1. Our Commitment to Privacy
Everest Group Limited (“Everest”), also known as Everest People, is committed to protecting the privacy of individuals and handling personal information in accordance with the Privacy Act 2020.
This policy applies to all areas of our business, including recruitment, coaching, consulting, training, and organisational development services.
We value the trust placed in us by clients, candidates, employees, and other stakeholders when sharing personal information. This Privacy Policy outlines how we collect, use, store, and protect personal information across our organisation.
2. Collection of Personal Information
Everest may collect personal information for legitimate business purposes, including but not limited to:
- • Managing client relationships and service delivery
- • Processing financial transactions (e.g. bank details for invoicing or payments)
- • Conducting recruitment and employment-related activities
- • Delivering coaching, training, and assessment services
- • Performing reference checks, psychometric assessments, and employment investigations
- • Recording meetings or interviews (audio/video)
- • Managing subscriptions and communications (e.g. newsletters)
Using cookies and similar technologies to operate our website, remember preferences, understand website use and improve the online experience.
Information collected may include names, contact details, employment and education history, application and interview information, references, assessment results, identification and eligibility information, financial or payment information, recordings, correspondence, and other information relevant to the service being provided. We aim to collect personal information directly from individuals wherever possible, through phone, email, in-person meetings, online forms, or other interactions. In some cases, information may be collected from authorised third parties, such as previous employers, referees, clients, government agencies and verification providers, in accordance with the Privacy Act 2020.
Unless we advise otherwise, providing personal information to Everest is voluntary. However, if requested information is not provided, we may be unable to provide a service, progress an application, complete a verification or assessment, process a payment, or respond fully to an enquiry.
3. Third Party Providers
Everest uses trusted third-party service providers to support the delivery and administration of our services. These may include providers of:
- • recruitment and candidate management systems;
- • identity, criminal record, immigration, qualification and employment verification services;
- • psychometric assessment and profiling tools;
- • transcription, meeting recording and note-taking services;
- • cloud-based technology, data storage and communications systems; and
- • financial, payment and business administration services.
Some service providers may process or store personal information outside New Zealand. Before disclosing personal information to an overseas provider, where Information Privacy Principle 12 applies, Everest will take reasonable steps to confirm that the provider is subject to the Privacy Act 2020 or provides safeguards that are comparable to those under New Zealand law. Where comparable safeguards cannot be established, we will obtain the individual’s authorisation after informing them that the overseas recipient may not provide the same level of protection.
4. Collection from Other Sources
Wherever practicable, Everest collects personal information directly from the individual concerned. In some circumstances, we may collect information from other sources where this is authorised, necessary or appropriate for the services we are providing. This may include previous employers or referees, clients, government agencies, verification providers and publicly available sources.
Where practicable, we will take reasonable steps to inform individuals when we collect personal information about them from another source. This information will include the fact that the information has been collected, the purpose of collection, the intended recipients, the name and address of Everest as the agency collecting and holding the information, any law authorising or requiring the collection, and the individual’s rights to access and request correction of their information. This notification may not be provided where an exception under the Privacy Act 2020 applies.
5. Sensitive and Additional Personal Information
We do not routinely request sensitive personal information unless it is necessary for a specific purpose related to the services we provide.
In some circumstances, we may need to collect information such as date of birth, nationality, country of birth/origin, or identification documents for purposes including Ministry of Justice criminal record checks, immigration or work eligibility checks, and identity verification.
Where this information is required, we will only collect information relevant to the specific purpose and will handle it in accordance with this Privacy Policy.
6. Use of Personal Information
Personal information will only be used for the purpose for which it was collected, or for a directly related purpose that an individual would reasonably expect in connection with their relationship with Everest.
Where we are providing services to a client, we may use their work contact details to communicate with them about that relationship, including service information, relevant updates and welcome communications.
We may invite clients and other contacts to subscribe to Everest communications, including our monthly client newsletter. Individuals will be added to a mailing list only where we have an appropriate basis to do so and may unsubscribe at any time.
