Privacy Policy

Last updated:

1. Data Controller

Removerinsing, located at 155 Victoria Street, Christchurch Central City, Christchurch 8013, New Zealand, is the data controller responsible for the processing of your personal data on this website (removerinsing.world).

Contact: clients@removerinsing.world | +64 3 595 6335

2. Scope and Legal Basis

This Privacy Policy describes how we collect, use, store, and protect personal information in accordance with the New Zealand Privacy Act 2020, the General Data Protection Regulation (GDPR) where applicable, and other relevant data protection legislation.

As an agency under the Privacy Act 2020, we comply with the Information Privacy Principles (IPPs), including obligations to collect information lawfully, use it only for relevant purposes, keep it secure, and give individuals access to their information.

We process personal information based on the following grounds:

  • Consent: when you submit the contact form or accept non-essential cookies
  • Legitimate purposes: to operate, maintain, and improve our informational website
  • Legal obligation: when required to comply with applicable laws

3. Collection Notice

When we collect personal information directly from you, we tell you:

  • who we are and how to contact us (see Section 1)
  • what information we collect and why we need it
  • who will receive the information
  • whether providing the information is voluntary or required
  • your rights of access and correction under the Privacy Act 2020

For contact form submissions, name and email are required so we can respond. Message content is voluntary but necessary if you wish us to address your enquiry.

4. Data We Collect

We may collect the following categories of personal data:

  • Identity data: your name
  • Contact data: email address, phone number (if provided)
  • Communication data: messages sent through our contact form
  • Technical data: IP address, browser type, device information, pages visited
  • Cookie data: preferences stored in your browser (see our Cookie Policy)

5. Purposes of Processing

We use your personal data for the following purposes:

  • Responding to enquiries submitted through the contact form
  • Providing access to educational wellbeing content on our website
  • Analysing website usage to improve user experience (with consent)
  • Ensuring website security and preventing fraud
  • Complying with legal and regulatory requirements

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected:

  • Contact form submissions: up to 24 months from the date of receipt
  • Cookie consent records: up to 12 months
  • Server logs and technical data: up to 90 days
  • Analytics data: up to 26 months (if analytics cookies are accepted)

After the retention period expires, data is securely deleted or anonymised.

7. Data Sharing and Overseas Disclosure

We do not sell your personal information. We may share information with:

  • Hosting and infrastructure providers that may be located in New Zealand or overseas
  • Analytics and advertising service providers (only with your consent)
  • Legal authorities when required by law or a court order

Under IPP 12 of the Privacy Act 2020, before disclosing personal information to an overseas recipient we take reasonable steps to ensure the recipient protects the information to a standard comparable to New Zealand law, unless an exception applies.

Where personal data is transferred outside the European Economic Area, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

8. Your Rights Under the Privacy Act 2020 (New Zealand)

If you are in New Zealand, you have the following rights under the Privacy Act 2020:

  • Access (IPP 6): request confirmation of whether we hold your personal information and request a copy
  • Correction (IPP 7): request correction of inaccurate, incomplete, or misleading information
  • Withdrawal of consent: where processing is based on consent, you may withdraw it at any time
  • Complaint: lodge a complaint with us or with the Office of the Privacy Commissioner

To exercise these rights, contact us at clients@removerinsing.world. We will respond within 20 working days, as required by the Privacy Act 2020, unless an extension applies.

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner at privacy.org.nz or by calling 0800 803 909 (New Zealand).

9. Your Rights Under GDPR (European Economic Area)

If you are located in the European Economic Area, you have the following rights:

  • Right of access: request a copy of your personal data
  • Right to rectification: correct inaccurate or incomplete data
  • Right to erasure: request deletion of your data in certain circumstances
  • Right to restrict processing: limit how we use your data
  • Right to data portability: receive your data in a structured format
  • Right to object: object to processing based on legitimate interests
  • Right to withdraw consent: withdraw consent at any time without affecting prior processing

To exercise any of these rights, contact us at clients@removerinsing.world. We will respond within 30 days.

You also have the right to lodge a complaint with your local data protection authority.

10. Notifiable Privacy Breaches

Under the Privacy Act 2020, if a privacy breach has caused or is likely to cause serious harm, we are required to notify the Office of the Privacy Commissioner and affected individuals without undue delay. We maintain procedures to assess, contain, and respond to privacy breaches promptly.

11. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

  • HTTPS encryption for all data transmitted between your browser and our servers
  • Access controls limiting data access to authorised personnel
  • Regular security assessments of our systems
  • Secure storage with encryption at rest where applicable

12. Children

Our website is not directed at children under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately so we can delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page indicates when it was last revised. We encourage you to review this page periodically.