Privacy Policy

Last updated: 20 June 2026

This Privacy Policy describes how Energaescrubix.ddd ("we", "us", "our", the "agency") collects, uses, stores, discloses, and protects personal information when you visit our website or contact the Movement Every Day club. We comply with the Privacy Act 2020 (New Zealand), its Information Privacy Principles (IPPs), and — where applicable — the General Data Protection Regulation (GDPR) for visitors from the European Economic Area.

1. Agency Details and Privacy Contact

Under the Privacy Act 2020, we are the agency responsible for personal information we hold:

Energaescrubix.ddd
11 View Road, Tītahi Bay, Porirua 5022, New Zealand
Email: feedback@energaescrubix.world
Phone: +64 27 453 9099

For privacy enquiries, access or correction requests, or complaints, contact us using the details above. We aim to respond to privacy requests within 20 working days, as required by the Privacy Act 2020.

2. Personal Information We Collect

We collect personal information that is reasonably necessary for our functions. This may include:

• Identity and contact details: your name and email address when you submit our contact form or register interest in club activities.
• Communication content: the message you send us and our replies, including any information you voluntarily provide about your interests or participation preferences.
• Consent records: confirmation that you agreed to our Privacy Policy, Terms of Use, and — if selected — optional email updates under the Unsolicited Electronic Messages Act 2007.
• Technical and usage information: IP address, browser type, device type, operating system, pages viewed, time spent on pages, and referral URLs — collected through cookies and similar technologies where you have given consent or where collection is necessary for site operation.
• Event registration details: if you register for a group walk or challenge, we may collect attendance preferences and emergency contact information you choose to provide.

We collect personal information directly from you wherever practicable (IPP 2). We will tell you the purpose of collection at or before the time we collect it (IPP 3). You are not required by law to supply information, but if you do not provide requested details we may be unable to respond to your enquiry or register you for club activities.

3. Purposes of Collection and Use

We collect and use personal information only for lawful purposes connected with our activities (IPP 1 and IPP 10), including to:

• Respond to enquiries and provide information about the Movement Every Day club.
• Process registrations for challenges, events, and community activities.
• Send administrative communications related to your request or participation (not commercial marketing unless you have consented under the Unsolicited Electronic Messages Act 2007).
• Operate, maintain, and improve our website and user experience.
• Analyse aggregated website usage where you have consented to analytics cookies.
• Comply with legal obligations, respond to lawful requests from authorities, and protect our legal rights.
• Detect and prevent fraud, abuse, or security incidents.

We will not use your personal information for a purpose other than the purpose for which it was collected unless we believe on reasonable grounds that the new use is directly related to the original purpose, you authorise the use, or the use is permitted by the Privacy Act 2020 (IPP 10).

4. Legal Bases (International Visitors)

For visitors from the European Economic Area, we rely on: (a) consent for contact form processing where required, analytics, and marketing cookies; (b) legitimate interests for site security and responding to enquiries; and (c) legal obligation where applicable. You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

5. Disclosure of Personal Information

We do not sell or rent personal information. We may disclose information to:

• Service providers who assist us with website hosting, email delivery, analytics, or technical support — only to the extent necessary and under contractual confidentiality and security obligations (IPP 5 and IPP 11).
• Professional advisers such as lawyers or accountants where reasonably required.
• Regulators or law enforcement when required or authorised by New Zealand law.

We take reasonable steps to ensure that overseas recipients handle personal information in a manner comparable to the IPPs before disclosing information outside New Zealand (IPP 12). Where data is transferred to countries without comparable privacy laws, we use appropriate safeguards such as contractual protections or your informed consent.

6. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected (IPP 9), including:

• Contact form submissions: up to 24 months from last contact, unless a longer period is required for legal, dispute, or operational reasons.
• Event registration records: up to 12 months after the event, unless you remain an active participant.
• Analytics data: up to 26 months in aggregated or pseudonymised form, where consent has been given.
• Cookie consent preferences: stored locally on your device until you clear browser storage or change your preferences.

When information is no longer required, we take reasonable steps to destroy or de-identify it securely.

7. Data Security

We implement reasonable safeguards to protect personal information against loss, unauthorised access, use, modification, or disclosure (IPP 5). Measures include secure hosting infrastructure, HTTPS encryption, access controls limited to authorised personnel, and periodic review of our information handling practices. No method of transmission over the internet is completely secure; we cannot guarantee absolute security but we take breaches seriously.

8. Notifiable Privacy Breaches

Under the Privacy Act 2020, if a privacy breach has caused or is likely to cause serious harm, we will notify the Office of the Privacy Commissioner and affected individuals as soon as practicable. If you believe your personal information has been compromised, please contact us immediately using the details in Section 1.

9. Your Rights Under New Zealand Law

Under the Privacy Act 2020, you have the right to:

• Access personal information we hold about you (IPP 6). We will respond within 20 working days and may request proof of identity.
• Request correction of personal information if you believe it is inaccurate, out of date, incomplete, irrelevant, or misleading (IPP 7). If we disagree with a correction request, you may require us to attach a statement of correction.
• Withdraw consent where processing is based on consent, subject to legal or contractual restrictions.
• Complain to us if you believe we have interfered with your privacy. If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner at www.privacy.org.nz or by calling 0800 803 909 (New Zealand).

EEA residents may also have additional rights under GDPR, including data portability and the right to object to certain processing. Contact us to exercise any of these rights.

10. Direct Marketing and Electronic Messages

We comply with the Unsolicited Electronic Messages Act 2007. We will not send commercial electronic messages (such as promotional emails) without your express consent. Every marketing message will include a functional unsubscribe facility. You may opt out at any time by contacting us or using the unsubscribe link in any email.

11. Unique Identifiers

We will not assign unique identifiers to individuals unless necessary for our functions (IPP 13). Analytics identifiers (such as cookie-based IDs) are used only where you have consented and are not linked to other agency databases without your knowledge.

12. Children's Privacy

Our website is intended for a general audience and is not directed at children under 16. We do not knowingly collect personal information from children without parental or guardian consent. If you believe we have collected information from a child, please contact us and we will take steps to delete it promptly.

13. Links to Third-Party Websites

Our website may contain links to external sites (for example, embedded maps). We are not responsible for the privacy practices of third parties. We encourage you to read their privacy policies before providing personal information.

14. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices, technology, or legal requirements. The updated version will be posted on this page with a revised "Last updated" date. Material changes will be communicated where appropriate. Continued use of the website after changes constitutes acknowledgement of the updated policy.

15. Contact and Complaints

For privacy-related questions, access or correction requests, or complaints:
Energaescrubix.ddd
11 View Road, Tītahi Bay, Porirua 5022, New Zealand
Email: feedback@energaescrubix.world
Phone: +64 27 453 9099

If your complaint is not resolved to your satisfaction, contact the Office of the Privacy Commissioner: Level 7, Stats NZ House, 8 Gilmer Terrace, Wellington 6011, New Zealand — www.privacy.org.nz.