Access to personal information is restricted to authorised Everest personnel and approved third parties where necessary to deliver our services. Everest takes reasonable steps to protect personal information from misuse, loss or unauthorised access.
7. Retention of Personal Information
Everest retains personal information only for as long as it is reasonably required for the purposes for which it was collected, to provide our services, or to meet legal, contractual or legitimate business requirements. When personal information is no longer required, we will take reasonable steps to securely delete, destroy or anonymise it.
8. Use of Artificial Intelligence (AI) Tools
Everest People uses trusted Artificial Intelligence (AI) tools, including Microsoft Copilot and other AI-powered platforms, to enhance the efficiency and quality of our services.
We are committed to ensuring that any use of AI aligns with our privacy obligations under the Privacy Act 2020. Specifically:
- • Data Handling: Personal information processed through AI tools is handled with the same level of care and protection as all other data we collect. We do not use AI tools to make automated decisions that have legal or similarly significant effects on individuals without human oversight.
- • Third-Party Providers: Our AI tools are provided by third-party vendors that we assess for appropriate privacy, security and contractual safeguards. Personal information processed through these tools remains subject to the protections described in this policy, including our requirements for approved providers and overseas processing.
- • Transparency and Consent: We use AI tools only for purposes connected with the reason the personal information was collected, or where another use is authorised or permitted by law. If we propose to use personal information for a new purpose that is not directly related to the original purpose, we will obtain authorisation where required before doing so.
- • Data Minimisation: We ensure that only the minimum necessary personal information is used when interacting with AI tools, and we avoid inputting sensitive or unnecessary personal data.
9. Managing Personal Information
Everest maintains strict security protocols across physical, digital, and personnel systems. All employees are responsible for handling personal information in accordance with this policy and the Privacy Act.
Individuals may opt out of direct contact at any time by calling 0800 Everest (0800 383 737) or info@everestpeople.co.nz
Requests to update or correct personal information can be made in writing to the Privacy Officer.
10. Payment Information
Everest accepts credit card payments through Stripe, a secure third-party payment processor. We do not store or retain any credit card details. All payment information is handled directly by Stripe in accordance with their privacy and security standards.
11. Subscriptions and Communications
Clients and service users may subscribe to Everest’s newsletter. Contact details are stored securely in our communications database and used for service updates and newsletters. We do not sell or rent these details. They may be processed by approved service providers that support our communications, subject to appropriate privacy and security safeguards, and will not otherwise be disclosed unless authorised or required by law.
12. Access and Correction
Individuals may request access to the personal information Everest holds about them and may request correction if they believe it is inaccurate, incomplete or misleading. We will respond in accordance with the Privacy Act 2020. Where a requested correction is not made, the individual may ask us to attach a statement of correction to the information. Requests should be directed to:
The Privacy Officer
Everest Group Limited
PO Box 9466, Waikato Mail Centre, Hamilton 3248
Email: info@everestpeople.co.nz
13. Privacy Breaches
Everest takes privacy breaches seriously and has a procedure for promptly containing, assessing, investigating and responding to suspected or actual breaches. Where a breach has caused, or is likely to cause, serious harm, we will notify the Office of the Privacy Commissioner and affected individuals as required by the Privacy Act 2020. Privacy concerns or suspected breaches should be directed to the Privacy Officer.
14. Disclosure of Personal Information
Everest does not sell or rent personal information. We may disclose personal information where this is necessary for the purpose for which it was collected, where the individual has authorised the disclosure, where it is required or permitted by law, or where it is necessary for an approved third-party provider to deliver services on our behalf.
We take reasonable steps to ensure that any disclosure is appropriate and that personal information is handled securely.
If an individual is not satisfied with our response to a privacy concern, they may make a complaint to the Office of the Privacy Commissioner. Information about making a complaint is available at www.privacy.org.nz.
15. Policy Updates
Everest reserves the right to update this Privacy Policy at any time. The latest version will be available on our website.