Privacy Policy

1. Introduction

Naturopathy NZ ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

This policy complies with the New Zealand Privacy Act 2020 and applies to all personal information we collect through our website, mobile applications, and services.

2. Information We Collect

2.1 Personal Information You Provide

We collect personal information that you voluntarily provide when you:

• Create an account
• Book a consultation
• Complete health questionnaires
• Make a purchase
• Contact us for support
• Subscribe to our newsletter

This may include:

• Name, email address, phone number
• Date of birth, gender, location
• Health information (symptoms, conditions, medications, allergies)
• Payment information (processed securely through Stripe)
• Shipping and billing addresses

2.2 Health Information

We collect sensitive health information as part of our naturopathic services. This includes:

• Medical history and current health conditions
• Symptoms and health concerns
• Current medications and supplements
• Lifestyle information (diet, exercise, sleep, stress)
• Consultation notes and treatment recommendations

2.3 Automatically Collected Information

When you access our website, we may automatically collect:

• IP address and browser type
• Device information and operating system
• Pages visited and time spent on pages
• Referring website addresses
• Cookie data (see our Cookie Policy)

3. How We Use Your Information

We use your information for the following purposes:

3.1 Providing Services

• Process and fulfill consultation bookings
• Provide personalized health recommendations
• Process orders and manage shipping
• Maintain your health records
• Send appointment reminders and follow-ups

3.2 Communication

• Send confirmation emails and receipts
• Respond to your inquiries and support requests
• Send health education content (if subscribed)
• Notify you of important service updates

3.3 Business Operations

• Improve our website and services
• Analyze usage patterns and trends
• Prevent fraud and ensure security
• Comply with legal obligations

4. Legal Basis for Processing (Privacy Act 2020)

Under the New Zealand Privacy Act 2020, we process your personal information based on:

• Consent: You have given explicit consent for us to collect and use your health information
• Contract Performance: Processing is necessary to fulfill our service agreement with you
• Legal Obligation: We are required to retain certain records for regulatory compliance
• Legitimate Interests: For business operations, fraud prevention, and service improvement

5. Information Sharing and Disclosure

5.1 We Do NOT Sell Your Information

We do not sell, rent, or trade your personal information to third parties.

5.2 Service Providers

We may share information with trusted service providers who assist us:

• Payment Processing: Stripe (for secure payment transactions)
• Email Services: [Email provider] (for sending notifications)
• Hosting: Vercel (for website hosting)
• Shipping: [Shipping provider] (for product delivery)

All service providers are contractually obligated to maintain confidentiality and security.

5.3 Legal Requirements

We may disclose information if required by:

• Court orders or legal processes
• Law enforcement requests
• Protection of our legal rights
• Prevention of fraud or security threats

6. Data Security

We implement appropriate security measures to protect your information:

• 256-bit SSL encryption for data transmission
• Secure, encrypted database storage
• Regular security audits and updates
• Access controls and authentication
• Staff training on privacy and security

However, no internet transmission is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Data Retention

We retain your information for as long as necessary to:

• Provide our services to you
• Comply with legal and professional obligations (minimum 7 years for health records)
• Resolve disputes and enforce agreements

After the retention period, we securely delete or anonymize your data.

8. Your Privacy Rights (Privacy Act 2020)

Under New Zealand law, you have the right to:

• Access: Request a copy of your personal information
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your information (subject to legal retention requirements)
• Objection: Object to certain processing of your information
• Withdraw Consent: Withdraw consent for health information processing
• Complaint: Lodge a complaint with the Privacy Commissioner

To exercise these rights, contact us at: privacy@naturopathy.nz

9. Cookies and Tracking

We use cookies and similar technologies to:

• Maintain your login session
• Remember your preferences
• Analyze website usage
• Improve user experience

You can control cookies through your browser settings. However, disabling cookies may affect website functionality.

10. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect information from children. If you believe we have collected information from a child, please contact us immediately.

11. International Data Transfers

Your information may be transferred to and stored on servers located outside New Zealand (e.g., cloud hosting services). We ensure appropriate safeguards are in place to protect your information in accordance with New Zealand privacy laws.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Posting the updated policy on our website
• Updating the "Last Updated" date
• Sending email notifications for material changes

Continued use of our services after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information:

14. Privacy Commissioner

If you have concerns about how we handle your personal information, you can contact the New Zealand Privacy Commissioner: