your account or document
- request a correction to your name, application number or client number
- discuss retention, deletion or a concern about privacy.
The provider may need to confirm your identity before discussing a private record. Do not send your password or a complete passport number through an unverified channel.
Contact details
Contact Harbour for help using the details provided by your service team.
If you have a privacy concern
Raise the concern with your service provider and ask for its privacy contact and complaint process.