Privacy Policy
Last updated: 18 May 2026
This Privacy Policy explains how Faunaglow.site (“we”, “us”, “our”) collects, uses, holds, and discloses personal information under the Privacy Act 2020 (New Zealand). We are an “agency” for the purposes of that Act when we handle personal information about identifiable individuals.
This policy applies to visitors to our website, people who contact us, and clients who use our movement and activity consultation services. If you are in the European Economic Area (EEA), the General Data Protection Regulation (GDPR) may also apply — see Section 15.
1. Who We Are (Privacy Officer Contact)
Business name: Faunaglow.site
Address: The Arts Village, 1240 Hinemaru Street, Rotorua 3010, New Zealand
Email: talk@faunaglow.site
Phone: +64 27 361 8565
For privacy questions, access requests, or complaints, contact us using the details above. We will respond as soon as reasonably practicable, and in any event within timeframes required by law.
2. New Zealand Legal Framework
We comply with:
- Privacy Act 2020 and the Information Privacy Principles (IPPs) in Schedule 1 of that Act
- Privacy Regulations 2020 where applicable
- Health Information Privacy Code 2020 only if we ever collect health information beyond general lifestyle notes you voluntarily share (we do not provide health services)
- Unsolicited Electronic Messages Act 2007 for any marketing email or SMS (consent and unsubscribe required)
We aim to meet the IPPs, including collecting information lawfully and fairly, using it only for proper purposes, keeping it secure, and being open about our practices.
3. What Personal Information We Collect
“Personal information” means information about an identifiable individual. We may collect:
- Identity and contact: name, email address, phone number (if you provide it), and message content from our contact form
- Consent records: confirmation that you agreed to our Privacy Policy and, where relevant, cookie or marketing preferences with date and time
- Consultation and booking details: schedule notes, programme preferences, and correspondence about sessions or events
- Technical information: IP address, browser type, device type, operating system, referring URL, and pages viewed — mainly where you accept analytics cookies (see our Cookie Policy)
- Website usage data: cookie identifiers and local storage values used to remember cookie consent
We do not routinely collect sensitive information (such as medical diagnoses). If you choose to mention health matters in a message, we will handle that information carefully and only use it to respond to your enquiry unless you agree otherwise.
Where possible, we collect personal information directly from you. If we receive information about you from a third party (for example, your employer booking a team session), we will take reasonable steps to ensure you are aware of this policy.
4. Why We Collect and Use Information (Purposes)
We collect and use personal information for purposes including:
- Responding to enquiries and contact form submissions
- Arranging and delivering consultations, workshops, and events
- Sending information you have asked for about programmes or bookings
- Operating, maintaining, and securing our website
- Improving our website and services (analytics only with your cookie consent)
- Marketing communications about our services only where you have consented or an exception under the Unsolicited Electronic Messages Act 2007 applies
- Meeting legal, regulatory, and accounting obligations
- Defending or bringing legal claims where necessary
We will not use your personal information for a new purpose that is incompatible with the original purpose unless we are permitted by law or have your consent.
5. Information Privacy Principles (Summary)
Our practices reflect New Zealand’s IPPs, including:
- Purpose (IPP 1–4): We collect information for lawful purposes connected with our functions and tell you why we need it where practicable
- Security (IPP 5): We protect information with reasonable safeguards against loss, misuse, and unauthorised access
- Access and correction (IPP 6–7): You may request access to and correction of your personal information (see Section 12)
- Accuracy (IPP 8): We take reasonable steps to ensure information is accurate before use
- Retention (IPP 9): We do not keep information longer than needed for the purpose it was collected
- Use and disclosure (IPP 10–11): We use and disclose information only as allowed by the Act or with your authorisation
- Overseas disclosure (IPP 12): See Section 8
- Unique identifiers (IPP 13): We assign internal reference numbers only where needed for administration
6. How Long We Keep Information
- Contact form and general enquiries: up to 24 months after our last communication, unless a longer period is required for disputes, legal claims, or law
- Client and consultation records: up to 7 years where needed for business, tax, or legal record-keeping under New Zealand law
- Marketing consent records: for as long as you are subscribed, plus up to 24 months after unsubscribe to prove compliance with the Unsolicited Electronic Messages Act 2007
- Analytics data: up to 26 months if you have accepted analytics cookies
- Cookie consent logs: up to 12 months
When information is no longer needed, we delete or anonymise it where reasonably practicable.
