1. Who We Are
Anklesutendon ("we", "us", "our") is a New Zealand business at 233A Riverside Drive, Waterloo, Lower Hutt 5011, New Zealand. We are the agency responsible for your personal information under the Privacy Act 2020. Contact our privacy officer: welcome@anklesutendon.world or +64 22 037 1344.
2. Information We Collect
We may collect:
- Identity information — name, username
- Contact information — email, phone number, postal address
- Technical information — IP address, browser type, device data, cookies
- Usage information — pages visited, session duration, interaction data
- Communication information — messages sent via our contact form
- Challenge information — habit tracking entries, sprint participation records
- Payment information — transaction records (payment card details are processed by our payment provider, not stored by us)
3. How We Collect Information
We collect information when you: enrol in a challenge, complete our contact form, browse our website, communicate with us, or interact with our emails (where you have consented to receive them).
4. Why We Collect and Use Information
We use personal information to: deliver challenge services, respond to enquiries, process payments, improve our website, send service communications, comply with legal obligations, and — with your consent — send marketing communications.
5. Legal Basis (International Visitors)
For visitors from the European Economic Area, we also rely on GDPR legal bases: consent, contract performance, legitimate interests, and legal obligation. New Zealand visitors are primarily protected under the Privacy Act 2020 Information Privacy Principles (IPPs).
6. Information Privacy Principles
We adhere to the 13 Information Privacy Principles under the Privacy Act 2020, including obligations to collect information lawfully, ensure accuracy, store securely, and allow individuals access to their personal information.
7. Disclosure to Third Parties
We do not sell personal information. We may share data with: website hosting providers, email service providers, payment processors, analytics providers (with consent), and government authorities when required by law. All processors are bound by confidentiality and data protection obligations.
8. Overseas Disclosure
Some service providers may store data outside New Zealand (e.g. cloud hosting). Under IPP 12, we ensure comparable safeguards exist or you are informed of the disclosure. By using our services, you acknowledge such transfers may occur.
9. Storage and Retention
- Contact form submissions: 24 months
- Challenge participation records: 36 months after last active sprint
- Payment records: 7 years (as required by tax law)
- Cookie preferences: until cleared from your browser
- Analytics data: anonymised after 14 months
10. Security
We use SSL/TLS encryption, access controls, staff training, and regular security reviews. No method of transmission is 100% secure, but we take reasonable steps to protect your information.
11. Your Rights
Under the Privacy Act 2020, you have the right to:
- Request access to personal information we hold about you
- Request correction of inaccurate information
- Withdraw consent for marketing communications
- Request deletion where we have no legal obligation to retain data
- Complain to the Office of the Privacy Commissioner
EEA residents also have rights to data portability, restriction of processing, and objection. Contact us to exercise any right — we respond within 20 working days (NZ) or 30 days (GDPR).
12. Marketing and Unsolicited Electronic Messages
We comply with the Unsolicited Electronic Messages Act 2007. Marketing emails are only sent with your express consent and include an unsubscribe option in every message.
13. Cookies
See our Cookies Policy for details on cookie use and how to manage preferences.
14. Children
Our services are not directed at persons under 16. We do not knowingly collect information from children. Contact us if you believe a child has provided personal information.
15. Privacy Breaches
If a privacy breach occurs that is likely to cause serious harm, we will notify affected individuals and the Office of the Privacy Commissioner as required under the Privacy Act 2020.
16. Complaints
Contact us first at welcome@anklesutendon.world. If unresolved, you may complain to the Office of the Privacy Commissioner at www.privacy.org.nz or call 0800 803 909.
17. Changes
We may update this policy from time to time. Material changes will be posted on this page with an updated date.