Privacy Policy

Version: 1.1

Last Updated: 7th December 2024

1. Introduction
Elev8 Wellness ("we," "us," or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website, create an account, or use our contact form. We comply with the Privacy Act 2020 (New Zealand) and other applicable laws.

By using our website, you agree to the terms of this Privacy Policy. If you do not agree, please do not use our website or services.

2. Scope of This Policy
This Privacy Policy applies to personal information collected through our website located at www.elev8wellness.co.nz and any related online services offered by Elev8 Wellness.

3. Personal Information We Collect
3.1 Visitors Without Accounts

• •IP Address and Session Cookies: When you visit our website, we automatically collect your IP address, browser type, device information, and session cookie data. Cookies are small text files stored on your browser to enhance your browsing experience, remember preferences, and improve our site’s performance. You may disable cookies in your browser settings; however, doing so may affect the functionality of our website. 

3.2 Users Who Create an Account
If you register for an account, we collect the following information:

• •First and Last Name 

• •Email Address 

• •Optional Phone Number 

• •Optional Gender (to tailor products and services to your needs) 

We use this information to create and manage your account, communicate with you, and personalize your experience.

3.3 Users Who Use the Contact Form Without Creating an Account
If you contact us via our website’s contact form, we may request the following information:

• •First and Last Name

• •Email Address

• •Phone Number

• •Gender (to tailor products and services to your needs)

• •Location Data (with Your Consent):

  • •We may use the browser’s built-in location features if you grant permission.

  • •Alternatively, we may determine your approximate location via your IP address, which is forwarded to a third-party service (ipapi.co) to return non-precise location details.

We use location data to ensure that contact form submissions originate from visitors in New Zealand, reducing spam messages. Additionally, to determine if messages are spam or legitimate inquiries from a New Zealand-based potential client, your email, phone number, and message content may be sent to Google Gemini AI for spam detection analysis before we store your information.

4. How We Use Your Information
We use your personal information to:

• •Provide, operate, and maintain our website and services. 

• •Personalize your experience based on the information you provide. 

• •Respond to your inquiries, support requests, and comments. 

• •Improve our website’s functionality, security, and user experience. 

• •Comply with our legal obligations and enforce our terms and conditions. 

5. Cookies and Tracking Technologies
We use cookies and similar technologies to remember your preferences, track website usage, and analyze trends. For more information about our use of cookies and how to manage them, please refer to our [Cookie Policy/section if separate].

6. Third-Party Services and Data Hosting
6.1 Google Firebase
We use Google Firebase for authentication, Firestore for database storage, and Firebase Storage for file storage. Firebase services may process and store your personal information on servers located primarily in the United States, but potentially in other regions as Google’s infrastructure changes. All data is handled in accordance with Google’s privacy and security measures. We encourage you to review Google’s Privacy Policy for more information.

6.2 ipapi.co
When determining your approximate location for spam reduction (with your consent), we may forward your IP address to ipapi.co. ipapi.co’s use of your IP is governed by their own privacy policy.

6.3 Google reCAPTCHA
We use Google reCAPTCHA on our contact form to distinguish genuine users from automated spam. This service may collect information about your browser, device, and browsing activity. This information is processed by Google and subject to Google’s Privacy Policy.

6.4 Cloudflare Services (Optional)
We may use Cloudflare’s CDN, DNS, or tunnel services to improve the security, performance, and reliability of our website. Cloudflare may process your IP address and other technical data related to your visit. Please refer to Cloudflare’s Privacy Policy for details on how they handle your information.

6.5 Hosting Services
Our main website is hosted on Oracle infrastructure located in Sydney, Australia. Personal information processed by our website may be transferred to and stored on these servers. We take reasonable steps to ensure that overseas data transfers comply with the Privacy Act 2020 and other applicable laws.

6.6 Google Gemini AI Spam Detection
We use Google Gemini AI to help identify spam submissions and ensure that the messages we receive are from genuine, New Zealand-based potential clients. When you submit a contact form message, we may transmit your email, phone number, and the content of your message to this AI service. The AI uses this information solely to classify the message as either “spam” or “not spam”. We do not use the AI’s output for any other purpose. Data submitted to the AI is processed securely and handled in accordance with Google’s privacy and data handling policies. We encourage you to review Google’s privacy policy and documentation for more details on how they protect your information.

7. Legal Basis for Processing
We process your personal information where:

• •You have given your consent (e.g., for location data or marketing communications). 

• •It is necessary for the performance of a contract with you (e.g., managing your account). 

• •It is necessary to comply with a legal obligation. 

• •It is necessary for our legitimate interests, provided such interests do not override your rights and freedoms (e.g., reducing spam and improving security). 

8. International Data Transfers
While we are based in New Zealand, we use service providers (such as Google Firebase and potentially Cloudflare) that may process or store your personal information in the United States or other jurisdictions. We also host our website on Oracle servers in Australia. We take reasonable steps to ensure that personal information transferred overseas is protected by privacy standards equivalent to those under the New Zealand Privacy Act 2020. By using our services, you consent to these international data transfers.

9. Data Retention and Security
We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy or as required by law. We employ reasonable administrative, technical, and physical measures designed to safeguard your personal information from unauthorized access, disclosure, alteration, or destruction.

10. Your Rights and Choices
Under the New Zealand Privacy Act 2020, you have the right to:

• •Access the personal information we hold about you. 

• •Request corrections to your personal information if it is inaccurate, incomplete, or outdated. 

• •Withdraw consent for certain processing activities where consent was provided. 

• •Complain to the Office of the Privacy Commissioner if you believe we have breached your privacy rights. 

To exercise these rights or make any inquiries, please contact us using the details provided below.

11. Children’s Privacy
Our website and services are not directed to individuals under 16 years of age. We do not knowingly collect personal information from children without parental or guardian consent. If you believe we have collected such information, please contact us so we can investigate and take appropriate action.

12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we do, we will post the revised policy on our website and update the "Last Updated" date at the top. Your continued use of our website following the posting of any changes constitutes your acceptance of those changes.

13. Contact Us
If you have questions, concerns, or would like more information about our privacy practices, please contact us at:

Elev8 Wellness
249 Fox Street, Hamilton East, Waikato, 3216, New Zealand
jordan@elev8wellness.co.nz
021 0289 0545