Privacy Policy
Last updated: 20 May 2026
This Privacy Policy explains how Thrivedynamau ("we", "us") collects, uses, stores, and discloses personal information when you use thrivedynamau.world and our wellness services in New Zealand.
We comply with the Privacy Act 2020 and the Information Privacy Principles (IPPs). If you are in the European Economic Area, we also respect applicable GDPR rights where they apply to our processing.
Agency / organisation
Thrivedynamau
12 Pahau Avenue, Tikipunga, Whangārei 0112, New Zealand
Email: team@thrivedynamau.world
Phone: +64 9 434 4659
Personal information we collect
- Identity and contact details (name, email, phone if provided)
- Message content submitted via our contact form
- Booking and payment-related records (where applicable)
- Technical information: IP address, browser type, device data, pages visited
- Cookie preferences and analytics data where you consent
How we collect information
Directly from you when you enquire, book, subscribe, or adjust cookie settings; automatically through website logs; and from payment processors acting on our instructions (we do not store full card numbers).
Purposes of use
- Respond to enquiries and provide services
- Manage bookings, passes, and digital guide access
- Maintain website security and prevent misuse
- Improve content and usability (with consent for analytics/marketing cookies)
- Meet legal and accounting obligations
Legal basis (IPP alignment)
We collect information for purposes that are lawful and connected with our functions, only from you where practicable, and in ways that are fair and not unreasonably intrusive. Sensitive information is not sought unless necessary and with clear consent.
Disclosure to third parties
We may share information with hosting providers, email services, analytics tools (if consented), and professional advisers under confidentiality. We do not sell personal information. Overseas processors, if used, are subject to reasonable safeguards.
Retention
Contact records: up to 24 months unless a longer period is required. Booking and financial records: typically 7 years for tax compliance. Analytics: per cookie settings, generally up to 26 months. We delete or anonymise data when no longer needed.
Security
HTTPS encryption, access controls, staff confidentiality, and periodic review of suppliers handling personal information.
Your rights (New Zealand)
You may request access to and correction of your personal information. You may also complain to the Office of the Privacy Commissioner (OPC) at privacy.org.nz if you believe we have interfered with your privacy.
Where GDPR applies, you may also request erasure, restriction, portability, or object to certain processing, and lodge a complaint with your local supervisory authority.
Cookies
See our Cookies Policy and use the on-site banner to manage preferences stored in localStorage.
Children
Our services are not directed at children under 16 without guardian involvement. Contact us if you believe we hold a child's information without appropriate consent.
Changes
We may update this policy; the latest version will be posted here with a revised date.
Contact our privacy officer
Email team@thrivedynamau.world with the subject line "Privacy request". We aim to respond within 20 working days.