Vivyskeleton ("we", "us", "our") operates the website vivyskeleton.world from New Zealand. This Privacy Policy explains how we collect, use, disclose, and protect your personal information in accordance with the Privacy Act 2020 and its Information Privacy Principles (IPPs). Where applicable, we also comply with the General Data Protection Regulation (GDPR) for visitors from the European Economic Area.
1. Agency Details
The agency responsible for your personal information is:
Vivyskeleton
12 Pahau Avenue, Tikipunga, Whangārei 0112, New Zealand
Email: office@vivyskeleton.world
Phone: +64 9 434 4659
2. Information We Collect
Information you provide
- Name and email address when you submit our contact form
- Message content and enquiry details
- Consent confirmation and timestamp
- Booking and payment details when you purchase services
Information collected automatically
- IP address, browser type, and device information
- Pages visited, time spent, and referral source
- Cookie and localStorage preferences
3. Purpose of Collection (IPP 1 & 4)
We collect personal information only for lawful purposes connected with our functions. Specifically:
- Responding to enquiries and providing planning services
- Processing bookings and payments
- Improving our website (with consent for analytics)
- Complying with legal obligations under New Zealand law
- Maintaining security and preventing fraud
We will not use your information for any other purpose without your consent, unless required or authorised by law.
4. How We Use and Disclose Information
We do not sell your personal information. We may share information with:
- Service providers who assist with hosting, email, or payment processing, under confidentiality agreements
- Regulatory authorities when required by law
Where information is transferred outside New Zealand, we ensure comparable safeguards are in place, as required by IPP 12.
5. Storage and Retention (IPP 9)
Contact form submissions are retained for up to 24 months unless a longer period is needed for ongoing service delivery or legal compliance. Payment records are kept for seven years per Inland Revenue requirements. Analytics data (when consented) is retained for up to 14 months. Cookie preferences remain in your browser until cleared.
6. Security (IPP 5)
We take reasonable steps to protect personal information from loss, unauthorised access, use, or disclosure. Measures include HTTPS encryption, access controls, and staff training. No internet transmission is completely secure, but we follow industry-standard practices appropriate to the sensitivity of the data we hold.
7. Your Rights Under the Privacy Act 2020
You have the right to:
- Access personal information we hold about you (IPP 6)
- Request correction of inaccurate information (IPP 7)
- Withdraw consent for non-essential processing at any time
- Complain to the Office of the Privacy Commissioner if you believe we have breached the Privacy Act
To exercise access or correction rights, email office@vivyskeleton.world. We will respond within 20 working days as required by the Act.
8. Notifiable Privacy Breaches
Under the Privacy Act 2020, if a privacy breach causes or is likely to cause serious harm, we are required to notify the Office of the Privacy Commissioner and affected individuals. We maintain internal procedures to identify, assess, and respond to breaches promptly.
9. Cookies and Tracking
We use cookies and localStorage as described in our Cookie Policy. Non-essential cookies require your consent before activation.
10. Children's Privacy
Our services are not directed at individuals under 16. We do not knowingly collect personal information from children.
11. Complaints
If you have a privacy concern, contact us first. If unresolved, you may lodge a complaint with:
Office of the Privacy Commissioner
Website: www.privacy.org.nz
Phone: 0800 803 909
12. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated date. Continued use of our website after changes constitutes acceptance.