7. Who We Share Information With
We do not sell your personal information. We may disclose information to:
- Service providers who help us run the website, email, hosting, or analytics (they may only use data as we instruct and must protect it)
- Professional advisers (lawyers, accountants) under confidentiality obligations
- Government agencies or courts when required or authorised by New Zealand law
- Others with your consent or where disclosure is otherwise permitted under the Privacy Act 2020
8. Overseas Disclosure (IPP 12)
Some service providers (for example, website hosting, email, or analytics tools) may store or process data outside New Zealand (such as Australia, the United States, or the European Union).
Before disclosing personal information overseas, we will take steps required by the Privacy Act 2020, which may include:
- Reasonably believing the recipient is subject to privacy laws that overall provide comparable safeguards; or
- Using contractual clauses or other approved mechanisms to protect your information; or
- Relying on an exception under IPP 12 (for example, where you authorise disclosure after we have been clear about the countries involved)
You may contact us for more information about overseas recipients relevant to your data.
9. Security
We use reasonable technical and organisational measures, including HTTPS encryption, access controls, secure hosting environments, and confidentiality expectations for anyone who handles personal information on our behalf.
No online system is completely secure. Please use a secure connection and protect your own devices and email accounts when contacting us.
10. Notifiable Privacy Breaches
Under the Privacy Act 2020, if we suffer a privacy breach that is reasonably likely to cause serious harm to affected individuals, we will:
- Notify the Office of the Privacy Commissioner as soon as practicable; and
- Notify affected individuals unless an exception applies
We maintain internal procedures to identify, contain, and respond to suspected breaches. If you believe your information has been compromised, please contact us immediately.
11. Marketing and Electronic Messages
If we send commercial electronic messages (email or SMS) about our services, we will comply with the Unsolicited Electronic Messages Act 2007, including:
- Having your consent or another lawful basis to send messages
- Including accurate sender information
- Providing a clear and functional unsubscribe facility in each message
- Honouring unsubscribe requests promptly
12. Your Rights Under New Zealand Law
You have the right to:
- Request access to personal information we hold about you (IPP 6)
- Request correction of your personal information if you believe it is inaccurate, incomplete, or misleading (IPP 7)
- Withdraw consent where processing is based on consent (for example, optional cookies or marketing), without affecting prior lawful processing
To make a request, email talk@faunaglow.site with enough detail for us to identify you and locate your information. We may need to verify your identity before releasing information.
We will respond within a reasonable time. If we refuse a request, we will explain why (where permitted) and tell you about your options to complain to the Privacy Commissioner.
13. Complaints to the Privacy Commissioner
If you are concerned about how we have handled your personal information, contact us first so we can try to resolve the issue.
You may also complain to the Office of the Privacy Commissioner:
- Website: www.privacy.org.nz
- Phone: 0800 803 909 (New Zealand)
- Enquiries and complaints: via the forms on the Privacy Commissioner’s website
14. Children and Young People
Our services are intended for adults. We do not knowingly collect personal information from anyone under 16 without parental or guardian consent. If you believe we have collected a child’s information, contact us and we will delete it where appropriate.
15. Visitors from the European Economic Area (GDPR)
If GDPR applies to our processing of your data, you may also have rights to erasure, restriction of processing, data portability, and to object to certain processing. Our legal bases may include consent, contract, legitimate interests (where balanced against your rights), and legal obligation.
You may lodge a complaint with your local EU/EEA supervisory authority. Our primary establishment for NZ law remains New Zealand as set out in Section 1.
16. Automated Decision-Making
We do not use automated decision-making (including profiling) that produces legal or similarly significant effects about you.
17. Changes to This Policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top will change. Material changes will be described on this page. Continued use of the website after changes may constitute notice of the updated policy where permitted by law.
18. Related Documents
Please also read our Cookie Policy and Terms of Use.