Who we are
EverGrant is a trading name of Everlasting Group Limited, a New Zealand company. We help charities and not-for-profit organisations find and apply for grant funding across Aotearoa New Zealand and Australia.
We are the agency responsible for the personal information described in this policy. If you have a question about it, email [email protected].
What we collect
When you enquire or apply to join, we collect the details you give us, which typically include:
- Your organisation's name, region, registration number and website
- How long you have operated and your approximate annual income
- A description of your work and what you are seeking to fund
- Your funding history, including grants received, applied for or declined
- Documents you choose to upload, such as annual reports or financial statements
- Your name, email address and phone number as our contact
When we work together, we also hold the applications we draft for you, correspondence with funders, and records of outcomes and reporting obligations.
We do not use analytics, advertising trackers or third-party cookies on this website.
Why we collect it
We collect this information for three purposes only:
- To assess eligibility. Funders have specific criteria. We cannot tell you honestly whether we can help without knowing your size, structure, history and purpose.
- To prepare applications. Funders ask for financial statements, governance details and evidence of need. That information forms the application itself.
- To meet reporting obligations. Where a grant is awarded, funders usually require accountability reporting, and we help you provide it.
If you do not provide certain information we may not be able to assess you or complete an application, and we will tell you if that is the case.
Who we share it with
Funders. This is the important one. Preparing a grant application means disclosing your organisation's information to the funder. We only ever do this in applications you have reviewed and approved before submission. You decide what is sent and to whom.
Service providers. We use Cloudflare to host this website, store our records and hold uploaded documents. They process data on our behalf under their own security obligations and do not use it for their own purposes.
Professional advisers and authorities. We may disclose information where we are required to by law, or to our accountant or lawyer where necessary.
We do not sell your information, we do not share it with other charities, and we do not use it for marketing to anyone other than you.
Where your information is stored
Our records and any documents you upload are stored using Cloudflare's D1 and R2 services. Cloudflare operates a global network, which means your information may be stored or processed on servers outside New Zealand.
Under Information Privacy Principle 12 of the Privacy Act 2020 we are required to tell you this, and to take reasonable steps to ensure overseas providers protect your information to a comparable standard. Cloudflare encrypts data at rest and in transit and is contractually bound to protect it.
If your organisation cannot have its data stored offshore, tell us before you apply and we will discuss alternatives with you.
How long we keep it
- If we cannot help you and you do not become a client, we delete your application and any uploaded documents within 12 months.
- While you are a client, we keep your records for as long as we are working together.
- After we stop working together, we keep records for 7 years, because funders, Inland Revenue and our own accounting obligations may require us to evidence what was submitted and when.
You can ask us to delete your information sooner, and we will unless we are legally required to keep it.
Your rights
Under the Privacy Act 2020 you may:
- Ask what we hold about you and request a copy of it
- Ask us to correct anything that is wrong or out of date
- Ask us to delete information we no longer need
- Withdraw from working with us at any time, and we will stop using your information for new applications
Email [email protected] and we will respond within 20 working days, which is the statutory timeframe.
Keeping it secure
Our website and portal run over encrypted connections. Client records are held behind authenticated access, and only the people working on your funding can see them. Documents you upload are stored in private storage that is not publicly accessible.
No system is perfect. If a privacy breach occurred that could cause you serious harm, we would notify you and the Office of the Privacy Commissioner as the Act requires.
Australian organisations
If your organisation is based in Australia, the Australian Privacy Principles under the Privacy Act 1988 (Cth) may also apply to how your information is handled. We apply the same standards described here regardless of which side of the Tasman you are on.
Changes to this policy
If we change how we handle information we will update this page and change the date at the top. If a change materially affects existing clients, we will tell you directly rather than expecting you to check.
Questions or complaints
Talk to us first at [email protected]. We would rather fix something than have you go elsewhere frustrated.
If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner at privacy.org.nz or 0800 803 909. Australian organisations can contact the Office of the Australian Information Commissioner at oaic.gov.au.