1. Introduction and Data Controller
This Privacy Policy describes how Rejuvenwrist ("we", "us", or "our") collects, uses, stores, shares, and protects personal data when you visit our website at rejuvenwrist.world or communicate with us through any channel listed on this site. We are committed to handling personal information responsibly and in accordance with applicable data protection laws, including the EU General Data Protection Regulation (GDPR) where it applies, the New Zealand Privacy Act 2020, and other relevant international privacy frameworks.
The data controller responsible for your personal data is Rejuvenwrist, located at 14 Frost Rd, Mount Roskill, Auckland 1041, New Zealand. You may contact us regarding privacy matters by email at admin@rejuvenwrist.world or by telephone at +64 9 620 8500 during standard business hours.
This website provides general informational content about office activity planning. We do not offer regulated clinical services or therapeutic interventions. Personal data is processed solely in connection with website operation, enquiry handling, service delivery, and legal compliance.
2. Scope of This Policy
This Privacy Policy applies to all personal data processed through our website, contact forms, email correspondence, telephone communications, and any related digital services operated under the rejuvenwrist.world domain. It does not apply to third-party websites or services that may be linked from our pages. We encourage you to review the privacy policies of any external sites you visit.
By using our website or submitting information to us, you acknowledge that you have read and understood this Privacy Policy. Where processing is based on consent, you may withdraw that consent at any time as described in Section 10 of this document.
3. Categories of Personal Data We Collect
3.1 Information You Provide Directly
When you complete our contact form, we may collect your name, email address, message content, and consent confirmation. If you purchase educational products or request consulting services, we may additionally collect billing details, company name, job title, and correspondence related to your order or enquiry.
3.2 Information Collected Automatically
When you browse our website, we may automatically collect technical data such as your IP address, browser type and version, operating system, referring URL, pages viewed, time spent on pages, and general geographic location derived from IP data. This information is collected through cookies and similar technologies as described in our Cookie Policy.
3.3 Information from Third Parties
We generally do not acquire personal data from third-party sources. If we receive information from a business partner or payment processor in connection with a transaction you initiate, we process that data only to fulfil the relevant service or legal obligation.
4. Purposes and Legal Bases for Processing
We process personal data for the following purposes and on the following legal bases under GDPR Article 6:
- Responding to enquiries — When you contact us, we process your data to review and respond to your message. Legal basis: consent (when you submit the form) and legitimate interest in managing business communications.
- Providing services — When you request consulting guidance, personalised activity plans, or educational products, we process data necessary to deliver those services. Legal basis: performance of a contract or steps prior to entering a contract.
- Website operation — We process technical data to maintain site security, prevent fraud, and ensure proper functionality. Legal basis: legitimate interest in operating a secure and functional website.
- Analytics and improvement — With your consent, we may analyse usage patterns to improve content and user experience. Legal basis: consent.
- Marketing communications — With your consent, we may send informational updates about our office planning resources. Legal basis: consent. You may opt out at any time.
- Legal compliance — We may process data to comply with applicable laws, respond to lawful requests from authorities, or establish, exercise, or defend legal claims. Legal basis: legal obligation and legitimate interest.
5. Data Retention Periods
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by law. Specific retention periods include:
- Contact form submissions: retained for up to twenty-four months from the date of submission, unless an ongoing business relationship requires longer retention.
- Customer and transaction records: retained for up to seven years to comply with tax, accounting, and commercial record-keeping requirements in New Zealand.
- Cookie and analytics data: retained according to the periods specified in our Cookie Policy, typically between one and twenty-six months depending on cookie type.
- Marketing preferences: retained until you withdraw consent or request deletion, plus a brief suppression record to honour your opt-out.
- Server logs and security records: retained for up to twelve months unless required for incident investigation.
When retention periods expire, we securely delete or anonymise personal data so that it can no longer be associated with an identifiable individual.
6. Data Sharing and Recipients
We do not sell your personal data. We may share data with the following categories of recipients when necessary:
- Service providers: hosting providers, email delivery services, payment processors, and analytics platforms that process data on our behalf under written data processing agreements.
- Professional advisers: lawyers, accountants, or auditors where disclosure is necessary for compliance or legal advice.
- Public authorities: regulators, courts, or law enforcement when required by applicable law or valid legal process.
Where data is transferred outside the European Economic Area or New Zealand, we implement appropriate safeguards such as Standard Contractual Clauses, adequacy decisions, or equivalent mechanisms recognised under applicable law.
7. Security Measures
We implement technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:
- HTTPS encryption for all data transmitted between your browser and our servers.
- Access controls limiting personal data access to authorised personnel with a legitimate business need.
- Regular review of security practices and infrastructure configurations.
- Secure storage of electronic records with backup and recovery procedures.
- Staff awareness of data protection obligations and confidentiality requirements.
While we take reasonable steps to safeguard your information, no method of transmission over the internet or electronic storage is completely secure. We cannot ensure absolute security but will notify affected individuals and relevant authorities of data breaches where required by law.
8. Children's Privacy
Our website and services are directed at business professionals and office managers. We do not knowingly collect personal data from individuals under the age of sixteen. If you believe we have inadvertently collected data from a minor, please contact us and we will take steps to delete such information promptly.
9. Automated Decision-Making and Profiling
We do not use automated decision-making or profiling that produces legal or similarly significant effects on individuals. Analytics tools may aggregate usage statistics, but these do not result in automated decisions about your access to services or content.
10. Your Rights Under GDPR and Applicable Law
Depending on your location and applicable law, you may have the following rights regarding your personal data:
- Right of access: request confirmation of whether we process your data and obtain a copy of that data.
- Right to rectification: request correction of inaccurate or incomplete personal data.
- Right to erasure: request deletion of your data where there is no compelling reason for continued processing.
- Right to restrict processing: request limitation of processing in certain circumstances.
- Right to data portability: receive your data in a structured, commonly used, machine-readable format where processing is based on consent or contract.
- Right to object: object to processing based on legitimate interests or to direct marketing at any time.
- Right to withdraw consent: withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
- Right to lodge a complaint: file a complaint with a supervisory authority, such as the Office of the Privacy Commissioner in New Zealand or your local EU data protection authority.
To exercise any of these rights, contact us at admin@rejuvenwrist.world with sufficient detail to identify your request. We will respond within one month, or inform you if an extension is necessary. We may request verification of your identity before processing certain requests.
11. New Zealand Privacy Act 2020
As a business operating in New Zealand, we comply with the Information Privacy Principles (IPPs) under the Privacy Act 2020. You have the right to access and request correction of personal information we hold about you. If you have concerns about our handling of your information, you may contact the Office of the Privacy Commissioner at privacy.org.nz.
12. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. The "Last updated" date at the top of this page indicates when the policy was most recently revised. Material changes will be communicated through a notice on our website. We encourage you to review this page regularly.
13. Contact Information
For questions, requests, or complaints regarding this Privacy Policy or our data practices, contact:
Rejuvenwrist
14 Frost Rd, Mount Roskill, Auckland 1041, New Zealand
Email: admin@rejuvenwrist.world
Phone: +64 9 620 8500
Website: rejuvenwrist.world