Privacy policy

Privacy Policy

1. Introduction

This Privacy Policy explains how HM Wellness & CRFTD Coaching Holdings Limited (“we”, “us”, or “our”) collects, uses, and protects your personal information when you visit our website, sign up for our programs, shop online, or use our physical and digital services.

We are committed to protecting your privacy and handling all personal information in accordance with the New Zealand Privacy Act 2020 and the standards outlined by Digital.govt.nz.

This document acts as both our Organisation Privacy Statement (OPS) and our Website Privacy Statement (WPS). It covers all data we collect, both online and offline.

By using our services or providing your information to us, you agree to this policy.

 

 

2. The Information We Collect

We collect information necessary to deliver and improve our services. This includes:

Personal details – your name, contact number, email address, date of birth, and emergency contact information.
 Payment information – billing details and transaction history, processed securely through GoCardless, Shopify, or Stripe.
 Health and fitness information – any relevant information you provide to ensure safe participation in coaching or training (e.g. injuries, medical conditions, goals).
 Technical information – IP address, browser type, device data, and usage patterns collected through cookies or analytics.
 Communication records – messages, feedback, or forms submitted through our website, social media, or email.

All information is collected directly from you unless otherwise stated.

 

 

3. How We Use Your Information

We use personal information for purposes directly related to the services you request or that are necessary for our business operations, including:

  • Managing memberships, bookings, and program registrations

  • Processing payments and issuing receipts

  • Communicating updates, newsletters, and offers

  • Providing personalised coaching, nutrition advice, or training plans

  • Managing online accounts and community access

  • Analysing website use to improve our content and services

  • Meeting legal, regulatory, and reporting obligations

We will never sell or rent your personal information to anyone.

 

 

4. Voluntary vs Required Information

Providing your personal information is voluntary. However, some information is necessary for us to provide services such as processing payments, managing memberships, or delivering online access.
 If you choose not to provide certain required information, we may be unable to complete your purchase, register your membership, or deliver coaching services.

 

 

5. Data Storage and Security

We take all reasonable steps to protect your personal information from loss, unauthorised access, or misuse.

Your information is stored securely in password-protected systems and on reputable third-party platforms that meet international data protection standards, including:

  • GoCardless (payment processing)

  • Shopify (e-commerce and online store)

  • Skool (community platform)

  • Trainerize (coaching delivery)

  • Google Workspace (email and document management)

We restrict access to personal information to authorised personnel only.

 

 

6. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to improve your browsing experience and analyse traffic.

Types of cookies used:

  • Essential cookies – enable basic site functionality such as navigation and access to secure areas.

  • Performance cookies – help us understand how visitors use our website through tools such as Google Analytics.

  • Marketing cookies – may be used by platforms like Meta (Facebook/Instagram) or Google Ads to show you relevant content and offers.

Cookies may be stored on your device for varying durations, typically between a single session and 12 months.

You can choose to disable cookies in your browser settings, though this may affect certain features of our site.

 

 

7. Email and Marketing

By subscribing to our emails or newsletters, you consent to receiving updates and promotional content.
 You can unsubscribe at any time using the link provided in each email or by contacting us directly.

We follow a data minimisation approach and only collect the information necessary for email delivery — typically your name and email address.

 

 

8. Access, Correction, and Requests

You have the right to access and request correction of any personal information we hold about you.

To make a request, contact us at crftd.hmwellness@gmail.com.
 We will respond within 20 working days, as required by the Privacy Act 2020.

If we refuse access or correction, we will explain why and inform you of your right to complain to the Office of the Privacy Commissioner.

 

 

9. Sharing Your Information

We may share your information with trusted third parties when required for business operations or service delivery, including:

  • Payment processors (GoCardless, Shopify, Stripe)

  • Digital coaching and community platforms (Trainerize, Skool)

  • Marketing or communication services (Google, Meta)

  • Couriers or logistics partners for product delivery

These third parties act as our data processors and may only use your information to perform services on our behalf. All are bound by strict confidentiality and security obligations.

We may also disclose information when required by law or to protect the rights, safety, or property of our members, staff, or the public.

 

 

10. International Data Transfers

Some of our trusted partners may store or process data outside New Zealand. In these cases, we ensure that appropriate safeguards are in place to meet or exceed the protection standards required under the New Zealand Privacy Act 2020.

 

 

11. Data Retention

We retain your personal information only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. When no longer needed, we securely delete or anonymise it.

 

 

12. Privacy Breaches

If a privacy breach occurs that may cause serious harm, we will promptly notify the Office of the Privacy Commissioner and any affected individuals, as required by law.

We will also take immediate steps to contain the breach, investigate the cause, and prevent future occurrences.

 

 

13. Links to Other Websites

Our website may include links to other sites operated by third parties.
 We are not responsible for the privacy practices or content of those websites. We encourage you to review their privacy statements before providing any personal information.

 

 

14. Updates to This Policy

We may update this policy from time to time to reflect changes in our services, technology, or legal obligations. The updated version will always be available on our website.
 Last updated: 7 October 2025.

 

 

15. Contact Us

If you have any questions, concerns, or requests about this Privacy Policy or your personal information, please contact us:

HM Wellness & CRFTD Coaching Holdings Limited
 Email: crftd.hmwellness@gmail.com
 Address: 31A Weymouth Street, New Plymouth, 4310, New Zealand