Privacy Policy

Last updated:

1. Data Controller

The data controller responsible for your personal data is:

Anklehip
361 Western Hills Drive, Avenues
Whangārei 0110, New Zealand
Email: admin@anklehip.world
Phone: +64 9 438 0404

2. Scope and Applicable Law

This Privacy Policy describes how we collect, use, store, and protect your personal information when you visit our website at anklehip.world or use our lifestyle consultation services. We are an agency under the New Zealand Privacy Act 2020 and handle personal information in accordance with the Act's 13 Information Privacy Principles (IPPs). Where the General Data Protection Regulation (GDPR) applies to individuals in the European Economic Area, we also comply with those requirements.

3. Collection Notice (IPP 3)

When we collect personal information directly from you (for example through our contact form or during a consultation), we take reasonable steps to ensure you are aware of:

  • that the information is being collected and what information we collect;
  • the purposes for which it will be used;
  • the intended recipients of the information (including service providers listed in Section 7);
  • the name and address of our agency (see Section 1);
  • whether provision of the information is voluntary or mandatory, and the consequences if you choose not to provide it;
  • your rights of access to and correction of your personal information under IPPs 6 and 7.

Providing contact details through our enquiry form is voluntary. If you choose not to provide your name and email address, we cannot respond to your message or arrange a consultation. Booking and payment details are required to deliver paid consultation services.

4. Personal Information We Collect

We may collect the following categories of personal information:

  • Identity data: name
  • Contact data: email address, phone number, postal address
  • Communication data: messages you send through our contact form
  • Technical data: IP address, browser type, device information, pages visited
  • Cookie data: preferences stored via our cookie consent mechanism

5. Purposes of Collection and Use (IPPs 1, 4, and 10)

We collect and use personal information only for lawful purposes connected with our lifestyle consultation services. These purposes include:

  • responding to enquiries and scheduling consultations;
  • delivering consultation services you have booked and requested;
  • managing cancellations, rescheduling, and refunds in line with our Return Policy;
  • improving our website and services through analytics, where you have given consent via our cookie banner;
  • meeting legal, tax, and accounting obligations;
  • protecting our rights and the security of our website and clients.

We do not use your personal information for a purpose that is unrelated to the purpose for which it was collected, unless an exception under the Privacy Act 2020 applies or you authorise the new use.

6. Data Retention (IPP 9)

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected:

  • Contact form submissions: up to 24 months after last communication
  • Consultation records: up to 5 years after the last session, unless a longer period is required by law
  • Technical and analytics data: up to 26 months
  • Cookie consent preferences: up to 12 months

7. Disclosure and Overseas Transfers (IPPs 11 and 12)

We do not sell your personal information. We may disclose personal information to trusted service providers who assist us in operating our website and delivering services, including website hosting, email delivery, font and content delivery networks, and analytics providers (only where you have consented to analytics cookies). These providers may process data on our behalf and are required to protect it appropriately.

Some service providers are located outside New Zealand (for example, Google LLC for font delivery, and Cloudflare for content delivery). Before disclosing personal information overseas, we take reasonable steps to ensure the recipient protects the information in a manner consistent with the Privacy Act 2020, or we rely on an applicable exception under IPP 12.

We may also disclose personal information where required or authorised by New Zealand law, or to protect the safety of any person.

8. Data Security (IPP 5)

We implement appropriate technical and organisational measures to protect your personal data, including encryption in transit (HTTPS), access controls, secure storage, and regular review of our security practices. While we take reasonable precautions, no method of transmission over the internet is entirely secure.

9. Access, Correction, and Your Rights (IPPs 6 and 7)

Under the Privacy Act 2020, you have the right to:

  • request access to personal information we hold about you (IPP 6);
  • request correction of personal information you believe is inaccurate, incomplete, or misleading (IPP 7);
  • withdraw consent for optional processing (such as analytics or marketing cookies) at any time, without affecting the lawfulness of processing before withdrawal.

To make an access or correction request, contact us using the details in Section 1. We will respond within a reasonable timeframe and, where appropriate, provide reasons if we decline a request in accordance with the Privacy Act 2020.

If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner at privacy.org.nz. Individuals in the European Economic Area may also lodge a complaint with their local data protection authority where GDPR applies.

10. Privacy Breach Notification

If a privacy breach has caused or is likely to cause serious harm, we will notify the Office of the Privacy Commissioner and affected individuals as soon as practicable, in accordance with the Privacy Act 2020. We maintain internal procedures to identify, assess, and respond to privacy breaches.

11. Children's Privacy

Our services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.