1. Agency responsible
Skeletonnaturalv
286 Mount Wellington Highway, Mount Wellington, Auckland 1060, New Zealand
Email: question@skeletonnaturalv.world
Phone: +64 9 570 3777
2. Personal information we collect
- Identity: name, job title, organisation
- Contact: email, phone, postal address
- Communications: messages via contact form, email, or phone
- Technical: IP address, browser type, pages visited, cookie preferences
- Engagement data: notes from consulting work where you or your organisation are a client
3. How we collect information
We collect information directly from you (forms, email, phone), from your organisation when engaged as a client, and automatically via cookies/analytics where you have consented.
4. Purposes of collection (IPP 4 & 10)
- Responding to enquiries and delivering consulting services
- Administering contracts, invoicing, and accounts
- Improving our website (with consent for non-essential cookies)
- Complying with legal obligations in New Zealand
- Marketing our services where you have opted in (see Unsolicited Electronic Messages Act below)
5. Legal basis
We process data where necessary for contract performance, with your consent, for legitimate business purposes that do not override your rights, or to meet legal obligations. Marketing emails are sent only with express consent.
6. Storage and retention
Data is stored on secure servers. Enquiry records: up to 24 months. Client records: duration of engagement plus seven years for accounting and legal purposes. Cookie preferences: until cleared or updated.
7. Security (IPP 5)
We use HTTPS, access controls, staff confidentiality obligations, and regular review of handling practices. No internet transmission is completely secure; we take reasonable steps to protect your information.
8. Disclosure to third parties (IPP 11)
We do not sell personal information. We may share data with:
- IT and hosting providers under confidentiality obligations
- Professional advisers (lawyers, accountants) when required
- Authorities when required by New Zealand law
9. Overseas disclosure (IPP 12)
Some processors may store data outside New Zealand. Before disclosure we ensure comparable safeguards exist, or we inform you as required by the Privacy Act 2020.
10. Your rights
Under the Privacy Act 2020 you may request access to and correction of your personal information. Contact us using the details above. We will respond within 20 working days as required by law.
If you believe we have breached the IPPs, you may complain to the Office of the Privacy Commissioner: www.privacy.org.nz.
11. Unsolicited Electronic Messages Act 2007
We do not send commercial electronic messages without your consent. Every marketing email includes a functional unsubscribe mechanism.
12. Children
Our services target organisations and professionals. We do not knowingly collect information from persons under 16.
13. Changes
We may update this policy. Material changes will be posted here with a revised date.