Privacy Notice
Mentoring @ Victoria University Of Wellington Privacy Notice

By applying for user access you agree to the following:  

Te Herenga Waka—Victoria University of Wellington values your privacy and is committed to the protection of your information from unauthorised use and disclosure, except where permitted by law. The Information that you provide through your use of this online platform is being collected by both Chronus and Victoria University of Wellington. The Information may be accessed and used by the University for the purposes described in the University’s Privacy Notice.  
Note that the University has introduced mandatory COVID-19 vaccinations for all students, staff, and visitors to our campuses. Both under the mandate, and the Red setting, all staff, students, and visitors on campus and participating in face-to-face University activities offsite must be vaccinated. This includes in-person mentoring in the Alumni as Mentors programme. 
Please note that your messages, activity, and communications on the platform is stored on the platform and accessible to the University and Chronus. This information may be accessed and viewed for the purposes described in the University’s Privacy Notice. If you have any questions about how the information you provide for mentoring purposes is collected and handled, please contact alumniasmentors@vuw.ac.nz.  

Please refer to the Chronus’s privacy notice for how this Information will be stored and used by Chronus.   

You are required to comply with all applicable University statutes, policies and procedures.   

Chronus Privacy Notice
Last Updated: April 28, 2025
Chronus LLC and its affiliates (“we” or “our”) provide access to our software-as-a-service offerings, including mentoring and connection communities software, on the Chronus platform (the “Services”) to individual users (“you”) at the direction of companies and organizations (“Organizations”), which are our customers.
At Chronus, we value your privacy. This Privacy Notice (“Notice”) sets out how your personal information may be collected or used by us in order to provide the Services. We recognize that privacy is an ongoing responsibility, and as such, we may update this Notice from time to time as we undertake new privacy practices.
The Services may include links, integrations or references to non-Chronus websites, services, materials, or entities (collectively “Third-Party Services”). This Privacy Notice does not apply to Third-Party Services. Third-Party Services are subject to their own privacy policies and you are encouraged to review such policies prior to use of any Third-Party Services.
Role of Chronus: With respect to the Services, Chronus is a “data processor” or “service provider” under applicable privacy laws. This means that when you use our Services, we are processing (using) your personal information at the instruction of your Organization, who determines the means and purposes of processing your personal information as the “data controller” or “business”. This Notice sets out our standard privacy practices for the Services. As the “data controller”, your Organization may instruct us to treat your personal information differently than described in this general Notice. Please reach out to your Organization for more information.
How we Process your Personal Information: We collect your personal information from your Organization or directly from you. In order to provide the Services to you, we generally collect personal identifiers (such as your name, email and IP address) along with any additional personal information requested by your Organization or voluntarily provided by you or your Organization. We may also “passively” collect your personal information using various technologies, such as cookies, web beacons, and navigational data collection (clickstream, log files, server logs, etc.). We will only process your personal information for the purposes of providing you with the Services (including for the purposes of building, improving and securing our Services), or as otherwise instructed by you, your Organization or as required by applicable law.
We do not sell your personal information. We also do not share your personal information for targeted advertising purposes as defined under CPRA. If this changes, we will provide you with the right to opt out.
We only share your personal information with third parties who facilitate the provision and support of our Services (“subprocessors”) or as otherwise requested by you. We require our subprocessors to enter into written agreements obligating them to comply with applicable data protection laws and implement appropriate security measures to protect your personal information. We may also disclose your personal information to governmental authorities and other third parties where required by law or a valid legal process.
Unless otherwise instructed by your Organization, we (including our subprocessors) will only process or transfer your personal information as necessary to provide and support the Services. This may include transfers to countries outside the EEA, which may not provide the same level of data protection as your home country. Where required, we rely on approved data transfer mechanisms, such as Standard Contractual Clauses (SCCs) or adequacy decisions, to ensure your personal information remains protected. We will comply with all applicable laws relating to the processing and international transfer of personal information.
Security and Data Retention: To help protect the privacy of your personal information, we maintain appropriate and industry standard physical, technical and administrative safeguards. We update and test our security technology on an ongoing basis. In addition, we train our employees about the importance of confidentiality and maintaining the privacy and security of your personal information. Where required by applicable law, we keep your personal information for no longer than necessary for the purposes for which it is processed. The length of time for which we retain your personal information depends on the purposes for which we collected and used your personal information and/or the laws applicable to your personal information.
COPPA Requirements: We do not direct or knowingly advertise the Services to individuals under the age of thirteen.
Data Subject Requests, Questions and Complaints: You may have additional “data subject rights” under applicable laws (such rights may include, but are not limited to, the right to access and rectify your personal information, the right to request additional details about how we use your information, the right to request that we delete, make portable or stop processing your personal information, the right to contact your data protection supervisory authority and the right not to receive discriminatory treatment from us based on your election to to exercise your applicable data subject rights). Your Organization is responsible for exercising these rights (should they apply). Please contact your Organization if you wish to learn more.
If you have any other questions or concerns related to how your Organization is processing your personal information, please contact your Organization. If you have questions or concerns related to how we at Chronus process your personal information, please contact us at: legal@chronus.com