1. Who We Are
Under the Privacy Act 2020 (New Zealand), we are the agency responsible for the personal information collected through this website. For visitors from the European Economic Area, we act as the data controller for the purposes of the General Data Protection Regulation (GDPR).
Flushkneesshine
115A Coast Road, Wainuiomata
Lower Hutt 5014, New Zealand
Email: help@flushkneesshine.world
Phone: +64 4 564 4157
2. Scope of This Policy
This Privacy Policy describes how Flushkneesshine ("we", "us", "our") collects, uses, stores, and protects your personal information when you visit our website at flushkneesshine.world, contact us, or interact with our studio and educational resources. We comply with the Privacy Act 2020 and the Information Privacy Principles (IPPs) set out in that Act. Where GDPR also applies, we comply with its requirements for EEA visitors.
3. Personal Information We Collect
We may collect the following categories of personal information:
- Identity and contact information: name, email address, phone number (if provided), and any information you include in messages submitted through our contact form.
- Technical information: IP address, browser type and version, operating system, device type, referring URLs, pages visited, and approximate time spent on pages.
- Cookie and preference data: information collected through cookies, local storage, and similar technologies as described in our Cookie Policy.
- Communications: records of enquiries and our responses when you contact us.
We collect personal information directly from you when you submit our contact form or communicate with us. Technical information may be collected automatically when you browse our website.
4. How We Use Your Information
We use personal information only for purposes connected with our functions as a movement studio and educational resource provider, including to:
- respond to enquiries submitted through our contact form or other channels;
- operate, maintain, and secure our website;
- understand how visitors use our website and improve content and usability, where you have consented to analytics cookies;
- measure the effectiveness of our outreach and advertising, where you have consented to marketing cookies;
- comply with legal obligations and respond to lawful requests from authorities.
We will not use your personal information for a purpose that is unrelated to the purpose for which it was collected unless we believe on reasonable grounds that you would not object, we have your authorisation, or the use is otherwise permitted under the Privacy Act 2020.
5. Collection Notice and Consent
When you submit our contact form, we ask for your consent to process your personal information as described in this policy. You may choose not to provide certain information, but we may then be unable to respond to your enquiry.
Non-essential cookies (analytics and marketing) are only activated after you provide consent through our cookie banner. You may withdraw consent at any time by adjusting your cookie preferences or contacting us.
6. Disclosure of Personal Information
We do not sell your personal information. We may disclose personal information to:
- trusted service providers who assist us in hosting, operating, or analysing our website (such as hosting providers, content delivery networks, and analytics services), subject to appropriate contractual safeguards;
- professional advisers where reasonably necessary;
- regulators, courts, or law enforcement when required or authorised by New Zealand law.
Some service providers may store or process information outside New Zealand. Before disclosing personal information overseas, we take reasonable steps to ensure that the recipient is subject to privacy safeguards comparable to those under the Privacy Act 2020, in accordance with Information Privacy Principle 12.
7. Data Retention
We retain personal information only for as long as necessary to fulfil the purposes for which it was collected:
- Contact form submissions and correspondence: up to 24 months from the date of receipt, unless a longer retention period is required by law.
- Technical and analytics data: up to 26 months from the date of collection.
- Cookie consent records: up to 12 months from the date consent was given or updated.
After the retention period expires, information is securely deleted or anonymised.
8. Your Rights Under the Privacy Act 2020
Under the Privacy Act 2020, you have the right to:
- Access — request confirmation of whether we hold personal information about you and, if so, request access to it;
- Correction — request correction of personal information that you believe is inaccurate, incomplete, or out of date;
- Withdraw consent — where processing is based on consent, withdraw that consent at any time;
- Complain — lodge a complaint with us or with the Office of the Privacy Commissioner if you believe we have interfered with your privacy.
To exercise your access or correction rights, contact us using the details in Section 15. We will respond within a reasonable time and, in any event, within 20 working days as required by the Privacy Act 2020, unless an extension applies.
If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner at privacy.org.nz or by calling 0800 803 909 (New Zealand).
9. Rights for EEA Residents (GDPR)
If you are located in the European Economic Area, you also have the following rights regarding your personal data:
- Right of access — request a copy of the personal data we hold about you.
- Right to rectification — request correction of inaccurate or incomplete data.
- Right to erasure — request deletion of your personal data under certain conditions.
- Right to restriction — request limitation of processing under certain conditions.
- Right to data portability — receive your data in a structured, machine-readable format.
- Right to object — object to processing based on legitimate interests or for direct marketing.
- Right to withdraw consent — withdraw consent at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, contact us at help@flushkneesshine.world. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.
10. Direct Marketing
We do not send unsolicited direct marketing communications without your consent. If we ever contact you for marketing purposes, you may opt out at any time by following the unsubscribe instructions in the communication or by contacting us directly.
11. Privacy Breaches
We take reasonable steps to protect personal information from loss, misuse, and unauthorised access. If we become aware of a notifiable privacy breach under the Privacy Act 2020, we will notify affected individuals and the Office of the Privacy Commissioner as required by law.
12. Data Security
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include HTTPS encryption, access controls, secure hosting infrastructure, and regular security reviews. While we take reasonable precautions, no method of transmission over the internet is entirely secure.
13. Children's Privacy
Our website is not directed at individuals under the age of 16. We do not knowingly collect personal information from children without parental or guardian consent. If you believe we have collected information from a child, please contact us and we will promptly delete it.
14. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page indicates when the policy was last revised. We encourage you to review this page periodically for any changes.
15. Contact
For any questions or concerns regarding this Privacy Policy or our data practices, please contact:
Flushkneesshine
115A Coast Road, Wainuiomata, Lower Hutt 5014, New Zealand
Email: help@flushkneesshine.world
Phone: +64 4 564 4157