Privacy Policy
Last updated: May 2025. This policy covers how Steddly collects, uses, and protects personal information in accordance with the New Zealand Privacy Act 2020.
Who we are
Steddly is a New Zealand–based service that collects appreciation and positive recollections from aged care residents, family members, and friends, and delivers anonymised versions of those messages to aged care nurses via SMS. Our contact address is hello@steddly.com.
What Steddly collects from nurses
When a nurse opts in to the Steddly programme, we collect:
- Mobile phone number (for SMS delivery only)
- Shift pattern preference (to time messages appropriately)
- Opt-in consent confirmation
We do not collect names, employer details, clinical role information, or any other personal data from nurses beyond the above. Nurses enrol individually and voluntarily. Their employer is not involved in or notified of individual enrolments.
What Steddly collects from message contributors
Message contributors — residents, family members, and friends — share appreciations or recollections through a guided collection session. We do not collect the names, contact details, or any personally identifying information of contributors. Contributions are collected anonymously by design and cannot be linked back to the person who submitted them.
How we use the information we collect
Nurse phone numbers and shift pattern preferences are used solely to deliver Steddly SMS messages. We do not use this information for any other purpose. We do not use it for marketing, profiling, or analysis beyond what is necessary to operate the service.
Facilities receive only anonymous, group-level outcome data. No individual nurse data — including phone numbers, shift patterns, or message engagement — is ever shared with the facility that enrolled them.
Third-party sharing
We do not sell, rent, or share personal information with third parties. We use a third-party SMS delivery provider to send messages. This provider receives phone numbers for the purpose of message delivery only and is bound by confidentiality obligations. No other personal data is shared with any third party.
Data retention
Nurse phone numbers and shift pattern data are retained for the duration of the programme. At the conclusion of a pilot, we will delete all nurse personal data within 30 days unless the nurse has separately enrolled in a continuing programme. Anonymised contribution content may be retained indefinitely for programme improvement purposes, as it contains no personal information.
Your rights under the NZ Privacy Act 2020
Under the New Zealand Privacy Act 2020, you have the right to:
- Request access to any personal information Steddly holds about you
- Request correction of that information if it is inaccurate
- Request deletion of your personal information at any time
To exercise any of these rights, email us at hello@steddly.com. We will respond within 20 working days.
Opting out
Nurses can opt out of the Steddly programme at any time by replying STOP to any Steddly message. On receipt of a STOP reply, all future messages will cease immediately and phone number data will be deleted within 14 days.
Security
We take reasonable technical and organisational steps to protect personal information against unauthorised access, disclosure, alteration, or destruction. Access to personal data is limited to personnel who require it to operate the service.
Changes to this policy
We may update this policy from time to time. Any material changes will be notified to enrolled participants by SMS before taking effect. The current version of this policy is always available at steddly.com/privacy.html.
Contact
If you have any questions about this policy or about how Steddly handles personal information, please contact us at hello@steddly.com.