Privacy Policy

1. Who We Are

This website is operated by Zoeelbow, located at 57 Vivian Street, Te Aro, Wellington 6011, New Zealand. Phone: 04 473 9009. Email: community@zoeelbow.world.

We are the data controller responsible for your personal data collected through this website (zoeelbow.world).

2. What Personal Data We Collect

We collect personal data only when you voluntarily provide it or when it is automatically generated by your use of the website:

• Contact form data: name, email address, message content, and your GDPR consent record.
• Technical data: IP address, browser type, device type, operating system, referring URLs, pages visited, and time spent on pages — collected automatically via server logs and analytics tools.
• Cookie data: identifiers and preferences stored in cookies as described in our Cookie Policy.

We do not collect sensitive personal data (such as health data, racial or ethnic origin, political opinions, or financial information).

3. Purposes and Legal Bases for Processing

We process your personal data for the following purposes and on the following legal bases:

• Responding to your enquiry — Legal basis: performance of a contract or pre-contractual steps at your request (Article 6(1)(b) GDPR); legitimate interests (NZ Privacy Act 2020).
• Website analytics — Legal basis: your consent (Article 6(1)(a) GDPR), which you provide or withdraw via the cookie consent banner.
• Security and fraud prevention — Legal basis: legitimate interests (Article 6(1)(f) GDPR).
• Legal compliance — Legal basis: compliance with a legal obligation (Article 6(1)(c) GDPR).

4. How Long We Keep Your Data

• Contact form submissions: retained for up to 2 years from the date of submission, then securely deleted.
• Analytics data: aggregated and anonymised data retained indefinitely; identifiable technical data retained for up to 14 months.
• Server logs: retained for up to 90 days for security purposes.
• Consent records: retained for up to 3 years to demonstrate compliance.

5. Who We Share Your Data With

We do not sell your personal data. We may share it with:

• Hosting and infrastructure providers — to operate the website (data processed within New Zealand or the EU/EEA under adequate safeguards).
• Analytics providers — only with your consent and only in anonymised or pseudonymised form where possible.
• Legal authorities — where required by law or to protect our legal rights.

6. International Data Transfers

If your data is transferred outside New Zealand or the European Economic Area, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission or adequacy decisions applicable under the NZ Privacy Act 2020.

7. Your Rights

Under the New Zealand Privacy Act 2020 and, where applicable, the GDPR, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request erasure of your data (right to be forgotten), subject to legal retention requirements.
• Restrict or object to processing of your data.
• Data portability — receive your data in a structured, machine-readable format.
• Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.
• Lodge a complaint with the New Zealand Privacy Commissioner (privacy.org.nz) or, if you are in the EU, with your local supervisory authority.

To exercise any of these rights, contact us at community@zoeelbow.world. We will respond within 20 working days.

8. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Our website uses HTTPS to encrypt data in transit. Access to personal data is restricted to authorised personnel only.

9. Cookies

We use cookies on this website. For full details of the cookies we use, their purposes, and how to manage them, please read our Cookie Policy.

10. Children's Privacy

This website is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. We encourage you to review this page periodically. Continued use of the website after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:

• By email: community@zoeelbow.world
• By phone: 04 473 9009
• By post: 57 Vivian Street, Te Aro, Wellington 6011, New Zealand