Introduction
The MSD Application Programme Interfaces (APIs) allow data and business rules to be sent to and from MSD in a prescribed format.
The MSD API Platform is comprised of our Sandbox and Production API Portals, our API Specification pages, our APIs, our API Content, API Credentials and documentation (collectively, the “API Platform”).
This privacy statement outlines what we do with the personal information collected in relation to use of the MSD API Platform.
The statement provides information about:
-
what personal information we collect
-
why we collect it
-
who has access to your information
-
how you can access and change your personal information.
It also tells you who to contact if you have a question about the personal information collected in relation to your use of the MSD API Platform.
What information we collect
When you create an account on our API Portals we collect:
-
your name
-
your email address (this doubles as your Portal Username)
-
what Company you work for, if applicable
-
what Country you are based in.
When you use our API Portals we collect system generated information about how you are using the Portals.
The types of information we collect include:
-
type of browser being used, eg Internet Explorer, Chrome, Firefox
-
type of device, eg PC. laptop, phone, tablet
-
date of last login
-
how long a user has had a portal account for
-
information on failed login attempts
-
details of any Developer Organisation names and Apps registered with any API calls.
Our systems remove any information that might identify you and send the rest to Google Analytics. We then use Google Analytics to get information like:
-
how many Partners are using our API Portals
-
what pages of the API Portals are visited most in a given time period
-
where our API Partners are connecting from
-
what types of devices our API Partners use.
When you use our API Platform to make API Calls we collect system generated information about your use of the MSD APIs and the MSD API Platform.
The types of information we collect includes:
-
IP addresses used to make API calls
-
type of browser being used
-
date/time of the API calls
-
whether an API call is successful or not
-
API call response time
-
details of any Developer Organisation names and Apps registered with any API calls.
Our API Platform also uses cookies to collect information about how you use our API Platform to help improve the user experience.
Why we collect this information
We collect your personal and system generated information so we can:
-
contact you
-
identify you
-
securely and appropriately administer access to MSD APIs
-
maintain the security and performance of MSD’s systems
-
provide support to you regarding your use of the MSD API Platform
-
identify further improvements we can make to the MSD API Platform.
If you choose not to provide the required personal information, we'll be unable to provide access to MSD APIs and/or the MSD API Platform.
Who will have access to your personal information
Our systems are secure and only authorised people that need to use your personal information will have access to it. This includes when we store your information electronically in cloud computing systems.
Accessing and updating your personal information
The MSD API Terms of Use specify that information you provide to us must be complete, accurate and up to date.
You can view and update your personal information by logging into the API Portals and editing your information via the My Account function.
Who to contact
You have the right to ask for a copy of any personal information we hold about you, and to ask for it to be corrected if you think it is wrong. If you’d like to ask for a copy of your information, or to have it corrected, please contact us api@msd.govt.nz.