1. Who We Are
For the purposes of the Privacy Act 2020 (New Zealand), we are the agency responsible for the personal information described in this policy. Where EU/UK law applies, we are also the data controller responsible for your personal data:
Purgingbrforce
109 Veale Road, Ridgewood
New Plymouth 4371, New Zealand
Phone: +64 210 816 6486
Email: connect@purgingbrforce.world
2. Information We Collect
We collect information that you provide directly to us, including:
- Name and contact information when you submit our contact form
- Email address for communication purposes
- Message content from your inquiries
- Cookie preferences and consent choices
We also automatically collect certain information when you visit our website:
- IP address and browser type
- Pages visited and time spent on our site
- Referring website addresses
- Device information and operating system
3. New Zealand Privacy Act 2020
We collect, use, hold, and disclose personal information in accordance with the Privacy Act 2020 (New Zealand) and the Information Privacy Principles (IPPs) set out in that Act. This includes collecting information only for lawful purposes connected with our functions or activities, keeping information accurate and up to date where practicable, protecting it with reasonable safeguards, and being transparent about how we handle it.
If we engage an agency or service provider that holds or processes personal information on our behalf, we take steps that are reasonable in the circumstances to ensure they meet obligations consistent with the IPPs.
4. Purpose of Data Collection
We use your personal data for the following purposes:
- To respond to your inquiries and provide customer support
- To improve our website and user experience
- To analyze website traffic and usage patterns
- To comply with legal obligations
- To protect our rights and prevent misuse of our services
5. Legal Basis for Processing
Under New Zealand law, we only collect personal information where it is for a lawful purpose connected with our business and where that collection is necessary for that purpose (or otherwise permitted under the Privacy Act 2020).
Where the EU/UK General Data Protection Regulation (GDPR) applies to you, we also rely on the following grounds:
- Consent: When you explicitly agree to the processing of your data, such as when submitting a contact form
- Legitimate interests: For improving our services and ensuring website security, balanced against your rights
- Legal obligation: When required to comply with applicable laws and regulations
6. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:
- Contact form submissions: 2 years from the date of last communication
- Analytics data: 26 months
- Cookie consent records: 1 year from consent date
After these periods, your data will be securely deleted or anonymized.
7. Your Privacy Rights (New Zealand)
Under the Privacy Act 2020, you may request access to personal information we hold about you and ask us to correct it if you think it is wrong. Subject to the grounds set out in that Act, you may also complain to us if you believe we have interfered with your privacy. We will respond to privacy requests within a reasonable time and may need to verify your identity before releasing information.
We do not use solely automated decision-making that produces legal or similarly significant effects about you in relation to the services described on this website.
8. Your Rights Under GDPR (EEA/UK)
If you are located in the European Economic Area, Switzerland, or the United Kingdom, and the GDPR applies to our processing of your personal data, you may have the following rights (in addition to any rights under local law):
- Right of access: Request a copy of the personal data we hold about you
- Right to rectification: Request correction of inaccurate or incomplete data
- Right to erasure: Request deletion of your personal data under certain circumstances
- Right to restriction: Request limitation of processing of your data
- Right to data portability: Receive your data in a structured, commonly used format where applicable
- Right to object: Object to processing based on legitimate interests
- Right to withdraw consent: Withdraw consent at any time where processing is based on consent
To exercise any of these rights, please contact us using the details provided in this policy.
9. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including:
- SSL/TLS encryption for all data transmissions
- Secure storage systems with access controls
- Regular security assessments and updates
- Limited access to personal data on a need-to-know basis
10. Third-Party Sharing
We do not sell your personal data to third parties. We may share your information only in the following circumstances:
- With service providers who assist in operating our website
- When required by law or to protect our legal rights
- In connection with a merger, acquisition, or sale of assets
All third-party service providers are bound by data protection agreements.
11. International Transfers
Your personal information may be transferred to and processed in countries outside New Zealand (for example, where a service provider hosts data overseas). Where we disclose personal information to an overseas agency, we comply with the Privacy Act 2020, including by taking reasonable steps to ensure that the recipient is subject to comparable safeguards, or by obtaining your authorisation where required. Where the GDPR applies, we use appropriate mechanisms such as standard contractual clauses approved by relevant authorities when needed.
12. Notifiable Privacy Breaches
If we become aware of a privacy breach that is likely to cause you serious harm, we will comply with the notifiable privacy breach requirements under the Privacy Act 2020, which may include notifying the Office of the Privacy Commissioner and affected individuals in accordance with the Act.
13. Children's Privacy
Our website is not intended for children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.
14. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.
15. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:
Email: connect@purgingbrforce.world
Phone: +64 210 816 6486
Address: 109 Veale Road, Ridgewood, New Plymouth 4371, New Zealand
16. Complaints and Supervisory Authorities
If you are not satisfied with our response to your privacy concerns, you may lodge a complaint with the Office of the Privacy Commissioner (New Zealand). Information about making a complaint is available at privacy.org.nz.
If you are in the EEA, UK, or Switzerland, you may also contact your local data protection authority where applicable.