Privacy Policy

Last updated:

1. Introduction

Spinaltendon ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, store, and safeguard your personal information when you visit our website at https://spinaltendon.world and use our lifestyle consultation services.

We are governed primarily by the Privacy Act 2020 (New Zealand) and its Information Privacy Principles (IPPs). If you are located in the European Economic Area or United Kingdom, we also process personal data in line with the General Data Protection Regulation (GDPR) where it applies to you.

By using our website or services, you acknowledge that you have read this policy. Where we rely on your consent, you may withdraw it at any time as described below.

2. Data Controller

The data controller responsible for your personal data is:

3. Data We Collect

We may collect and process the following categories of personal data:

3.1 Data You Provide Directly

3.2 Data Collected Automatically

4. Purposes of Processing

We process your personal data for the following purposes:

5. How We Use and Disclose Information (Privacy Act 2020)

Under the Privacy Act 2020, we may only collect personal information where it is necessary for a lawful purpose connected with our functions or activities. We use and disclose personal information to:

We generally collect information directly from you (IPP 3). If we need to collect information from someone else, we will take reasonable steps to make sure you are aware of the collection, unless an exception under the Privacy Act applies.

We do not sell your personal information. We may disclose information to trusted service providers (such as hosting, email, or analytics providers) who assist us under contractual obligations to protect your information and use it only for the purposes we specify.

Overseas disclosure (IPP 12): Some providers may store or process data outside New Zealand. Before disclosing personal information overseas, we take reasonable steps to ensure the recipient protects your information in a way that, overall, provides comparable safeguards to the Privacy Act, or we rely on an authorised exception under the Act.

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

After the retention period expires, your data is securely deleted or anonymized.

7. Your Rights (New Zealand)

Under the Privacy Act 2020, you have rights including:

To exercise your rights, contact us using the details in Section 13. We will respond within a reasonable time and, for access requests, generally within 20 working days as required by the Privacy Act unless an extension applies.

We may need to verify your identity before releasing information. If we refuse a request, we will explain the reason where the Act allows us to do so.

7a. Additional Rights for EEA/UK Residents (GDPR)

If GDPR applies to you, you may also have rights to erasure, restriction of processing, data portability, and to object to certain processing. Contact us using the details below. You may also complain to your local supervisory authority.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

9. Third-Party Sharing

We do not sell your personal data. We may share data with trusted third-party service providers who assist us in operating our website and services, under strict data processing agreements. These include:

10. Notifiable Privacy Breaches (IPP 12)

If a privacy breach is likely to cause anyone serious harm, we will notify the Office of the Privacy Commissioner and affected individuals as soon as practicable, in accordance with the Privacy Act 2020.

11. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that a child has provided personal data, we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

13. Contact and Complaints

If you have questions about this Privacy Policy or wish to make a complaint, contact us at:

You may lodge a complaint with the Office of the Privacy Commissioner (New Zealand): www.privacy.org.nz or by calling 0800 803 909. If you are in the EEA or UK, you may also contact your local data protection authority.