Privacy Policy

Last updated: 30 May 2026

This Privacy Policy explains how Earthwrist.world (“we”, “us”) collects, uses, stores, and discloses personal information when you visit https://earthwrist.world or contact us.

We are a New Zealand-based service. For users in New Zealand, we comply with the Privacy Act 2020 and the Information Privacy Principles (IPPs). Where the EU General Data Protection Regulation (GDPR) applies to you, we also meet its requirements. In case of conflict, we apply the standard that gives you the stronger protection.

Who is responsible (agency details)

Under the Privacy Act 2020, we are the agency that holds personal information described here.

Legal / trading name: Earthwrist.world
Physical address: Ewing Road, Riverside, Whangārei 0112, New Zealand
Email: chat@earthwrist.world
Phone: +64 21 025 38970
Privacy enquiries: use the email above with subject line “Privacy request”.

What personal information we collect

We only collect information that is reasonably necessary for the purposes below.

Contact form and email: your name, email address, message content, privacy consent timestamp, and—only if you tick the optional box—consent to marketing emails.
Bookings and events (if you register): name, email, phone if provided, dietary preferences you choose to share, and attendance records.
Website and device data: IP address, browser type, operating system, pages viewed, time on site, and referral URL—collected through essential logs and, if you consent, analytics tools (see our Cookie Policy).
Cookie and consent records: your cookie category choices, stored in your browser’s local storage.

We do not intentionally collect health records, medical diagnoses, or national ID numbers through this website. Please do not send clinical records via the contact form. If you need advice about a medical condition, speak to a registered health professional.

How we collect information

We collect information directly from you when you submit forms, email us, register for an event, or call us. Some technical data is collected automatically when you use the site. We tell you at the point of collection why we need the information and whether it is optional.

Why we use your information (purposes)

To answer your questions and provide food and lifestyle information you request.
To arrange consultations, workshops, or events you sign up for.
To operate, secure, and improve our website.
To send service-related messages (for example, confirming a booking).
To send marketing emails or newsletters only if you have opted in, in line with the Unsolicited Electronic Messages Act 2007 (UEMA).
To meet legal obligations (for example, responding to lawful requests from authorities).

Legal bases (New Zealand and GDPR)

Privacy Act 2020 / IPPs: collection is lawful, fair, and not unreasonably intrusive; used only for purposes we have identified; reasonable steps to ensure accuracy; stored securely; not kept longer than needed.
GDPR (where applicable): performance of a contract or steps at your request; legitimate interests (site security, responding to enquiries) balanced against your rights; consent for non-essential cookies and direct marketing; legal obligation where required.

Direct marketing (UEMA 2007)

We will not send commercial electronic messages (email, SMS) with a marketing purpose unless you have given clear consent or we fall within a permitted exception under UEMA. Every marketing message includes a simple way to unsubscribe. You may opt out at any time by using the unsubscribe link or contacting us. Opting out of marketing does not affect service messages about bookings you have made.

Disclosure to third parties

We do not sell or rent your personal information. We may share it with:

Service providers (website hosting, email delivery, analytics if consented) who process data only on our instructions and under confidentiality and security obligations.
Professional advisers (lawyers, accountants) when necessary and subject to duty of confidence.
Regulators or courts when required by New Zealand law or a court order.

A list of main processor categories is available on request. If we use overseas providers, we take reasonable steps under IPP 12 to ensure your information is protected by comparable safeguards (for example, contractual clauses or provider certifications).

Storage location and security

Data may be stored in New Zealand and, where we use cloud services, in other countries where those providers operate. We use HTTPS encryption, access controls, password protection, and limited staff access. No online system is completely secure; please use a strong email password and contact us if you suspect unauthorised access.

Retention periods

Contact and enquiry records: up to 24 months, unless needed longer for disputes, legal claims, or tax records.
Booking and event records: up to 7 years where required for financial or legal record-keeping.
Server and security logs: up to 90 days.
Marketing consent and unsubscribe records: for as long as needed to prove compliance with UEMA, typically at least 2 years after last contact.
Cookie consent logs: 12 months, then refreshed when you make a new choice.

When information is no longer needed, we delete or anonymise it where practicable.

Complaints and the Privacy Commissioner

If you believe we have interfered with your privacy, contact us first. You may also complain to the Office of the Privacy Commissioner (Te Mana Mātāpono Matatapu): www.privacy.org.nz, phone 0800 803 909 (New Zealand).

Your rights under the Privacy Act 2020 (New Zealand)

You have the right to:

Access personal information we hold about you (IPP 6).
Request correction if you believe information is wrong (IPP 7).
Ask us to stop using your information for direct marketing.
Complain to us if you believe we have interfered with your privacy.

To make a request, email chat@earthwrist.world with enough detail for us to identify you and locate your records. We will respond within 20 working days as required by the Privacy Act, or explain if an extension is needed. We may need proof of identity before releasing information.

If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner (OPC): www.privacy.org.nz, phone 0800 803 909 (NZ).

Your rights under the GDPR (European Economic Area)

If GDPR applies, you may also have rights to rectification, erasure, restriction of processing, data portability, and to object to processing based on legitimate interests. You may withdraw consent at any time (without affecting prior lawful processing). You may lodge a complaint with your local supervisory authority.

Notifiable privacy breaches

If a privacy breach causes or is likely to cause serious harm, we will comply with the Privacy Act 2020 by notifying the OPC and affected individuals as soon as practicable, and by taking steps to contain and remedy the breach.

Cookies and online tracking

Details are in our Cookie Policy. Non-essential cookies are used only after you opt in through our cookie banner.

Children and young people

Our website is intended for a general audience and is not directed at children under 16. We do not knowingly collect personal information from children without appropriate parental or guardian consent. If you believe we have collected a child’s information, contact us and we will delete it promptly.

Automated decision-making

We do not use automated decision-making or profiling that produces legal or similarly significant effects on you.

Links to other websites

Our site may link to external pages (for example, maps). Those sites have their own privacy policies. We are not responsible for their practices.

Changes to this policy

We may update this policy when our practices or the law change. The “Last updated” date at the top will change. Material changes will be posted on this page. Where required, we will seek fresh consent (for example, for new uses of data or cookies).