Privacy Policy

Privacy Policy for The Space 

 

Effective Date: 26 September 2025

1. Introduction

At The Space, we are committed to protecting your personal information and respecting your privacy in accordance with New Zealand’s Privacy Act 2020. This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you engage with our services, including yoga, breathwork, sauna, cold plunging, workshops, or related activities (“Services”). By using our Services, you consent to the practices described in this policy.

 

2. Information We Collect

We may collect the following types of personal information:

• Personal Details: Name, email address, phone number, postal address, and date of birth.
• Health Information: Medical conditions, injuries, allergies, or contraindications (e.g., pregnancy, heart conditions, respiratory issues) provided via health questionnaires or forms to ensure safe participation.
• Payment Information: Credit/debit card details or other payment methods (processed securely via third-party providers).
• Booking and Usage Data: Booking history, session attendance, class preferences, and feedback.
• Technical Data: IP address, browser type, device information, and website usage data (e.g., via cookies or analytics tools) when you interact with our website or booking platform.
• Group Booking Information: Details of participants in group bookings, provided by the person making the booking on their behalf.

3. How We Collect Information

We collect personal information:
• Directly from You: Through booking forms (online or in-person), health questionnaires, emails, or direct communication.
• Automatically: Via our website https://www.thespacenz.co.nz/ booking platform (e.g., Wix), or app, including through cookies or analytics tools.
• From Third Parties: From booking platforms, payment processors, or individuals making group bookings on your behalf, with your consent or as authorized.

4. Purpose of Collection

We collect and use your personal information for the following purposes:
• To provide and manage our Services (e.g., process bookings, schedule classes, ensure safety).
• To assess your suitability for participation and manage health and safety risks (e.g., reviewing health disclosures).
• To communicate with you (e.g., booking confirmations, session reminders, or safety instructions).
• To send promotional offers, newsletters, or updates about our Services (with your consent, which you may withdraw at any time).
• To improve our Services (e.g., analyzing attendance patterns or feedback).
• To comply with legal obligations (e.g., Accident Compensation Corporation (ACC) reporting, health and safety requirements, or tax purposes).
• To resolve disputes or manage claims (e.g., insurance or legal matters).

5. Legal Basis for Processing

We process your personal information in accordance with the Privacy Act 2020, based on:
• Your consent (e.g., for health disclosures or marketing).
• Necessity to provide our Services (e.g., processing bookings or ensuring safety).
• Compliance with legal obligations (e.g., ACC or tax requirements).
• Legitimate business interests (e.g., improving Services), provided these do not override your rights.

6. Sharing Your Information

We may share your personal information only in the following circumstances:
• Service Providers: With third-party providers (e.g., STRIPE, WIX, payment processors) who process data on our behalf and comply with privacy standards.
• Health and Safety: With medical professionals or authorities (e.g., ACC) if required for your safety or legal compliance (e.g., injury reporting).
• Group Bookings: With the person making a group booking, if you are a participant, to confirm your attendance or share relevant safety information (with your consent).
• Legal Requirements: With regulatory bodies or law enforcement if required by law (e.g., under court order).
We do not sell or share your information for marketing purposes without your explicit consent.

7. Storage and Security
• Storage: Your information is stored securely on Wix booking Platform,  located in USA and compliant international providers.
• Security Measures: We use reasonable safeguards, including encryption, 2FA, access controls, and secure data handling practices, to protect your information. Health information is treated with heightened confidentiality and stored separately where practicable.
• Limitations: While we take all reasonable steps to protect your data, no system is completely secure. We will notify you and the Office of the Privacy Commissioner in case of a significant data breach, as required by law.

8. Data Retention

We retain your personal information only for as long as necessary to:
• Provide our Services (e.g., maintain active client records).
• Comply with legal obligations (e.g., tax records for 7 years).
• Resolve disputes or support claims (e.g., ACC or insurance matters).
Health information is typically retained for the duration of your engagement with us, and other data (e.g., booking records) is retained for up to 7 years unless required longer by law. After this period, data is securely deleted or anonymized.

9. Your Rights

Under the Privacy Act 2020, you have the following rights:
• Access: Request a copy of the personal information we hold about you.
• Correction: Request corrections to inaccurate or incomplete information.
• Withdrawal of Consent: Opt out of marketing communications or certain data uses (where applicable).
• Complaint: Raise concerns about our data practices.
To exercise these rights, contact us at info@thespacenz.co.nz. We will respond within 20 working days, as required by law. If you’re dissatisfied, you can contact the Office of the Privacy Commissioner at www.privacy.org.nz.

10. Cookies and Website Tracking

Our website https://www.thespacenz.co.nz/  may use cookies or similar technologies to enhance user experience (e.g., remembering preferences, analyzing site usage). You can manage cookie settings through your browser or our website’s cookie consent tool. 

 

11. Third-Party Links

Our website or booking platform may link to third-party sites (e.g., payment processors). We are not responsible for their privacy practices. Please review their policies before sharing information. 

 

12. International Data Transfers

If your information is stored or processed outside New Zealand (e.g., via cloud-based booking platforms), we ensure the recipient complies with privacy standards equivalent to the Privacy Act 2020 or has your explicit consent. 

 

13. Group Bookings

If someone books on your behalf (e.g., for a group session), they are responsible for sharing this Privacy Policy with you. We may share limited information (e.g., your name and attendance status) with the booker to confirm participation, with your consent or as necessary for the Service. 

 

14. Updates to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. The latest version will be available at [Insert Website URL/privacy-policy] or upon request. We will notify you of significant changes via email or our website. Continued use of our Services after updates constitutes acceptance of the revised policy. 15. Contact UsFor questions, requests, or complaints about your privacy, contact:
The Space Limited
16 Cowshed Lane
Info@thespacenz.co.nz
0212449400
If we cannot resolve your concern, you may contact the Office of the Privacy Commissioner at www.privacy.org.nz or 0800 803 909.

--