This Privacy Policy describes how Powercrwristio ("we", "us", or "our") collects, uses, stores, and protects personal data when you visit our website at powercrwristio.world or interact with our services. We are committed to handling your information responsibly and in accordance with the General Data Protection Regulation (GDPR), the New Zealand Privacy Act 2020, and other applicable international privacy laws.
1. Data Controller Information
The data controller responsible for your personal data is:
- Business Name: Powercrwristio
- Address: 206–218 Queen St, Auckland Central, Auckland 1010, New Zealand
- Phone: +64 9 379 5950
- Email: admin@powercrwristio.world
- Website: powercrwristio.world
For any privacy-related inquiries, data subject requests, or complaints, please contact us using the details above. We aim to respond to all privacy inquiries within thirty calendar days.
2. Scope of This Policy
This policy applies to all personal data collected through our website, contact forms, consulting sessions, educational product purchases, cookie technologies, and any other channel operated by Powercrwristio. It does not apply to third-party websites linked from our pages. We encourage you to review the privacy policies of any external sites you visit.
3. Types of Personal Data We Collect
3.1 Information You Provide Directly
When you contact us, purchase products, or book consulting sessions, we may collect:
- Full name
- Email address
- Phone number (if provided)
- Message content and inquiry details
- Billing and payment information for product purchases
- Scheduling preferences for consulting appointments
- Activity planning preferences shared during consulting sessions
3.2 Information Collected Automatically
When you browse our website, we may automatically collect:
- IP address (anonymised where possible for analytics)
- Browser type and version
- Operating system
- Device type
- Pages visited and time spent on each page
- Referring website or search terms
- Cookie identifiers and consent preferences
3.3 Information We Do Not Collect
We do not intentionally collect sensitive personal data such as medical records, health diagnoses, government identification numbers, or financial account credentials beyond what is necessary for payment processing through secure third-party providers.
4. Legal Basis for Processing
Under the GDPR, we process personal data based on the following legal grounds:
- Consent: When you submit a contact form, accept cookies, or agree to data processing via our GDPR consent checkbox.
- Contractual Necessity: When processing is required to deliver educational products or consulting services you have purchased.
- Legitimate Interests: For website security, fraud prevention, service improvement, and responding to general inquiries, balanced against your privacy rights.
- Legal Obligation: When we are required to retain or disclose data by applicable law, regulation, or court order.
5. Purposes of Data Usage
We use your personal data exclusively for the following purposes:
- Responding to contact form submissions and general inquiries
- Scheduling and conducting consulting sessions for movement planning guidance
- Processing and fulfilling orders for educational products and programmes
- Sending transactional communications related to your purchases or appointments
- Improving website functionality and user experience through anonymised analytics
- Maintaining website security and preventing unauthorised access
- Complying with legal and regulatory requirements
- Managing cookie consent preferences as described in our Cookie Policy
We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.
6. Data Retention Periods
We retain personal data only for as long as necessary to fulfil the purposes described in this policy:
- Contact form submissions: Twelve months after the inquiry is resolved, unless an ongoing client relationship requires extended retention.
- Consulting session records: Twenty-four months after the final session, unless you request earlier deletion.
- Purchase and transaction records: Seven years for accounting and tax compliance purposes.
- Cookie consent preferences: Twelve months, after which we will request renewed consent.
- Analytics data: Twenty-six months in anonymised or pseudonymised form.
- Server log files: Ninety days for security monitoring purposes.
After the applicable retention period expires, data is securely deleted or irreversibly anonymised.
7. Data Sharing and Third Parties
We do not sell, rent, or trade your personal data to third parties. We may share data with the following categories of service providers who process data on our behalf under strict contractual obligations:
- Website hosting and infrastructure providers
- Email delivery services for inquiry responses
- Payment processing providers for product purchases
- Analytics service providers (only when you have consented to analytics cookies)
All third-party processors are required to implement appropriate technical and organisational security measures and to process data only according to our documented instructions.
8. International Data Transfers
Some of our service providers may be located outside New Zealand or the European Economic Area. When personal data is transferred internationally, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission, adequacy decisions, or equivalent protections under New Zealand law.
9. Security Measures
We implement technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:
- HTTPS encryption for all data transmitted between your browser and our servers
- Access controls limiting data access to authorised personnel only
- Regular security assessments of our website infrastructure
- Secure storage of payment data through PCI-compliant payment processors
- Employee training on data protection responsibilities
- Incident response procedures for potential data breaches
While we take reasonable precautions, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security but commit to notifying affected individuals and relevant authorities of any data breach within seventy-two hours where required by law.
10. Your Rights Under GDPR and Applicable Law
Depending on your location, you may have the following rights regarding your personal data:
- Right of Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Erasure: Request deletion of your data where no compelling reason exists for continued processing.
- Right to Restrict Processing: Request that we limit how we use your data in certain circumstances.
- Right to Data Portability: Receive your data in a structured, machine-readable format.
- Right to Object: Object to processing based on legitimate interests or for direct marketing purposes.
- Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent, without affecting the lawfulness of prior processing.
- Right to Lodge a Complaint: File a complaint with the Office of the Privacy Commissioner in New Zealand or your local data protection authority.
To exercise any of these rights, contact us at admin@powercrwristio.world. We will verify your identity before processing requests and respond within thirty calendar days.
11. Children's Privacy
Our website and services are not directed at individuals under the age of sixteen. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a minor, please contact us immediately and we will take steps to delete such information.
12. Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. The "Last updated" date at the top of this page indicates when the most recent revision took effect. Material changes will be communicated through a notice on our website. Continued use of our services after changes constitutes acceptance of the updated policy.
13. Contact Information
If you have questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact:
- Powercrwristio
- 206–218 Queen St, Auckland Central, Auckland 1010, New Zealand
- Phone: +64 9 379 5950
- Email: admin@powercrwristio.world