1. Data Controller
The data controller responsible for your personal data is Beautremoveau, operating at 286 Mt Wellington Hwy, Mount Wellington, Auckland 1060, New Zealand. For privacy-related enquiries, contact us at admin@beautremoveau.world or +64 9 573 0500. We are committed to handling personal information in accordance with the Privacy Act 2020 (New Zealand) and, where applicable, the General Data Protection Regulation (GDPR) (EU) 2016/679.
2. Personal Data We Collect
We may collect and process the following categories of personal data depending on how you interact with our website and services:
2.1 Information You Provide Directly
When you complete our contact form, enquire about consulting services, or register for educational programmes, we may collect your full name, email address, telephone number, message content, and any workspace photographs or measurements you voluntarily share for analysis purposes.
2.2 Automatically Collected Information
When you visit our website, we may automatically collect technical data including your IP address, browser type and version, operating system, referring URL, pages viewed, time spent on pages, and device identifiers. This data is collected through cookies and similar technologies as described in our Cookie Policy.
2.3 Communication Records
We retain records of correspondence when you contact us via email, telephone, or through the website contact form, including the date, time, and content of communications.
3. Legal Basis for Processing
Under GDPR, we process personal data on the following legal bases:
- Consent: When you submit the contact form and tick the GDPR consent checkbox, or when you accept non-essential cookies through our cookie banner.
- Contractual necessity: When processing is required to deliver consulting services, personalised workspace plans, or educational programmes you have requested.
- Legitimate interests: When processing is necessary for our legitimate business interests, such as responding to enquiries, improving our website, and ensuring network security, provided these interests do not override your fundamental rights.
- Legal obligation: When processing is required to comply with applicable laws, regulations, or court orders.
4. Purpose of Data Usage
We use your personal data exclusively for the following purposes:
- Responding to your enquiries and providing general informational content about workspace ergonomics
- Delivering consulting sessions, personalised workspace plans, and educational programme materials you have requested
- Processing payments and managing billing for paid services
- Improving our website functionality, content relevance, and user experience through aggregated analytics
- Complying with legal obligations and protecting our legal rights
- Sending service-related communications such as appointment confirmations and programme updates
- Preventing fraud, abuse, and unauthorised access to our systems
We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.
5. Data Retention Period
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected:
- Contact form submissions: Retained for twelve (12) months from the date of submission, unless an ongoing service relationship exists.
- Client service records: Retained for five (5) years following the completion of consulting services or educational programmes, in accordance with New Zealand record-keeping requirements.
- Financial and billing records: Retained for seven (7) years as required by New Zealand tax legislation.
- Cookie and analytics data: Retained according to the periods specified in our Cookie Policy, typically not exceeding twenty-six (26) months.
- Marketing consent records: Retained for the duration of consent plus three (3) years after withdrawal for audit purposes.
When retention periods expire, personal data is securely deleted or anonymised so it can no longer be associated with you.
6. Data Sharing and Third Parties
We do not sell, rent, or trade your personal data to third parties for marketing purposes. We may share data with the following categories of recipients when necessary:
- Service providers: Hosting providers, email delivery services, payment processors, and analytics platforms that process data on our behalf under strict data processing agreements.
- Professional advisers: Legal, accounting, or insurance advisers bound by confidentiality obligations.
- Regulatory authorities: When required by law, court order, or governmental request.
All third-party processors are required to implement appropriate technical and organisational security measures and process data only according to our documented instructions.
7. Security Measures
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:
- HTTPS encryption for all data transmitted between your browser and our website
- Access controls limiting personal data access to authorised personnel on a need-to-know basis
- Regular security assessments and software updates for our systems and infrastructure
- Secure storage of physical and digital records with backup and recovery procedures
- Staff training on data protection principles and incident response protocols
- Incident response procedures for detecting, reporting, and investigating data breaches
While we strive to protect your personal data, no method of electronic transmission or storage is completely secure. We encourage you to use strong passwords and protect your account credentials.
8. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Right of access: Request a copy of the personal data we hold about you.
- Right to rectification: Request correction of inaccurate or incomplete personal data.
- Right to erasure: Request deletion of your personal data where there is no compelling reason for continued processing.
- Right to restrict processing: Request limitation of processing in certain circumstances.
- Right to data portability: Receive your data in a structured, commonly used, machine-readable format.
- Right to object: Object to processing based on legitimate interests or for direct marketing purposes.
- Right to withdraw consent: Withdraw consent at any time where processing is based on consent, without affecting the lawfulness of prior processing.
- Right to lodge a complaint: File a complaint with the Office of the Privacy Commissioner (New Zealand) or your local supervisory authority.
To exercise any of these rights, contact us at admin@beautremoveau.world. We will respond within thirty (30) days. We may request verification of your identity before processing your request.
9. International Data Transfers
Your personal data is primarily processed and stored in New Zealand. If we transfer data to service providers located outside New Zealand or the European Economic Area, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, adequacy decisions, or binding corporate rules.
10. Children's Privacy
Our website and services are not directed at individuals under the age of sixteen (16). We do not knowingly collect personal data from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete that information promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The updated version will be posted on this page with a revised date. We encourage you to review this policy periodically. Material changes will be communicated via a notice on our website.
12. Contact Information
For questions, concerns, or requests regarding this Privacy Policy or our data processing practices, contact:
Beautremoveau
286 Mt Wellington Hwy, Mount Wellington, Auckland 1060, New Zealand
Email: admin@beautremoveau.world
Phone: +64 9 573 0500