Privacy Policy

Last updated:

This Privacy Policy describes how Skeletondetoxau ("we", "us", "our") collects, uses, stores, and protects your personal information when you visit our website at skeletondetoxau.world or use our services. We are a New Zealand-based agency and are committed to complying with the Privacy Act 2020 (New Zealand), the General Data Protection Regulation (GDPR) where it applies to you, and other applicable data protection laws.

1. Agency and Contact Details

Under the Privacy Act 2020, we are the agency responsible for your personal information. Our contact details are:

Skeletondetoxau
37 Domett Street, Westport 7825, New Zealand
Email: community@skeletondetoxau.world
Phone: +64 3 789 7043

2. Information We Collect

We may collect the following categories of personal information:

  • Identity information: name
  • Contact information: email address, phone number (if provided)
  • Communication information: messages you send through our contact form
  • Technical information: IP address, browser type, device information, pages visited, and referral source
  • Cookie and preference data: choices stored via cookies and localStorage, as described in our Cookie Policy

We collect personal information directly from you when you submit our contact form, contact us by email or phone, or interact with our website. We do not knowingly collect sensitive information (such as health records) unless you voluntarily include it in a message to us.

3. Purposes of Collection and Use

We collect and use personal information only for lawful purposes connected with our functions and activities, including:

  • Responding to your inquiries and providing consultation services
  • Operating, maintaining, and improving our website
  • Understanding website usage through analytics (only with your consent where required)
  • Sending marketing communications where you have opted in
  • Meeting legal and regulatory obligations in New Zealand
  • Protecting our website, users, and business from fraud or misuse

We will not use your personal information for a purpose that is incompatible with the purpose for which it was collected, unless we have your consent or are permitted or required by law.

4. Privacy Act 2020 — Information Privacy Principles

We handle personal information in accordance with the Information Privacy Principles (IPPs) under the Privacy Act 2020, including:

  • Purpose of collection (IPP 1–4): We collect information only for lawful purposes and, where practicable, directly from you. We take reasonable steps to ensure you are aware of our identity, the purpose of collection, and your rights.
  • Storage and security (IPP 5): We protect personal information against loss, unauthorised access, use, modification, or disclosure through appropriate technical and organisational measures, including HTTPS encryption and access controls.
  • Access to information (IPP 6): You may request access to personal information we hold about you. We will respond within 20 working days, as required by the Privacy Act 2020.
  • Correction (IPP 7): You may request correction of personal information you believe is inaccurate, incomplete, or out of date.
  • Retention (IPP 9): We retain personal information only for as long as necessary for the purposes for which it was collected, unless a longer period is required by law.
  • Limits on use and disclosure (IPP 10–11): We use and disclose personal information only for the purposes for which it was collected, or with your authorisation, or as permitted by law.
  • Overseas disclosure (IPP 12): If we disclose personal information to overseas recipients (such as cloud hosting or analytics providers), we take reasonable steps to ensure those recipients protect the information in a manner consistent with the Privacy Act 2020, including contractual safeguards where appropriate.

5. Your Rights Under the Privacy Act 2020

If you are in New Zealand, you have the right to:

  • Request access to personal information we hold about you
  • Request correction of your personal information
  • Withdraw consent for optional processing (such as marketing or non-essential cookies), without affecting prior lawful processing
  • Make a complaint to us if you believe we have interfered with your privacy
  • Make a complaint to the Office of the Privacy Commissioner if you are not satisfied with our response

To exercise any of these rights, contact us using the details in Section 1. We will respond to access and correction requests within 20 working days, unless an extension applies under the Privacy Act 2020.

If you wish to complain to the Privacy Commissioner, visit www.privacy.org.nz or call 0800 803 909 (New Zealand).

6. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected:

  • Contact form submissions: up to 24 months after last communication, unless a longer period is required for legal or dispute-resolution purposes
  • Analytics data: up to 26 months (only where consent has been given)
  • Cookie consent records: up to 12 months
  • Legal compliance records: as required by applicable New Zealand law

When personal information is no longer needed, we take reasonable steps to securely delete or de-identify it.

7. Data Sharing and Third-Party Processors

We do not sell your personal information. We may share information with trusted service providers who assist with website hosting, analytics, email delivery, or technical support. These providers may only process information on our instructions and must protect it appropriately. A list of categories of recipients is available on request.

We may also disclose personal information where required or authorised by New Zealand law, including to respond to lawful requests from courts or government agencies.

8. Notifiable Privacy Breaches

Under the Privacy Act 2020, if a privacy breach has caused or is likely to cause serious harm to an affected individual, we will notify the Office of the Privacy Commissioner and affected individuals as soon as practicable. If you believe your personal information has been compromised, please contact us immediately using the details in Section 1.

9. Your Rights Under GDPR (EEA Visitors)

If you are located in the European Economic Area, you also have the following rights under GDPR:

  • Right of access: request a copy of your personal data
  • Right to rectification: request correction of inaccurate data
  • Right to erasure: request deletion of your data ("right to be forgotten") where applicable
  • Right to restrict processing: request limitation of data processing
  • Right to data portability: receive your data in a structured, commonly used format
  • Right to object: object to processing based on legitimate interests
  • Right to withdraw consent: withdraw consent at any time without affecting prior lawful processing

To exercise GDPR rights, contact us using the details in Section 1. We will respond within 30 days unless a longer period is permitted by law.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal information, including HTTPS encryption, access controls, and regular security reviews. While we strive to protect your information, no method of transmission over the Internet is entirely secure.

11. Cookies and Similar Technologies

We use cookies and similar technologies as described in our Cookie Policy. Non-essential cookies are used only where permitted and, where required, with your consent.

12. Children's Privacy

Our website is not directed at individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately and we will take steps to delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

14. Contact and Complaints

For questions about this Privacy Policy, to exercise your privacy rights, or to make a complaint, contact us using the details in Section 1. We will acknowledge complaints promptly and aim to resolve them within a reasonable timeframe.

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner in New Zealand at www.privacy.org.nz.