Privacy Policy

Last updated:

This Privacy Policy describes how Beautyearth ("we", "us", "our") collects, uses, stores, and protects your personal information when you visit beautyearth.world (the "Site"). We are committed to complying with the Privacy Act 2020 (New Zealand), and where applicable, the General Data Protection Regulation (GDPR) for visitors in the European Economic Area.

1. Agency and Data Controller

Under the Privacy Act 2020, we are an "agency" that collects and holds personal information. We are also the data controller under the GDPR where that regulation applies. Our contact details are:

Beautyearth
1d Beach Street, Fitzroy, New Plymouth 4312, New Zealand
Email: response@beautyearth.world
Phone: +64 6 758 2870

2. Personal Information We Collect

We may collect the following categories of personal information:

• Contact information: name, email address, and message content submitted through our contact form
• Technical information: IP address, browser type, operating system, device information, and referring URLs
• Usage information: pages visited, time spent on pages, and interaction patterns (only with your consent for analytics cookies)
• Cookie preferences: your choices regarding cookie consent, stored in your browser's local storage

3. How and Why We Collect Information

In accordance with Information Privacy Principles (IPPs) 1–3 of the Privacy Act 2020:

• We collect personal information only for lawful purposes connected with our functions as an educational website operator
• We collect information directly from you where practicable (for example, through the contact form)
• We take reasonable steps to ensure you are aware that information is being collected, the purpose of collection, and who will receive it — as set out in this Policy
• We do not collect personal information by unlawful or unfair means

4. Purposes and Legal Bases for Processing

We process your personal information for the following purposes:

• Responding to inquiries (contact form) — to communicate with visitors who contact us
• Site functionality (strictly necessary cookies) — to provide a functional website
• Analytics (analytics cookies) — only with your explicit consent
• Marketing (marketing cookies) — only with your explicit consent
• Legal compliance — to meet obligations under New Zealand law and other applicable regulations

Where the GDPR applies, our legal bases include legitimate interests, consent, and legal obligation as described above.

5. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected:

• Contact form submissions: up to 24 months from the date of receipt, unless a longer period is required by law
• Analytics data: up to 26 months from collection
• Cookie consent records: up to 12 months
• Server logs: up to 90 days

After the retention period expires, data is securely deleted or anonymised.

6. Data Sharing and Transfers

We do not sell your personal information. We may share information with:

• Service providers who assist in hosting, analytics, or email delivery, bound by appropriate data protection agreements
• Authorities when required by law or to protect our legal rights

Where personal information is disclosed to third parties, we take reasonable steps under IPP 5 to ensure they protect the information and use it only for authorised purposes.

If information is transferred outside New Zealand or the European Economic Area, we ensure appropriate safeguards are in place, such as contractual protections or transfers to jurisdictions with comparable privacy laws.

7. Your Rights Under the Privacy Act 2020

If you are in New Zealand, you have the following rights under the Privacy Act 2020:

• Right of access (IPP 6): you may request confirmation of whether we hold personal information about you and request access to that information
• Right to correction (IPP 7): you may request correction of inaccurate, incomplete, or misleading personal information
• Right to complain: you may make a complaint to us if you believe we have interfered with your privacy, and you may also complain to the Office of the Privacy Commissioner

To exercise your access or correction rights, contact us using the details in Section 13. We will respond within 20 working days as required by the Privacy Act 2020, unless an extension applies.

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner (Te Mana Mātāpono Matatapu).

8. Your Rights Under the GDPR

If you are located in the European Economic Area, you have the following rights:

• Right of access: request a copy of your personal data
• Right to rectification: request correction of inaccurate data
• Right to erasure: request deletion of your data ("right to be forgotten")
• Right to restrict processing: request limitation of how we use your data
• Right to data portability: receive your data in a structured, machine-readable format
• Right to object: object to processing based on legitimate interests
• Right to withdraw consent: withdraw consent at any time without affecting prior processing

To exercise any of these rights, contact us at response@beautyearth.world. We will respond within 30 days.

You also have the right to lodge a complaint with your local data protection authority.

9. Privacy Breach Notification

Under the Privacy Act 2020, if a privacy breach has caused or is likely to cause serious harm, we will notify the Office of the Privacy Commissioner and affected individuals as soon as practicable, in accordance with our legal obligations.

10. Data Security

We implement reasonable security safeguards under IPP 5 to protect your personal information, including:

• HTTPS encryption for all data transmitted between your browser and our servers
• Access controls limiting data access to authorised personnel
• Regular security assessments and updates
• Secure storage with encryption at rest where applicable

11. Children's Privacy

Our Site is not directed at children under 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately and we will take steps to delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

13. Contact

For any questions about this Privacy Policy or our data practices, please contact us:

Beautyearth
1d Beach Street, Fitzroy, New Plymouth 4312, New Zealand
Email: response@beautyearth.world
Phone: +64 6 758 2870