Privacy Policy

1. Agency

Jointssyboostux (we, us) is the agency responsible for personal information collected through jointssyboostux.world and our Paraparaumu studio.

Shop 3, Coastlands Shopping Town, 150 Rimu Road, Paraparaumu 5032, New Zealand
Email: question@jointssyboostux.world
Phone: +64 4 297 2022

2. New Zealand Privacy Act 2020

We comply with the Privacy Act 2020 and the Information Privacy Principles (IPPs). Where the EU GDPR also applies to you, we honour comparable rights alongside NZ law.

3. Information we collect

• Contact details: name, email, phone when you enquire or enrol
• Programme information: messages, attendance, session notes you agree we may keep
• Payment records: billing name and transaction references (card data handled by payment providers)
• Technical data: IP address, browser, pages visited when analytics cookies are enabled
• Cookie preferences: stored in your browser localStorage

4. Why we collect and use information (IPP 1 & 10)

• Respond to enquiries and deliver programmes you request
• Issue tax invoices and meet tax obligations (GST)
• Maintain studio safety and quality records
• Improve the website where analytics consent is given
• Send marketing only with consent, in line with the Unsolicited Electronic Messages Act 2007

We collect information directly from you where practicable. If we collect from another source, we will tell you unless an IPP exception applies.

5. Disclosure (IPP 2 & 11)

We do not sell personal information. We may disclose to:

• IT, email, and hosting providers under confidentiality obligations
• Professional advisers (lawyers, accountants) when required
• Regulators or courts when the law requires

Some providers may store data outside New Zealand. We take reasonable steps to ensure comparable safeguards (IPP 12).

6. Security (IPP 5)

We use HTTPS, access controls, staff training, and least-privilege access. No system is perfectly secure. If a notifiable privacy breach occurs under the Privacy Act, we will notify affected individuals and the Office of the Privacy Commissioner when required.

7. Retention

• Enquiries: up to 24 months
• Enrolment and session records: programme duration plus 36 months unless law requires longer
• Financial records: 7 years per tax law
• Analytics: up to 14 months where used

We delete or anonymise information when it is no longer needed for the purpose collected.

8. Your rights

Under the Privacy Act 2020 you may:

• Request access to personal information we hold about you (IPP 6)
• Request correction if information is inaccurate (IPP 7)
• Withdraw marketing consent at any time
• Complain to us, then to the Office of the Privacy Commissioner: privacy.org.nz

EU/UK visitors may also have GDPR rights to erasure, restriction, portability, and objection where applicable.

9. Children and young people

Our website is not directed at children under 16. Enrolment for under-18 participants requires guardian consent documented in writing.

10. Cookies

See our Cookies Policy for details and preference controls.

11. Changes

We may update this policy and change the date above. Material changes will be noted on the website.