Privacy Policy | Vitspinevita - Your Data Protection

Last Updated:

1. Introduction

Vitspinevita ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website vitspinevita.ddd.

We comply with the General Data Protection Regulation (GDPR), the New Zealand Privacy Act 2020, and other applicable data protection laws.

2. Data Controller Information

The data controller responsible for your personal data is:

Company Name: Vitspinevita
Address: 88 Rippingale Road, Hanmer Springs 7334, New Zealand
Phone: +64 3 315 7429
Email: reach@vitspinevita.world

3. Information We Collect

3.1 Information You Provide

We may collect personal information that you voluntarily provide when you:

Fill out our contact form (name, email address, message content)
Subscribe to our newsletter
Communicate with us via email or phone

3.2 Automatically Collected Information

When you visit our website, we may automatically collect:

Device information (browser type, operating system)
IP address (anonymized where possible)
Pages visited and time spent on pages
Referring website addresses

4. How We Use Your Information

We use the collected information for the following purposes:

To respond to inquiries: Processing and responding to your contact form submissions and emails
To improve our website: Understanding how visitors use our site to enhance user experience
To send communications: Providing updates and information you have requested
To comply with legal obligations: Meeting our legal and regulatory requirements

5. New Zealand Privacy Act 2020 Disclosure

For users in New Zealand, we handle personal information in line with the Information Privacy Principles (IPPs) under the Privacy Act 2020. This includes collecting information for lawful purposes, using it only for relevant purposes, keeping it secure, and allowing you to request access to or correction of your personal information.

If we experience a privacy breach that is likely to cause serious harm, we will notify affected individuals and the Office of the Privacy Commissioner as required by law.

6. Legal Basis for Processing (GDPR)

Under the GDPR, we process your personal data based on:

Consent: When you provide explicit consent for specific purposes (e.g., submitting a contact form)
Legitimate Interests: For purposes that are not overridden by your rights (e.g., website security and improvement)
Legal Obligation: When processing is necessary to comply with applicable laws

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

Contact form data: Retained for 2 years after the last communication
Analytics data: Retained for 26 months (anonymized where possible)
Cookie consent preferences: Retained for 12 months

After the retention period, data is securely deleted or anonymized.

8. Your Rights

Under GDPR and applicable privacy laws, you have the right to:

Access: Request a copy of the personal data we hold about you
Rectification: Request correction of inaccurate or incomplete data
Erasure: Request deletion of your personal data ("right to be forgotten")
Restriction: Request limitation of processing of your data
Data Portability: Receive your data in a structured, machine-readable format
Objection: Object to processing based on legitimate interests
Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise these rights, please contact us at reach@vitspinevita.world. We will respond within 30 days.

For New Zealand users, access or correction requests are handled under the Privacy Act 2020. We may request reasonable proof of identity before processing your request.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

SSL/TLS encryption for data transmission
Secure server infrastructure
Regular security assessments
Access controls and authentication measures

However, no method of transmission over the Internet is entirely secure, and we cannot guarantee absolute security.

10. Third-Party Services

We may use third-party services that collect, monitor, and analyze data:

Analytics providers: To understand website usage (with your consent)
Hosting providers: To store and serve our website content

These providers are contractually bound to protect your data and use it only for specified purposes.

11. International Data Transfers

If we transfer your data outside the European Economic Area (EEA) or New Zealand, we ensure appropriate safeguards are in place, such as:

Standard Contractual Clauses approved by the European Commission
Adequacy decisions recognizing equivalent data protection standards

12. Direct Marketing Communications

We do not send marketing emails or SMS messages without consent where required. If you receive marketing communications from us, you can opt out at any time by following the unsubscribe instructions in the message or contacting us directly.

Where applicable, we align our direct marketing practices with New Zealand's Unsolicited Electronic Messages Act 2007.

13. Children's Privacy

Our website is not intended for children under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

14. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy regularly.

15. Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with:

New Zealand: Office of the Privacy Commissioner (privacy.org.nz)
EU/EEA: Your local Data Protection Authority

16. Contact Us

For any questions about this Privacy Policy or our data practices, please contact us:

Email: reach@vitspinevita.world
Phone: +64 3 315 7429
Address: 88 Rippingale Road, Hanmer Springs 7334, New Zealand