Privacy Policy

This Privacy Policy explains how Tendonsvivliving ("we", "us", "our") collects, uses, stores, and discloses personal information when you visit tendonsvivliving.world, submit an enquiry, or participate in our mini-habit programmes. We comply with the Privacy Act 2020 (New Zealand) and its Information Privacy Principles (IPPs). Where applicable, we also respect the rights of visitors under the EU General Data Protection Regulation (GDPR).

1. Agency / Data Controller

Tendonsvivliving
1 Leyton Way, Manukau City Centre
Auckland 2104, New Zealand
Email: reachus@tendonsvivliving.world
Phone: +64 99 785 300

2. Personal Information We Collect

2.1 Information you provide

• Name, email address, and message content via our contact form
• Programme-related information shared during consultations or enrolment
• Payment-related details processed by our payment provider (we do not store full card numbers)
• Cookie preference selections stored in your browser

2.2 Information collected automatically

• IP address, browser type, device type, and operating system
• Pages visited and session duration (only when analytics cookies are accepted)

3. Purpose of Collection (IPP 1 & 10)

We collect personal information only for lawful purposes connected with our functions, including:

• Responding to enquiries and providing programme information
• Delivering and administering habit-structure programmes
• Processing payments and maintaining financial records
• Improving our website and services (with consent for analytics/marketing cookies)
• Complying with legal obligations under New Zealand law

We will not use your information for unrelated purposes without your consent.

4. Legal Basis for Processing

• Contract: delivering programmes you have enrolled in
• Legitimate interests: website security, enquiry responses, service improvement
• Consent: analytics and marketing cookies, optional communications
• Legal obligation: tax, financial, and regulatory record-keeping

5. Disclosure of Information (IPP 11)

We do not sell personal information. We may disclose information to:

• Service providers (hosting, email, payment processing) under confidentiality agreements
• Analytics providers, only when you have accepted analytics cookies
• Regulatory authorities when required by New Zealand law
• Overseas recipients where necessary for service delivery, with safeguards consistent with IPP 12

6. Storage & Retention

• Contact enquiries: up to 24 months after resolution
• Programme participant records: duration of programme plus 7 years (financial/tax requirements)
• Analytics data: aggregated after 14 months, where consented
• Cookie preferences: stored locally until cleared by you

Information is stored on secure servers. We use HTTPS encryption and access controls to protect data.

7. Security (IPP 5)

We take reasonable steps to protect personal information from loss, unauthorised access, use, or disclosure. These include encrypted connections, password-protected systems, staff training, and periodic security reviews. No method of transmission over the internet is completely secure.

8. Your Rights

Under the Privacy Act 2020 (New Zealand)

• Access (IPP 6): request a copy of personal information we hold about you
• Correction (IPP 7): request correction of inaccurate information
• Complaint: contact the Office of the Privacy Commissioner at privacy.org.nz if you believe we have breached the Privacy Act

Under the GDPR (EU/EEA visitors)

• Right to erasure, restriction, portability, and objection where applicable
• Right to withdraw consent without affecting prior lawful processing
• Right to lodge a complaint with your local supervisory authority

To exercise any right, email reachus@tendonsvivliving.world. We respond within 20 working days (NZ) or 30 days (GDPR requests).

9. Unsolicited Electronic Messages

We comply with the Unsolicited Electronic Messages Act 2007. Marketing emails are sent only with your consent and include an unsubscribe option. You may opt out at any time.

10. Children's Privacy

Our programmes are intended for people aged 16 and over. We do not knowingly collect information from children under 16 without parental consent. Contact us if you believe we have collected such information.

11. Cookies

See our Cookies Policy for details on cookie types and how to manage preferences.

12. Changes to This Policy

We may update this policy to reflect legal or operational changes. The current version will always be available on this page with the updated date.