Privacy Policy

1. Who we are

Herbalyecoel (NZBN 9429048123456) is the agency responsible for your personal information. We operate from 3058 Great North Road, New Lynn, Auckland 0640, New Zealand. Contact our privacy officer: infocenter@herbalyecoel.world or +64 9 826 2333.

2. Information we collect

We may collect:

• Identity information: name and username
• Contact information: email, phone number, postal address
• Communication content: messages sent via our contact form or email
• Programme information: enrolment details and session attendance
• Technical information: IP address, browser type, device data, pages visited
• Preference information: cookie consent choices stored in your browser
• Payment information: processed by our payment provider; we do not store full card numbers

3. How we collect information

We collect information when you complete forms on our website, enrol in a programme, attend sessions, email or phone us, or interact with our site. Some technical data is collected automatically through cookies where you have consented.

4. Why we collect information

We use personal information to:

• Respond to enquiries and provide our wellness support programmes
• Process enrolments and payments
• Send service-related communications (not unsolicited marketing without consent)
• Improve our website and services
• Meet legal obligations including tax and consumer law requirements

5. Legal basis under the Privacy Act 2020

We collect and use personal information only where we have a lawful purpose connected with our functions and the information is necessary for that purpose. We comply with the Information Privacy Principles (IPPs) set out in the Privacy Act 2020.

6. Disclosure to third parties

We do not sell personal information. We may share data with:

• Service providers (hosting, email, payment processing) under confidentiality agreements
• Professional advisers where required
• Government agencies when required by New Zealand law

Some providers may store data outside New Zealand. We take reasonable steps to ensure comparable safeguards apply.

7. Unsolicited Electronic Messages Act 2007

We only send marketing emails or texts with your express consent. Every marketing message includes a functional unsubscribe option. You may opt out at any time without affecting service communications related to active enrolments.

8. Data retention

• Contact form enquiries: up to 24 months, unless a business relationship develops
• Programme records: duration of participation plus 36 months
• Financial records: 7 years as required by tax law
• Technical logs: up to 12 months
• Cookie preferences: until you clear browser storage or withdraw consent

9. Security

We use HTTPS encryption, access controls, staff training, and regular review of data practices. No internet transmission is completely secure; please protect your own devices and passwords.

10. Your rights

Under the Privacy Act 2020 you have the right to:

• Ask whether we hold personal information about you
• Request access to your personal information
• Request correction of inaccurate information

To exercise these rights, contact our privacy officer. We will respond within 20 working days as required by law. If you are unsatisfied with our response, you may complain to the Office of the Privacy Commissioner: www.privacy.org.nz.

11. Children

Our services are intended for people aged 18 and over. We do not knowingly collect information from children without parental or guardian consent.

12. Changes

We may update this policy from time to time. Material changes will be posted on this page with a revised date.