Privacy Policy
Your privacy is fundamental to our mission. Learn how we protect, collect, and use your personal information in our wellness services and programs.
Our Commitment to Data Protection
At Crampbarks, we are deeply committed to protecting your personal information and respecting your privacy rights. This Privacy Policy explains how we collect, use, protect, and share information about you when you use our wellness services, participate in our programs, or interact with our website.
We understand that trust is essential in the wellness journey, and protecting your personal data is fundamental to building and maintaining that trust. Our privacy practices are designed to comply with New Zealand privacy laws and international best practices for data protection.
This policy was last updated in July 2025 and reflects our current data handling practices. We may update this policy periodically to reflect changes in our services or legal requirements, and we will notify you of any material changes.
Information We Collect
Personal Information You Provide
When you interact with our wellness services, we may collect personal information that you voluntarily provide, including:
- Contact information such as name and messaging details when you inquire about our programs
- Program preferences and wellness goals you share during consultations
- Health and lifestyle information relevant to personalized wellness planning
- Feedback and testimonials you choose to provide about our services
- Payment information processed through secure third-party payment processors
Automatically Collected Information
When you visit our website or use our digital services, we automatically collect certain technical information:
- Device information including browser type, operating system, and device identifiers
- Usage data such as pages visited, time spent on our site, and interaction patterns
- Location information based on your IP address to understand our service areas
- Cookies and similar technologies as described in our Cookie Policy
Legal Basis for Data Processing
We process your personal information based on several legal grounds:
- Consent: When you explicitly agree to our data collection for specific purposes
- Legitimate Interests: To improve our wellness services and provide relevant content
- Contract Performance: To deliver the wellness programs and services you request
- Legal Compliance: To meet our obligations under New Zealand privacy and health regulations
Data Retention Periods
We retain your personal information only as long as necessary to fulfill the purposes for which it was collected. Program participant data is typically retained for 7 years for continuity of care and legal compliance, while website analytics data is retained for 24 months. You may request deletion of your data at any time, subject to legal requirements.
How We Use Your Information
Service Delivery and Personalization
We use your personal information primarily to deliver personalized wellness services, develop customized program recommendations, track your progress in our courses, and provide ongoing support tailored to your individual wellness goals and preferences.
Communication and Support
Your contact information enables us to respond to your inquiries, provide program updates and wellness tips, send important service notifications, and offer customer support. We may also use your information to inform you about new wellness programs or services that align with your interests.
Research and Improvement
We analyze aggregated and anonymized data to understand wellness trends, improve our program effectiveness, develop new services, and enhance our website user experience. This research helps us continuously evolve our offerings to better serve the wellness community.
Legal Compliance and Safety
We may use your information to comply with applicable laws and regulations, protect the rights and safety of our participants and staff, prevent fraud or misuse of our services, and respond to legal requests from authorized parties when required by law.
How We Protect Your Information
Technical Security Measures
We implement industry-standard security measures including encrypted data transmission, secure server infrastructure, regular security updates and monitoring, access controls limiting data access to authorized personnel only, and secure backup systems to prevent data loss.
Organizational Safeguards
Our team follows strict privacy protocols including confidentiality agreements for all staff and contractors, regular privacy training and awareness programs, limited access to personal information based on job requirements, and clear data handling procedures and incident response plans.
Third-Party Security
When we work with trusted third-party service providers for payment processing, website hosting, or other essential services, we ensure they maintain appropriate security standards and are contractually bound to protect your information according to our privacy standards.
Breach Notification Procedures
In the unlikely event of a data security incident, we have established procedures to assess the situation, contain any potential impact, notify affected individuals promptly, and report to relevant authorities as required by New Zealand privacy laws.
Your Privacy Rights
Access and Transparency
You have the right to know what personal information we hold about you, how we use it, and who we share it with. You can request a copy of your personal data in a commonly used format, and we will provide this information within 20 working days of your request.
Correction and Updates
If you believe any personal information we hold about you is inaccurate, incomplete, or outdated, you have the right to request corrections. We will update your information promptly and notify any third parties who received the incorrect information where appropriate.
Deletion and Erasure
You may request deletion of your personal information, subject to legal and contractual obligations. We will honor deletion requests unless we have legitimate grounds to retain the information, such as ongoing service delivery or legal compliance requirements.
Data Portability
Where technically feasible, you have the right to receive your personal data in a structured, commonly used format that allows you to transfer your information to another service provider. This applies particularly to data you have directly provided to us.
Objection and Restriction
You can object to certain types of data processing, particularly for marketing purposes or when we rely on legitimate interests as our legal basis. You may also request restrictions on how we process your information in specific circumstances.
How to Exercise Your Rights
To exercise any of these rights, please contact us through our website contact form. We will verify your identity and respond to your request within the timeframes required by New Zealand privacy law. There is generally no charge for exercising these rights, though we may charge reasonable fees for excessive or repetitive requests.
Additional Information
Data Sharing and Third Parties
We do not sell, rent, or trade your personal information to third parties. We may share your information only with trusted service providers who assist in delivering our wellness services, and only to the extent necessary for them to perform their functions. All third parties are contractually bound to protect your information.
International Data Transfers
Your personal information is primarily stored and processed within New Zealand. If we need to transfer data internationally for service delivery purposes, we ensure appropriate safeguards are in place to protect your information according to New Zealand privacy standards.
Children's Privacy
Our wellness services are designed for adults. We do not knowingly collect personal information from individuals under 18 years of age. If you are under 18, please have a parent or guardian contact us on your behalf for any wellness inquiries.
Policy Updates
We may update this Privacy Policy periodically to reflect changes in our practices, services, or legal requirements. Material changes will be communicated through our website and directly to registered participants. Your continued use of our services after policy updates constitutes acceptance of the revised terms.
Questions and Complaints
If you have questions about this Privacy Policy or concerns about how we handle your personal information, please contact us through our website. If you are not satisfied with our response, you may lodge a complaint with the New Zealand Privacy Commissioner.