Privacy Policy

1. Who We Are

Thriveeiligament ("we", "us", "our") is the agency responsible for your personal information under the Privacy Act 2020 (New Zealand). We operate an educational website about gentle everyday movement practices.

Thriveeiligament
297 Warwick Road, 21
Stratford 4391, New Zealand
Email: inquiry@thriveeiligament.world
Phone: +64 6 928 4560

2. Scope and Purpose

This Privacy Policy explains how we collect, use, store, disclose, and protect personal information when you visit thriveeiligament.world or contact us. We handle personal information in accordance with the Privacy Act 2020 and its Information Privacy Principles (IPPs).

Our website provides free educational content. We do not sell products or paid services through this website. If you access our site from the European Economic Area, the General Data Protection Regulation (GDPR) may also apply; see Section 13.

3. Personal Information We Collect

3.1 Information you provide directly

When you use our contact form, we may collect:

• Your name
• Your email address
• Your message content
• Your consent to our processing of this information

3.2 Information collected automatically

When you visit our website, we may automatically collect technical information such as:

• IP address (anonymised where reasonably practicable)
• Browser type and version
• Operating system
• Referring URL
• Pages visited and approximate time spent
• Date and time of access

Some of this information may be collected through cookies and similar technologies. Non-essential cookies are used only with your consent. See our Cookie Policy.

3.3 What we do not collect

We do not knowingly collect sensitive health information, payment details, or government-issued identification numbers through this website.

4. How We Collect Information

We collect personal information:

• Directly from you when you submit the contact form or email us
• Automatically through server logs and, where consented, analytics or advertising technologies
• From your browser or device when you interact with cookie consent controls

Where reasonable, we collect information directly from the individual it relates to (IPP 1 and IPP 2).

5. Why We Use Personal Information

We use personal information only for lawful purposes connected with our functions, including:

• Responding to enquiries and messages you send us
• Operating, securing, and maintaining our website
• Understanding site usage to improve content and usability (with consent where required)
• Measuring advertising performance where marketing cookies are enabled
• Complying with legal obligations under New Zealand law
• Protecting against unauthorised access, abuse, or fraud

We do not use your contact details for unsolicited direct marketing unless you have given clear consent or an exception under the Unsolicited Electronic Messages Act 2007 applies.

6. Legal Basis for Processing

Under the Privacy Act 2020, we must have a lawful purpose for collecting and using personal information and must not use it in ways that are unfair or unreasonably intrude on privacy.

Our main grounds for processing are:

• Your consent: For contact form submissions and non-essential cookies
• Purpose connected with our functions: To operate an informational website and respond to communications
• Legal obligation: Where required by applicable New Zealand law
• Legitimate operational needs: For website security, abuse prevention, and essential site functionality

For visitors in the EEA, we also rely on GDPR Article 6 bases equivalent to the above where applicable.

7. Disclosure of Personal Information

We do not sell your personal information. We may disclose information to:

• Hosting, infrastructure, and IT support providers who process data on our behalf
• Analytics or advertising partners (only where you have consented to the relevant cookies)
• Professional advisers where reasonably necessary
• Law enforcement or regulators when required or authorised by law

We require service providers to handle personal information securely and only for specified purposes (IPP 5 and IPP 11).

8. Overseas Disclosure

Some service providers may store or process personal information outside New Zealand. Before disclosing personal information overseas, we take steps required by IPP 12, including ensuring the recipient is subject to comparable privacy safeguards, or that you are aware of the disclosure and agree to it, or that another permitted ground applies.

If you would like more information about overseas recipients and safeguards, contact us using the details in Section 14.

9. Data Retention

We retain personal information only for as long as necessary for the purposes for which it was collected (IPP 9), including:

• Contact form data: up to 24 months after the last correspondence, unless a longer period is required by law or for dispute resolution
• Analytics data: up to 26 months, subject to your cookie preferences
• Server security logs: up to 90 days
• Cookie consent records: until you withdraw consent or clear your browser storage

When information is no longer needed, we securely delete or anonymise it.

10. Security

We take reasonable safeguards to protect personal information from loss, unauthorised access, use, modification, or disclosure (IPP 5), including:

• HTTPS encryption for data transmitted between your browser and our servers
• Access controls limiting internal access to authorised personnel
• Periodic review of our security practices
• Secure storage with encryption at rest where applicable

No method of transmission or storage is completely secure. Please use caution when sending information online.

11. Notifiable Privacy Breaches

If a privacy breach has caused or is likely to cause serious harm, we will assess the breach and, where required under the Privacy Act 2020, notify the Office of the Privacy Commissioner and affected individuals without undue delay.

12. Your Rights Under New Zealand Law

Under the Privacy Act 2020, you have the right to:

• Access personal information we hold about you (IPP 6)
• Request correction of inaccurate, incomplete, or misleading information (IPP 7)
• Withdraw consent for processing based on consent, without affecting prior lawful processing
• Complain to us if you believe we have interfered with your privacy

To exercise access or correction rights, contact us at inquiry@thriveeiligament.world. We will respond within a reasonable time and no later than 20 working days where the Privacy Act requires it, unless an extension applies.

If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner:

• Website: privacy.org.nz
• Phone: 0800 803 909 (New Zealand)

13. Visitors from the European Economic Area

If GDPR applies to you, you may also have rights to erasure, restriction of processing, data portability, and objection to certain processing. You may lodge a complaint with your local supervisory authority. Contact us to exercise these rights.

14. Children's Privacy

Our website is intended for a general audience and is not directed at children. We do not knowingly collect personal information from anyone under 16 without appropriate parental or guardian consent. If you believe we have collected information from a child, please contact us and we will take steps to delete it.

15. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated date. We encourage you to review this policy periodically.

16. Contact

For privacy questions, access or correction requests, or complaints, contact:

Thriveeiligament
297 Warwick Road, 21, Stratford 4391, New Zealand
Email: inquiry@thriveeiligament.world
Phone: +64 6 928 4560