1. Who We Are
Zoeflexible ("we", "us", "our") is a New Zealand business providing equipment-free movement workshops and related educational content. We are the agency responsible for your personal information under the Privacy Act 2020 (New Zealand).
Our address: 462 Tuam Street, Phillipstown, Christchurch 8011, New Zealand. Contact: business@zoeflexible.world or +47 94 80 03 09.
2. Scope of This Policy
This Privacy Policy explains how we collect, use, store, disclose, and protect personal information when you visit our website, contact us, or enquire about our workshops. It applies to visitors and participants in New Zealand. If you are located in the European Economic Area, additional rights may apply under the General Data Protection Regulation (GDPR); contact us for details.
3. Personal Information We Collect
We may collect the following categories of personal information when you interact with our website or services:
- Identity information: your name
- Contact information: email address, phone number, postal address (if provided)
- Technical information: IP address, browser type, device information, and cookie or similar technology data
- Communication information: messages you send through our contact form
- Usage information: pages visited, time spent on the website, and navigation patterns (where analytics are enabled with your consent)
- Marketing and advertising information: referral source and ad interaction data (where marketing cookies are enabled with your consent)
We collect personal information directly from you when you submit our contact form, communicate with us by email or phone, or interact with our website. Some technical information is collected automatically through cookies and similar technologies as described in our Cookie Policy.
4. How We Use Your Information
We use personal information for the following purposes, in accordance with the Information Privacy Principles (IPPs) under the Privacy Act 2020:
- Responding to enquiries and arranging workshop participation
- Operating and maintaining our website
- Understanding website usage through analytics (only with your consent)
- Measuring and improving advertising campaigns (only with your consent)
- Complying with legal obligations and protecting our legitimate business interests, where permitted by law
- Communicating with you about our services where you have agreed or where communication is reasonably expected in connection with your enquiry
We will not use your personal information for a purpose that is incompatible with the purpose for which it was collected, unless we have your authorisation or are permitted or required by law.
5. Legal Basis for Collection and Use
Under the Privacy Act 2020, we collect personal information only where it is necessary for our functions and activities. We rely on:
- Your consent — for optional analytics, marketing cookies, and where you tick the consent box on our contact form
- Legitimate purposes connected with your enquiry — to respond to messages you send us
- Legal obligation — where we are required to retain or disclose information by New Zealand law
6. Disclosure of Personal Information
We do not sell your personal information. We may disclose personal information to:
- Service providers who assist with website hosting, email delivery, analytics, or advertising platforms, under contractual obligations to protect your information and use it only for the services they provide to us
- Professional advisers where reasonably necessary
- Law enforcement, regulators, or courts when required or authorised by New Zealand law
Some service providers may be located outside New Zealand. Before disclosing personal information overseas, we take reasonable steps to ensure the recipient protects your information in a way that is comparable to the protections under the Privacy Act 2020, in line with Information Privacy Principle 12.
7. Data Retention
We retain personal information only for as long as necessary to fulfil the purposes for which it was collected:
- Contact form submissions: up to 24 months from the date of submission, unless a longer period is required for ongoing communication or legal compliance
- Cookie and analytics data: as specified in our Cookie Policy
- Technical server logs: up to 12 months
- Consent records: up to 5 years, to demonstrate compliance with privacy obligations
When information is no longer needed, we securely delete or de-identify it.
8. Your Rights Under the Privacy Act 2020
You have the right to:
- Request access to personal information we hold about you
- Request correction of personal information that you believe is inaccurate, incomplete, or misleading
- Withdraw consent for optional processing (such as analytics or marketing cookies) at any time, without affecting processing that occurred before withdrawal
- Ask us whether we hold personal information about you
To exercise these rights, contact us at business@zoeflexible.world. We will respond within a reasonable timeframe and no later than 20 working days, as required by the Privacy Act 2020.
If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner (Te Mana Mātāpono Matatapu): www.privacy.org.nz.
9. Privacy Breaches
We take reasonable steps to protect personal information from loss, unauthorised access, misuse, or disclosure. If a privacy breach occurs that has caused or is likely to cause serious harm, we will notify affected individuals and the Office of the Privacy Commissioner as required under the Privacy Act 2020.
10. Data Security
We implement appropriate technical and organisational measures to protect your personal information, including HTTPS encryption, access controls, and secure hosting infrastructure. While we take reasonable precautions, no method of transmission over the internet is entirely secure.
11. Children
Our website and services are not directed at individuals under the age of 16. We do not knowingly collect personal information from children without parental or guardian consent. If you believe we have collected information from a child, please contact us immediately.
12. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We encourage you to read their privacy policies before providing personal information.
13. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Material changes will be brought to your attention where reasonably practicable. We encourage you to review this policy periodically.