Privacy Policy

1. Introduction

Kneesplanet ("we", "us", "our") respects your privacy and is committed to protecting your personal information in accordance with the Privacy Act 2020 (New Zealand) and the Information Privacy Principles (IPPs). This policy explains how we collect, use, disclose, store, and protect personal information when you visit kneesplanet.world or engage our services.

2. Information We Collect

We may collect the following categories of personal information:

• Identity information: name, job title, organisation name
• Contact information: email address, phone number, postal address
• Communication content: messages submitted through contact forms or email
• Technical information: IP address, browser type, device information, pages visited, referral source
• Cookie preferences: choices stored via our cookie consent system in localStorage
• Service-related information: programme participation data, feedback, and survey responses where you engage our services

We collect personal information only where it is necessary for our functions and activities, in line with IPP 1 of the Privacy Act 2020.

3. How We Collect Information

• Directly from you via contact forms, email, phone, or in-person meetings
• Automatically through cookies and similar technologies (with your consent where required)
• From your employer or organisation where they engage our services on behalf of your team

4. Purpose of Collection (IPP 1 & 4)

We collect and use personal information for the following purposes:

• Responding to enquiries and providing programme information
• Delivering contracted workplace wellbeing services
• Managing client relationships and invoicing
• Improving our website and services through analytics (with consent)
• Marketing communications about our services (with consent, in compliance with the Unsolicited Electronic Messages Act 2007)
• Complying with legal obligations under New Zealand law

We will not use your personal information for purposes other than those for which it was collected, unless we have your authorisation or an exception under the Privacy Act 2020 applies.

5. Disclosure of Information (IPP 2 & 11)

We do not sell personal information. We may disclose information to:

• Service providers who assist with hosting, email delivery, analytics, or payment processing, bound by confidentiality obligations
• Professional advisers (lawyers, accountants) where necessary
• Government agencies or courts when required by New Zealand law

Where we disclose information to third parties, we take reasonable steps to ensure they protect it in accordance with the Privacy Act 2020.

6. Storage and Retention

Personal information is stored securely in New Zealand or with cloud providers that meet appropriate security standards. Retention periods:

• Contact form enquiries: up to 24 months, unless a business relationship is established
• Client records: duration of engagement plus 7 years (for tax and legal compliance)
• Technical logs: 12 months
• Cookie preferences: stored locally on your device until cleared

When information is no longer needed, we securely delete or de-identify it.

7. Security (IPP 5)

We implement reasonable safeguards including TLS encryption, access controls, staff privacy training, and regular review of our security practices. No method of electronic transmission is completely secure; we cannot guarantee absolute security but take breaches seriously.

8. Notifiable Privacy Breaches

Under the Privacy Act 2020, if a privacy breach causes or is likely to cause serious harm, we will notify the Office of the Privacy Commissioner and affected individuals as soon as practicable.

9. Your Rights Under the Privacy Act 2020

You have the right to:

• Access personal information we hold about you (IPP 6)
• Request correction of inaccurate, incomplete, or misleading information (IPP 7)
• Withdraw consent for marketing or optional data processing
• Complain to us or the Office of the Privacy Commissioner if you believe we have breached the Privacy Act 2020

To exercise access or correction rights, contact our Privacy Officer. We will respond within 20 working days as required by the Privacy Act 2020.

10. Overseas Disclosure (IPP 12)

Some service providers may store data outside New Zealand. Before disclosing information overseas, we ensure the recipient is subject to comparable privacy safeguards or you have authorised the disclosure, in accordance with IPP 12.

11. Cookies and Tracking

See our Cookies Policy for details on how we use cookies and how to manage your preferences.

12. Children's Privacy

Our services are directed at organisations and adults in a professional context. We do not knowingly collect information from individuals under 16 years of age.

13. European Visitors (GDPR)

If you are located in the European Economic Area, you also have rights under the General Data Protection Regulation including data portability and the right to lodge a complaint with your local supervisory authority. Our legal bases for processing include consent, contract performance, and legitimate interests.

14. Changes to This Policy

We may update this policy to reflect changes in law or our practices. Material changes will be published on this page with an updated date. We encourage you to review this policy periodically.