Privacy Policy

Last updated: 15 May 2026

This Privacy Policy explains how Luminouskne (“we”, “us”) processes personal data when you visit luminouskne.world, contact us, or enrol in lifestyle habit support programmes. We comply with the EU General Data Protection Regulation (GDPR) where applicable and with the New Zealand Privacy Act 2020.

Data controller

Luminouskne, 12 Pahau Avenue, Tikipunga, Whangārei 0112, New Zealand. Email: community@luminouskne.world. Phone: +64 9 434 4659.

Data we collect

• Identity and contact data: name, email, phone, address when you submit forms or enrol.
• Communication content: messages you send via our contact form or email.
• Programme data: cohort preferences, attendance notes, and materials you choose to share in sessions.
• Technical data: IP address, browser type, device information, and cookie identifiers when you use our site.

Purposes and legal bases

We process data to respond to enquiries, deliver programmes, maintain security, and improve our website. Legal bases include contract performance, legitimate interests (studio operations, fraud prevention), consent (marketing cookies and optional communications), and legal obligations.

Retention

Contact enquiries are kept for up to 24 months unless a longer period is required for disputes. Enrolment records are kept for seven years for accounting and legal compliance. Cookie preferences are stored locally in your browser until you clear them.

Security

We use access controls, encrypted connections (HTTPS), limited staff access, and regular review of suppliers who process data on our behalf. No method of transmission is fully secure; we encourage strong passwords on any accounts we provide.

Sharing

We do not sell personal data. We may share data with hosting providers, email services, and analytics tools only when you consent to optional cookies or when necessary to deliver a service you requested.

International transfers

If data is processed outside New Zealand or the EEA, we use appropriate safeguards such as standard contractual clauses or adequacy decisions.

Information Privacy Principles (New Zealand)

We handle personal information in line with the Information Privacy Principles under the Privacy Act 2020, including collecting information for lawful purposes, ensuring reasonable security, and giving individuals access to their information.

Your rights in Aotearoa New Zealand

You may request access to and correction of your personal information. You may complain to the Office of the Privacy Commissioner at privacy.org.nz if you believe we have interfered with your privacy. Where GDPR also applies, you may have additional rights including erasure, restriction, portability, and objection.

Marketing communications

We only send electronic marketing messages with your consent or as otherwise permitted under the Unsolicited Electronic Messages Act 2007. You may unsubscribe at any time.

Children

Our services are intended for adults. We do not knowingly collect information from children under 16 without parental or guardian consent.

Notifiable privacy breaches

If a privacy breach is likely to cause serious harm, we will notify affected individuals and the Office of the Privacy Commissioner as required by the Privacy Act 2020.

Changes

We may update this policy. The current version is always published on this page with the date above.