1. Agency and Contact
Under the Privacy Act 2020 (New Zealand), Charmingchargeon is the agency responsible for personal information collected through this website.
Charmingchargeon
27 Victoria Avenue, Palmerston North Central, Palmerston North 4410, New Zealand
Email: touch@charmingchargeon.world
Phone: +64 6 357 3109
For privacy enquiries or requests relating to your personal information, contact us using the details above.
2. Scope
This Privacy Policy describes how Charmingchargeon ("we", "us", "our") collects, uses, stores, and protects personal information when you visit our website at charmingchargeon.world or contact us through our forms.
We comply with the Privacy Act 2020 and its Information Privacy Principles (IPPs). Where applicable, we also comply with the General Data Protection Regulation (GDPR) for users in the European Economic Area.
3. Information We Collect
We may collect the following categories of personal information:
- Identity information: name
- Contact information: email address, phone number (if provided)
- Communication information: messages sent through our contact form
- Technical information: IP address, browser type, device information, pages visited, and referral source
- Cookie and preference data: choices stored via our cookie consent mechanism (see our Cookie Policy)
We collect personal information directly from you when you submit our contact form or otherwise communicate with us. Some technical information is collected automatically when you browse the website.
4. Why We Collect Information
We collect and use personal information for the following purposes:
- Responding to enquiries and communicating with you about our lifestyle coaching services
- Providing coaching information, scheduling, and related administration
- Improving website performance, security, and content (where you have consented to analytics cookies)
- Measuring advertising effectiveness (where you have consented to marketing cookies)
- Complying with legal and regulatory obligations
If you do not provide information we reasonably require to respond to an enquiry or deliver a requested service, we may be unable to assist you fully.
5. Legal Bases for Processing
Under the Privacy Act 2020, we collect personal information only where it is necessary for a lawful purpose connected with our functions or activities, and where the collection is fair and not unreasonably intrusive.
For users in the European Economic Area, we rely on consent, contract performance, legitimate interests, or legal obligation as appropriate under GDPR.
6. Information Privacy Principles
We handle personal information in accordance with the IPPs under the Privacy Act 2020, including:
- Collecting information for lawful purposes connected with our activities (IPP 1)
- Collecting information directly from you where practicable (IPP 2)
- Being open about why we collect information and how it will be used (IPP 3)
- Protecting information with reasonable security safeguards (IPP 5)
- Providing access to your personal information on request (IPP 6)
- Correcting information on request where appropriate (IPP 7)
- Not using information for a purpose other than that for which it was collected, except as permitted by law (IPP 10)
- Not disclosing information except as permitted by law (IPP 11)
- Applying appropriate safeguards when disclosing information overseas (IPP 12)
7. Retention
Contact form submissions are retained for up to 24 months unless a longer period is required for ongoing communication or legal obligations. Analytics data is retained for up to 26 months. Cookie consent preferences are stored locally on your device until cleared. Technical logs are retained for up to 90 days.
When personal information is no longer required, we take reasonable steps to destroy or de-identify it.
8. Disclosure and Sharing
We do not sell personal information. We may share information with trusted service providers who assist with website hosting, analytics, email delivery, or advertising measurement, subject to appropriate contractual safeguards and only where necessary for the purposes described in this policy.
We may disclose information where required or authorised by New Zealand law, including in response to a lawful request from a government agency or court.
9. Overseas Disclosure
Some service providers may store or process personal information outside New Zealand. Before disclosing personal information overseas, we take reasonable steps to ensure the recipient protects the information in a manner consistent with the Privacy Act 2020 (IPP 12).
For users in the European Economic Area, where personal information is transferred outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.
10. Direct Marketing
We do not send unsolicited commercial electronic messages. If we contact you about our services by email, we will do so only where you have consented or where another exception under the Unsolicited Electronic Messages Act 2007 applies. You may opt out of marketing communications at any time by contacting us.
11. Your Rights
Under the Privacy Act 2020, you have the right to:
- Request access to personal information we hold about you (IPP 6)
- Request correction of personal information if you believe it is inaccurate, out of date, incomplete, irrelevant, or misleading (IPP 7)
- Withdraw consent where processing is based on consent (without affecting the lawfulness of prior processing)
Under GDPR, where applicable, you may also have rights to erasure, restriction of processing, data portability, and to object to certain processing.
To exercise your rights, contact us at touch@charmingchargeon.world. We will respond within a reasonable timeframe and in accordance with applicable law.
12. Complaints
If you have concerns about how we handle your personal information, please contact us first so we can try to resolve the matter.
If you are not satisfied with our response, you may lodge a complaint with the Office of the Privacy Commissioner (Te Mana Mātāpono Matatapu):
- Website: www.privacy.org.nz
- Phone: 0800 803 909 (within New Zealand)
EEA residents may also lodge a complaint with their local data protection authority.
13. Privacy Breaches
We maintain procedures to identify, assess, and respond to privacy breaches. Where a notifiable privacy breach occurs under the Privacy Act 2020, we will notify the Office of the Privacy Commissioner and affected individuals as required by law.
14. Security
We implement reasonable technical and organisational safeguards to protect personal information, including HTTPS encryption, access controls, and periodic security reviews. No method of transmission over the internet is entirely secure, but we take practicable steps to protect your information.
15. Automated Decision-Making
We do not use automated decision-making or profiling that produces legal or similarly significant effects on individuals.
16. Children
Our website and coaching services are directed at adults. We do not knowingly collect personal information from individuals under 18 years of age without appropriate parental or guardian consent. If you believe we have collected information from a minor, please contact us immediately.
17. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Material changes will be communicated where required by law. We encourage you to review this policy periodically.