Privacy Policy
Last updated: May 30, 2026
This Privacy Policy describes how Poweranklenew.world (referred to as "we," "us," or "our") collects, uses, holds, and discloses personal information about you when you use our website. We are an agency for the purposes of the Privacy Act 2020 (New Zealand) and comply with its Information Privacy Principles (IPPs).
1. Who We Are (Agency Details)
The agency responsible for your personal information is:
- Trading name / website: Poweranklenew.world
- Physical address: 47 Cameron Street, Whangārei 0110, New Zealand
- Email (privacy & general enquiries): contactuse@poweranklenew.world
- Phone: +64 27 295 9686
Contact us using the details above for any privacy question, access request, correction request, or complaint. We will respond within a reasonable time and, for formal requests under the Privacy Act, within 20 working days where practicable (or inform you if an extension is required under the Act).
2. Scope and Application
This Policy applies to personal information collected through:
- our public website pages;
- the contact form (including GDPR consent checkbox where shown);
- cookie and similar technologies (see our Cookie Policy);
- email, phone, or in-person enquiries linked to our services;
- event registration or waitlist requests made via the contact form.
Our content is general lifestyle education only and is not a health service under the Health Information Privacy Code 2020. We do not intentionally collect health records or clinical notes. If you include health-related details in a message, we will handle them as voluntarily provided contact content and protect them under this Policy.
Visitors from the European Economic Area or United Kingdom may also have rights under the GDPR; relevant sections are noted below where they add to NZ rights.
3. What Personal Information We Collect
We may collect the following categories of personal information, depending on how you interact with us:
- Identity and contact: name, email address, phone number (if you call us), and message content.
- Technical and usage: IP address, browser type, device identifiers, operating system, pages viewed, time on page, referral URL, and approximate location derived from IP.
- Consent records: cookie preferences, timestamps, and banner choices stored in your browser (local storage).
- Communications: copies of correspondence and our responses.
- Event interest: event name and any details you provide when registering interest.
Where possible we collect information directly from you. We do not routinely collect sensitive information (as defined in the Privacy Act) unless you choose to include it in a message.
4. Why We Collect and How We Use Information (Purposes)
We collect personal information only for lawful purposes connected with our functions and activities, including:
- responding to enquiries and contact form submissions;
- operating, maintaining, and securing the website;
- managing event registrations or waitlists;
- improving content and user experience (analytics cookies only with your consent);
- measuring marketing effectiveness (marketing cookies only with your consent);
- complying with legal obligations and defending legal claims;
- keeping records required for accountability and dispute resolution.
We will not use your information for a purpose that is incompatible with the purpose for which it was collected, except as permitted by the Privacy Act (for example, with your authorisation or where the new use is directly related).
GDPR (where applicable): lawful bases include consent (cookies/marketing), performance of steps at your request (contact form), legitimate interests (site security and improvement), and legal obligation.
5. Collection Notice (Transparency)
When you submit the contact form, we provide a collection notice through the form and this Policy. Key points we bring to your attention at or before collection include: who we are, what we collect, why we collect it, who may receive it, whether disclosure overseas may occur, and that you may access and correct your information. If you provide information about another person, you confirm you have their permission to do so.
6. Disclosure of Personal Information
We do not sell or rent your personal information. We may disclose information to:
- Service providers (processors) such as website hosting, email delivery, security, and analytics providers—only as needed to perform services for us and subject to confidentiality and security requirements;
- Professional advisers (lawyers, accountants) when required;
- Government agencies or courts when required by New Zealand law or a court order;
- Successors if our business is transferred, subject to equivalent privacy protections.
We require contractors handling personal information on our behalf to protect it and use it only for the instructed purpose (IPP 5 and agency accountability under the Privacy Act).
7. Disclosure to Overseas Persons (IPP 12)
Our preference is to store and process information in New Zealand. Some service providers may process data in other countries (for example, where cloud servers are located). Before disclosing personal information overseas, we take reasonable steps to ensure the recipient is subject to safeguards comparable to the Privacy Act, or we rely on an authorised exception under IPP 12 (such as your authorisation after informing you of the countries involved and any weaker protections). You may contact us to ask which countries may apply to your information.
8. Storage, Retention, and Secure Disposal
- Contact form and email enquiries: up to 24 months after last contact, unless a longer period is needed for legal claims or compliance.
- Server and security logs: up to 12 months.
- Cookie consent records: for the life of your preference plus up to 24 months for evidence of consent.
- Event lists: until the event concludes plus 12 months, unless you ask us to delete earlier.
When information is no longer required, we take reasonable steps to delete or de-identify it (IPP 9). Backups may retain data for a limited period before automatic overwrite.
9. Security Safeguards (IPP 5)
We implement reasonable safeguards against loss, misuse, unauthorised access, or disclosure, including HTTPS encryption, access controls, password protection for administrative systems where applicable, and contractual obligations on suppliers. No system is completely secure; please avoid sending unnecessary sensitive information via the contact form.
10. Accuracy (IPP 8)
We take reasonable steps to ensure personal information is accurate, up to date, complete, relevant, and not misleading before use or disclosure. Please notify us promptly if your details change.
11. Your Rights Under the Privacy Act 2020
Subject to the Privacy Act, you have the right to:
- request access to personal information we hold about you (IPP 6);
- request correction of information you believe is inaccurate, out of date, incomplete, irrelevant, or misleading (IPP 7);
- complain to us if you believe we have interfered with your privacy—we will investigate and respond;
- complain to the Office of the Privacy Commissioner if you are not satisfied with our response. Contact: Office of the Privacy Commissioner, PO Box 10094, Wellington 6140, New Zealand. Website: privacy.org.nz. Phone: 0800 803 909.
We may need to verify your identity before releasing information. In some cases the Act allows us to refuse access (for example, where disclosure would endanger safety or unreasonably disclose another person's information); we will explain the reason if that applies.
GDPR (where applicable): you may also request erasure, restriction, objection, or portability where those rights apply; contact us using the details in section 1.
12. Notifiable Privacy Breaches
If we become aware of a privacy breach that has caused or is likely to cause serious harm, we will notify the Office of the Privacy Commissioner and affected individuals as required by Part 4 of the Privacy Act 2020. We maintain internal procedures to assess and respond to suspected breaches promptly.
13. Direct Marketing and Electronic Messages
We do not send commercial electronic messages without a clear basis under the Unsolicited Electronic Messages Act 2007 (for example, your consent or an existing business relationship with a clear unsubscribe). If we email you about events you requested, you may opt out at any time by replying "unsubscribe" or contacting us. Marketing cookies are used only if you opt in via the cookie banner.
14. Unique Identifiers (IPP 12)
We do not assign government-issued identifiers (such as IRD numbers) for our own indexing. Technical identifiers (cookie IDs, IP addresses) are used only as described in this Policy and our Cookie Policy.
15. Automated Decision-Making
We do not make decisions with legal or similarly significant effects based solely on automated processing. Interactive tools on the site provide general suggestions only and do not profile you for automated decisions.
16. Children and Young People
This website is intended for a general adult audience. We do not knowingly collect personal information from children under 16 without parental consent. If you believe a child has provided information to us, contact us and we will delete it where appropriate.
17. Links to Other Websites
Our site may link to third-party sites (for example, embedded maps). Their privacy practices are governed by their own policies, not this Policy.
18. Changes to This Policy
We may update this Policy from time to time. The "Last updated" date at the top will change. Material changes will be posted on this page. Continued use of the site after changes constitutes notice of the updated Policy where permitted by law.