Privacy Policy
Last updated:
1. Information We Collect
We collect information you provide directly through our contact form and when you use our services. This includes:
- Contact information (name, email address)
- Message content from contact forms
- Information about your program participation
- Cookies and usage data (analytics)
2. How We Use Your Information
We use the information we collect to:
- Respond to your inquiries and provide program support
- Send you program materials and updates (with your consent)
- Improve our website and services
- Comply with legal obligations
- Analyse website usage through Google Analytics (with your consent)
3. Legal Basis for Processing (GDPR / Privacy Act 2020)
Under the Privacy Act 2020 (New Zealand) and GDPR (where applicable), we process your data based on:
- Contract: To fulfil our agreements with you
- Consent: Analytics and marketing communications (opt-in via cookie consent)
- Legal obligation: Compliance with applicable laws
- Legitimate interests: Site security, fraud prevention, improving services
4. Data Sharing and Disclosure
We do not sell or rent your personal data. We may share information with:
- Google Analytics (with anonymized data)
- Google Ads Conversion Tracking (for marketing attribution)
- Email service providers (for program communications)
- Legal authorities if required by law
5. Data Protection and Security
We implement reasonable security measures to protect your personal data from unauthorized access, alteration, and disclosure. All data transmission uses encrypted HTTPS connections. However, no method of transmission over the internet is 100% secure.
6. Your Rights
Under Privacy Act 2020 (New Zealand), you have the right to:
- Access: Request a copy of your personal data
- Correction: Request corrections to inaccurate data
- Deletion: Request deletion of your data (subject to legal requirements)
- Portability: Request your data in a structured format
- Withdraw Consent: Withdraw consent for analytics and marketing at any time via cookie settings
- Lodge a Complaint: Contact the Privacy Commissioner of New Zealand
7. International Data Transfers
Some service providers (Google Analytics, Google Ads) process data outside New Zealand. These transfers comply with Privacy Act 2020 requirements and implement appropriate safeguards.
8. Data Retention
We retain contact form data for 12 months after your last interaction. Program enrollment data is retained for the duration of the program plus 2 years (for legal/financial records). You can request deletion anytime.
9. Children's Privacy
Our services are not directed at individuals under 18 years old. We do not knowingly collect personal data from children. If we become aware of such collection, we will delete it immediately.
10. Third-Party Services
Google Analytics: Tracks site usage with anonymized data. Controlled via cookie consent settings.
Google Ads Conversion Tracking: Monitors program inquiries for advertising optimization. Data is anonymized and not shared with advertisers.
Google Maps API: Embedded contact map. Subject to Google's privacy policy.
11. Cookie Usage
We use cookies for:
- Necessary: Session management, security (always active)
- Analytics: Google Analytics (_ga, _gid) — opt-in via consent banner
- Marketing: Google Ads conversion tracking — opt-in via consent settings
You can manage cookies through your browser settings or our cookie preferences panel.
12. Policy Updates
We may update this policy periodically. Changes will be posted here with an updated date. Continued use of the website constitutes acceptance of the updated policy.
13. Contact Information
For privacy questions or data requests, contact:
Gracefulbright
42 Karangahape Road, Auckland 1010
info@gracefulbright.world
+64 9 526 7841
To file a complaint with the Privacy Commissioner of New Zealand, visit www.privacy.org.nz