Privacy Policy

Last updated: 13 June 2026

This document is our public privacy statement under the Privacy Act 2020 (New Zealand). It explains how we handle your personal information when you use vivovibestrength.world.

Agency Details

Agency name: Vivovibestrength.ddd

Physical address: Unit 13/21 Bealey Avenue, Merivale, Christchurch 8014, New Zealand

Privacy enquiries: relations@vivovibestrength.world

Phone: +64 27 285 3309

1. Introduction and Applicable Law

We are an agency for the purposes of the Privacy Act 2020 (New Zealand). We comply with the Act's 13 Information Privacy Principles (IPPs), including IPP 3A (indirect collection notification, in force from 1 May 2026), and the mandatory notifiable privacy breach scheme in Part 6 of the Act.

Where we offer services to individuals in the European Economic Area, we also respect applicable requirements of the EU General Data Protection Regulation (GDPR). This statement describes our practices for all visitors.

2. What Personal Information We Collect

Personal information means information about an identifiable individual. We may collect:

• Identity and contact details: Your name and email address when you submit our contact form.
• Communications: The content of messages you send us and related correspondence.
• Technical information: IP address, browser type, device type, operating system, referring URL, and general location derived from IP (country/region level).
• Usage information: Pages viewed, session duration, and interaction patterns — only where you have accepted analytics cookies.
• Cookie and consent records: Your cookie category preferences stored in your browser's local storage.

We do not intentionally collect sensitive information (such as health records or financial details) through this website. Please do not include sensitive information in contact form messages unless necessary.

3. How We Collect Information (IPPs 2, 3, 3A and 4)

Direct collection: We collect personal information directly from you when you submit the contact form, email us, call us, or adjust cookie preferences on our site.

Indirect collection: We may receive technical and usage data automatically through server logs, cookies, and analytics tools. Where information is collected indirectly, we comply with IPP 3A by describing that collection in this statement and our Cookie Policy.

Manner of collection: We collect information lawfully, fairly, and without intruding unreasonably on your privacy. We only collect information that is necessary for our stated purposes (IPP 1).

4. Purpose of Collection (IPP 1 and 10)

We collect and use personal information only for lawful purposes connected with our operations, including to:

• Respond to enquiries and communicate with you about our content or events.
• Operate, secure, maintain, and improve our website.
• Understand how visitors use the site (analytics — only with your consent).
• Comply with legal obligations and respond to lawful requests from authorities.
• Protect our website, users, and agency from fraud, abuse, or security threats.

We will not use your personal information for a purpose other than the purpose for which it was collected, unless we believe on reasonable grounds that the new use is directly related to the original purpose, you authorise the new use, or the new use is permitted by law (IPP 10).

5. Notification at Collection (IPP 3)

When we collect personal information from you directly (for example, through the contact form), we notify you of the following at or before the time of collection:

• Our identity and contact details (see Agency Details above).
• The fact that information is being collected and the purposes of collection.
• The intended recipients of the information (including categories of third-party service providers).
• Whether providing information is mandatory or voluntary, and consequences if you do not provide it.
• Your rights of access and correction under IPPs 6 and 7.
• That the contact form requires your explicit consent to processing, as indicated by the GDPR consent checkbox.

Contact form: Name, email, and message are required to respond to your enquiry. If you do not provide this information, we cannot process your request.

6. Cookies and Online Tracking

Cookies and similar technologies may collect personal information. Details of each cookie category, providers, durations, and how to manage preferences are set out in our Cookie Policy. Non-essential cookies are only activated after you provide consent through our cookie banner.

7. Disclosure of Personal Information (IPP 11)

We do not sell your personal information. We may disclose information to:

• Service providers (such as website hosting, email, and analytics providers) who process data on our behalf under contractual confidentiality and security obligations.
• Professional advisers (such as lawyers or accountants) where reasonably necessary.
• Regulators and law enforcement when required or authorised by New Zealand law.
• Another individual where you have authorised disclosure or where disclosure is necessary to prevent a serious threat to health or safety.

Before disclosing personal information, we take reasonable steps to ensure the recipient will protect it in line with the IPPs (IPP 11).

