Privacy Policy
Last updated: 19 May 2026
This Privacy Policy explains how Shouldersauclean.world (“we”, “us”, “our”) collects, uses, stores, and discloses personal information about you when you use our website. We comply with the Privacy Act 2020 (New Zealand) and its Information Privacy Principles (IPPs). Where the EU General Data Protection Regulation (GDPR) applies to you, we also describe your rights under that law.
1. Who we are (agency details)
We are the organisation responsible for this website and the personal information we hold about you.
- Website / trading name: Shouldersauclean.world
- Email: ask@shouldersauclean.world
- Phone: +64 21 085 14229
- Postal / physical address: Rise Dance Studios, Level 2/1179 Eruera Street, Central, Rotorua 3010, New Zealand
- Privacy enquiries: use the email above with the subject line “Privacy request”
2. Scope and application
This policy applies to personal information collected through this website, including the contact form, cookie consent tool, and optional analytics or marketing technologies if you enable them. It does not cover third-party websites linked from our content (for example, embedded maps), which have their own privacy practices.
“Personal information” means information about an identifiable individual, as defined in the Privacy Act 2020.
3. What we collect and how (IPP 1–4, 9)
- Contact form: your name, email address, message content, and confirmation that you agree to our processing (consent checkbox).
- Communications: any follow-up correspondence if you contact us by email or phone.
- Technical information: if you accept analytics cookies, we may collect IP address, browser type, device type, referring URL, and pages viewed in aggregated form.
- Cookie preferences: your consent choices stored in your browser (localStorage), including date of consent.
- Server logs: basic connection data (IP address, timestamp, user agent) for security and troubleshooting, even if optional cookies are rejected.
We collect information directly from you unless stated otherwise. We do not knowingly collect sensitive health information through the contact form—please do not send medical records or clinical details.
4. Why we collect and use information (IPP 1, 10)
We use personal information only for lawful purposes connected with our functions, including:
- responding to enquiries and workshop or event requests;
- operating, securing, and improving the website;
- record-keeping and evidence of consent for cookies and marketing;
- complying with legal obligations and defending legal claims;
- analytics and marketing measurement, only if you consent to those cookies.
GDPR legal bases (where applicable): performance of a request you make (contact), legitimate interests (security, basic site operation), and consent (non-essential cookies and optional marketing).
5. Disclosure to others (IPP 11)
We do not sell your personal information. We may disclose information to:
- Service providers (hosting, email delivery, analytics) who process data on our instructions and only as needed;
- Professional advisers (lawyers, accountants) under confidentiality;
- Regulators or courts when required by New Zealand law.
We require processors to protect information and use it only for the agreed purpose.
6. Overseas disclosure (IPP 12)
Some providers may store or process data outside New Zealand (for example, in Australia, the United States, or the European Economic Area). Before we disclose personal information overseas, we take reasonable steps to ensure the recipient is subject to safeguards comparable to the Privacy Act, or we rely on your express authorisation where appropriate. You may contact us for more detail about the countries involved and safeguards used.
7. Storage, security, and retention (IPP 5)
We take reasonable safeguards against loss, misuse, unauthorised access, or disclosure, including HTTPS encryption, access controls, and periodic review of forms and hosting settings. No online system is completely secure.
Retention periods (unless a longer period is required by law):
- Contact form messages: up to 24 months from last contact;
- Analytics data (if enabled): up to 14 months;
- Cookie consent records: up to 36 months;
- Security server logs: up to 90 days.
When information is no longer needed, we delete or de-identify it where practicable.
8. Your rights under New Zealand law (IPPs 6–7)
You have the right to:
- Access personal information we hold about you (IPP 6);
- Request correction if information is inaccurate, out of date, incomplete, or misleading (IPP 7);
- Withdraw consent for optional cookies or marketing at any time via our Cookie Policy tools—this does not affect processing already lawfully carried out;
- Be informed about a notifiable privacy breach affecting your information where we are required to notify you under Part 6 of the Privacy Act 2020.
To make a request, email us with enough detail to identify you and the information concerned. We will respond within a reasonable time and no later than 20 working days unless an extension is permitted under the Privacy Act. We may need to verify your identity before releasing information.
9. Rights for individuals in the European Economic Area (GDPR)
Where GDPR applies, you may also have rights to erasure, restriction of processing, data portability, and to object to processing based on legitimate interests. You may lodge a complaint with your local supervisory authority. Our primary establishment for GDPR enquiries is the contact details in section 1.
10. Complaints to the Privacy Commissioner
If you are unhappy with our response, you may complain to the Office of the Privacy Commissioner (New Zealand):
- Website: www.privacy.org.nz
- Free phone (enquiries): 0800 803 909
We encourage you to contact us first so we can try to resolve your concern.
11. Marketing, Google Ads, and electronic messages
We do not send commercial electronic messages without your consent, in line with the Unsolicited Electronic Messages Act 2007. If you subscribe to updates in the future, each message will identify us and include a clear unsubscribe option.
If you consent to marketing cookies, we or our advertising partners (such as Google) may use online identifiers to measure ad performance or show relevant ads on other sites. You can withdraw consent via our cookie banner at any time. For more detail, see our Cookie Policy and Google’s ad settings at adssettings.google.com.
12. Children and young people
This website is intended for a general audience and is not directed at children under 16. We do not knowingly collect personal information from children without appropriate parental or guardian consent. Contact us if you believe we have collected a child’s information.
13. Automated decision-making
We do not use automated decision-making or profiling that produces legal or similarly significant effects on individuals.
14. Changes to this policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top will change, and material changes will be communicated on this page where appropriate. Continued use of the website after changes take effect may constitute acceptance where permitted by law.
15. Related documents
See also our Cookie Policy and Terms of Use.