Privacy Policy

1. Data Controller Information

The data controller responsible for your personal data is:

Jointsglow
172 Charles Prevost Drive
The Gardens, Auckland 2105
New Zealand
Phone: +64 21 258 7010
Email: partnership@jointsglow.world

2. Information We Collect

We collect information that you provide directly to us, including:

• Name and contact information (email address, phone number)
• Communication preferences
• Information provided through contact forms
• Any other information you choose to provide

We also automatically collect certain information when you visit our website:

• IP address and browser type
• Device information and operating system
• Pages visited and time spent on pages
• Referring website addresses
• Cookie data (see our Cookie Policy for details)

3. Purpose of Data Processing

We process your personal data for the following purposes:

• To respond to your inquiries and provide customer support
• To send you information you have requested
• To improve our website and services
• To analyze website usage and optimize user experience
• To comply with legal obligations
• To protect our rights and prevent fraud

4. How We Collect and Use Information (New Zealand)

We comply with the Privacy Act 2020 (New Zealand) and the Information Privacy Principles (IPPs). We collect personal information only where it is necessary for our functions and we handle it in a way that is fair and not misleading.

We collect and use personal information to:

• Respond to enquiries and provide the services you request
• Operate, maintain, and improve our website
• Meet legal and regulatory obligations in New Zealand
• Protect our business, users, and systems from misuse or harm

Where you submit a contact form, we rely on your consent and our legitimate interests in responding to your message. Where required by law, we will ask for your clear consent before using your information for additional purposes.

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Contact form submissions: 2 years from the date of submission
• Analytics data: 26 months
• Cookie consent records: 1 year
• Legal compliance records: As required by applicable law

After the retention period expires, we securely delete or anonymize your data.

6. Your Privacy Rights in New Zealand

Under the Privacy Act 2020, you have the right to:

• Access: Ask whether we hold personal information about you and request a copy
• Correction: Request correction of inaccurate, incomplete, or out-of-date information
• Complaint: Complain to us or to the Office of the Privacy Commissioner if you believe we have interfered with your privacy

To make a request, contact us using the details in section 1. We will respond within a reasonable time and no later than 20 working days where the Privacy Act requires it, unless an extension applies. We may need to verify your identity before releasing information.

If you are located in the European Economic Area, you may also have additional rights under the General Data Protection Regulation (GDPR), including erasure, restriction, portability, and objection in certain circumstances. Contact us to exercise those rights.

7. Marketing Communications

We will only send electronic marketing messages (such as email newsletters) where permitted under the Unsolicited Electronic Messages Act 2007 (New Zealand). This means we will obtain your consent where required, clearly identify ourselves as the sender, and include a functional unsubscribe facility in each message.

You may opt out of marketing communications at any time by using the unsubscribe link in our emails or by contacting us directly. Opting out of marketing does not affect messages we send in relation to an enquiry or service you have requested.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• SSL/TLS encryption for data transmission
• Secure server infrastructure
• Access controls and authentication
• Regular security assessments
• Employee training on data protection

9. Third-Party Sharing

We do not sell your personal data. We may share your information with:

• Service providers who assist in operating our website
• Analytics providers (with anonymized data)
• Legal authorities when required by law

All third parties are contractually obligated to protect your data and use it only for specified purposes.

10. International Data Transfers

Some service providers we use (for example, analytics or advertising tools) may store or process information outside New Zealand, including in the United States or the European Union. Where personal information is sent overseas, we take reasonable steps to ensure it is protected in line with the Privacy Act 2020, including contractual safeguards where appropriate.

11. Notifiable Privacy Breaches

If a privacy breach is likely to cause serious harm, we will assess the breach and, where required, notify the Office of the Privacy Commissioner and affected individuals in accordance with the Privacy Act 2020.

12. Complaints

If you have concerns about how we handle your personal information, please contact us first so we can try to resolve the matter. If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner (Te Mana Mātāpono Matatapu):

• Website: privacy.org.nz
• Phone: 0800 803 909 (New Zealand)

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last Updated" date below.