8. Disclosure Outside New Zealand (IPP 12)

Some service providers may store or process data outside New Zealand (for example, in Australia, the United States, or the European Union). Before disclosing personal information overseas, we comply with IPP 12 by ensuring the recipient is subject to comparable safeguards, including:

• Contractual data protection clauses with the overseas provider.
• Verification that the provider maintains appropriate security practices.
• Reliance on applicable adequacy mechanisms or exceptions permitted under Schedule 5 of the Privacy Act 2020, where relevant.

You may contact us for further information about overseas recipients and safeguards we rely on.

9. Storage, Security, and Retention (IPPs 5 and 9)

We take reasonable safeguards to protect personal information against loss, unauthorised access, misuse, or disclosure. Measures include HTTPS encryption, access controls, secure hosting environments, and limiting staff access to personal information on a need-to-know basis.

We retain personal information only for as long as necessary for the purposes for which it was collected:

• Contact form submissions: Up to 24 months from the date of enquiry, unless a longer period is required by law or for dispute resolution.
• Server logs: Up to 90 days.
• Analytics data: Up to 26 months, where you have consented to analytics cookies.
• Cookie consent preferences: Stored locally in your browser until you clear site data.

When information is no longer required, we take reasonable steps to securely delete or anonymise it (IPP 9).

10. Accuracy (IPP 8)

Before using personal information, we take reasonable steps to ensure it is accurate, up to date, complete, relevant, and not misleading. If you believe information we hold about you is incorrect, please contact us so we can update it.

11. Unique Identifiers (IPP 13)

We do not assign unique identifiers (such as customer reference numbers) unless necessary for operational functions. Analytics tools may assign pseudonymous identifiers (such as cookie IDs) only where you have consented to non-essential cookies. We do not adopt identifiers assigned to you by another agency unless authorised by law or agreed with you.

12. Your Rights — Access and Correction (IPPs 6 and 7)

Under the Privacy Act 2020, you have the right to:

• Request access to personal information we hold about you (IPP 6).
• Request correction of personal information if you believe it is inaccurate, out of date, incomplete, irrelevant, or misleading (IPP 7).

To make a request, contact us at relations@vivovibestrength.world with sufficient detail to identify you and the information concerned. We will respond within 20 working days, or inform you if an extension is required under the Act.

We may need to verify your identity before releasing information. In limited circumstances permitted by the Privacy Act 2020, we may refuse access or correction; if so, we will explain the reasons and your options.

13. Additional Rights for EEA Visitors (GDPR)

If GDPR applies to our processing of your data, you may also have rights to erasure, restriction of processing, data portability, and to object to certain processing. You may withdraw consent at any time where processing is consent-based. To exercise these rights, contact us using the details above.

14. Marketing Communications

We do not send commercial electronic messages without your consent, in accordance with the Unsolicited Electronic Messages Act 2007. If we contact you by email in response to an enquiry, that communication relates to your request and is not unsolicited marketing. You may opt out of any optional communications at any time by contacting us.

15. Notifiable Privacy Breaches

If a privacy breach occurs that is likely to cause serious harm to affected individuals, we will notify the Office of the Privacy Commissioner and affected individuals as soon as practicable, in accordance with Part 6 of the Privacy Act 2020. We maintain internal procedures to assess, contain, and respond to privacy breaches.

16. Children's Privacy

Our website is intended for a general audience and is not directed at children under 16. We do not knowingly collect personal information from children without appropriate parental or guardian authority. If you believe we have collected information from a child, please contact us and we will take steps to delete it.

17. Complaints

If you have concerns about how we handle your personal information, please contact us first so we can try to resolve the matter. If you are not satisfied with our response, you may lodge a complaint with the Office of the Privacy Commissioner:

• Website: privacy.org.nz
• Phone: 0800 803 909 (New Zealand)

EEA residents may also contact their local data protection supervisory authority where GDPR applies.

18. Changes to This Statement

We may update this privacy statement to reflect changes in our practices, technology, or legal requirements. The "Last updated" date at the top of this page will be revised when changes are made. Material changes will be communicated where appropriate.

19. Contact Us

For privacy-related questions, access requests, correction requests, or complaints:

Vivovibestrength.ddd
Unit 13/21 Bealey Avenue, Merivale, Christchurch 8014, New Zealand
Email: relations@vivovibestrength.world
Phone: +64 27 285 3309