Privacy Policy

Last updated: 10 June 2026

This Privacy Policy explains how Expelwashing.ddd ("we", "us", "our") collects, uses, stores, discloses, and protects your personal information when you visit our website or contact us. We are an agency under the Privacy Act 2020 (New Zealand) and handle personal information in accordance with the Act's Information Privacy Principles (IPPs), including IPP 3 (direct collection) and IPP 3A (indirect collection, in force from 1 May 2026). Where applicable, we also respect the rights of visitors under the General Data Protection Regulation (GDPR) of the European Economic Area.

1. Who We Are (Collecting and Holding Agency)

Under IPP 3 and IPP 12 of the Privacy Act 2020, we identify ourselves as the agency that collects and holds your personal information:

Expelwashing.ddd (agency)
194 Esk Street, Invercargill 9810, New Zealand
Email: writetous@expelwashing.world
Phone: +64 22 082 3885

For privacy enquiries, contact us using the details above. We will respond to privacy requests as soon as reasonably practicable, and in any event within 20 working days as recommended under the Privacy Act 2020.

2. What Is Personal Information?

Under the Privacy Act 2020, "personal information" means information about an identifiable individual. This includes your name, email address, message content, IP address, and any other information from which you can reasonably be identified, whether collected directly from you or indirectly through technical means such as cookies or analytics tools.

3. Personal Information We Collect

We may collect the following categories of personal information:

• Contact information: name, email address, and message content submitted through our contact form or email subscription form.
• Technical information: IP address, browser type, device type, operating system, referring URL, pages visited, and approximate location derived from IP address.
• Cookie and preference data: information stored through our cookie consent mechanism. See our Cookie Policy.
• Communication records: copies of correspondence when you contact us by email, phone, or contact form.
• Indirectly collected information: where we use third-party analytics or embedded services (such as Google Maps), limited personal information may be collected by those providers. See Section 8.

4. How We Collect Personal Information

We collect personal information:

• Directly from you — when you submit a contact form, subscribe to emails, or communicate with us (IPP 3 applies).
• Automatically — through cookies, server logs, and similar technologies when you browse our website (with your consent where required — see our Cookie Policy).
• Indirectly — from third-party service providers such as analytics or mapping services that process data on our behalf (IPP 3A applies from 1 May 2026).

5. Collection Notice (IPP 3 and IPP 3A)

When we collect personal information from you directly, or when we are required to notify you under IPP 3A for indirect collection, we inform you of the following:

• That information is being collected — at the point of collection (e.g. contact form, cookie banner).
• Purpose of collection — to respond to enquiries, operate and improve our website, send communications you have requested, and comply with legal obligations.
• Intended recipients — our staff, authorised service providers (hosting, email, analytics), and regulators or authorities where required by New Zealand law.
• Identity of the collecting and holding agency — Expelwashing.ddd, contact details in Section 1.
• Whether collection is required by law — most information we collect is voluntary. We may be required to retain certain records under tax or regulatory law if applicable.
• Your rights — you have the right to request access to and correction of your personal information held by us (IPP 6 and IPP 7). See Section 11.

If we collect your personal information indirectly and you have not already been informed of the matters above, we will take reasonable steps to notify you as soon as reasonably practicable after collection, in accordance with IPP 3A.

6. Purposes of Collection and Use (IPP 1 and IPP 10)

We collect and use personal information only for lawful purposes connected with our functions, and we do not use information for purposes other than those for which it was collected, except as permitted by the Privacy Act 2020. Our purposes include:

• Responding to enquiries submitted via our contact form or email.
• Operating, maintaining, and securing our website.
• Understanding how visitors use our website (analytics — only with your consent).
• Sending information about micro-workout plans and events where you have opted in, in compliance with the Unsolicited Electronic Messages Act 2007.
• Complying with applicable New Zealand law, including lawful requests from courts or government agencies.

We ensure information is accurate and relevant before use (IPP 8) and take reasonable steps to protect it from loss, misuse, and unauthorised access (IPP 5).

7. Marketing and Electronic Communications

Under the Unsolicited Electronic Messages Act 2007, we will only send commercial electronic messages (such as newsletters or promotional emails) where:

• you have given express consent; or
• another permitted exception under the Act applies.

Every commercial electronic message we send will clearly identify Expelwashing.ddd as the sender, include our contact details, and contain a functional unsubscribe mechanism. You may opt out at any time by using the unsubscribe link or contacting us directly.

8. Disclosure to Third Parties (IPP 11)

We do not sell your personal information. We may disclose personal information to:

• Service providers — hosting, email delivery, and analytics providers who process information on our behalf, subject to contractual obligations to protect your information and use it only for specified purposes.
• Embedded content providers — such as Google Maps on our contact page, which may collect information according to their own privacy policies.
• Government agencies and courts — where disclosure is required or authorised by New Zealand law.

We disclose personal information only where permitted under IPP 11 of the Privacy Act 2020.

9. Cross-Border Disclosure (IPP 12)

Some of our service providers (such as analytics or cloud hosting providers) may store or process personal information outside New Zealand. Before disclosing personal information overseas, we take reasonable steps to ensure that the recipient is subject to acceptable privacy standards, as required by IPP 12. This may include:

• using providers in countries recognised by New Zealand as providing comparable privacy safeguards;
• contractual obligations requiring the recipient to protect personal information to a standard comparable to the Privacy Act 2020; or
• your authorisation, where you have been informed of the cross-border disclosure.

New Zealand has been recognised by the European Commission as providing an adequate level of data protection, supporting lawful data flows between New Zealand and the EEA.

10. Retention and Disposal (IPP 9)

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by law:

• Contact form submissions: up to 24 months from your last communication, then securely deleted or de-identified.
• Email subscription data: until you unsubscribe or withdraw consent, then deleted within 30 days.
• Analytics data: up to 26 months, in anonymised or aggregated form where possible.
• Cookie consent preferences: up to 12 months, stored locally on your device.

When personal information is no longer required, we take reasonable steps to securely destroy or de-identify it.

11. Your Rights Under the Privacy Act 2020

Under the Privacy Act 2020, you have the following rights regarding personal information we hold about you:

• Right of access (IPP 6) — request confirmation of whether we hold your personal information and request a copy of that information. We will respond within 20 working days unless an extension applies under the Act.
• Right to correction (IPP 7) — request correction of inaccurate, out-of-date, incomplete, irrelevant, or misleading personal information. If we disagree with a correction request, you may require us to attach a statement of correction.
• Right to withdraw consent — where processing is based on your consent (e.g. analytics cookies, marketing emails), you may withdraw consent at any time without affecting the lawfulness of prior processing.
• Right to complain — if you believe we have interfered with your privacy, you may complain to us or to the Office of the Privacy Commissioner (see Section 13).

To exercise your access or correction rights, contact us at writetous@expelwashing.world. We may need to verify your identity before releasing information. We will not charge a fee for access requests unless the request is manifestly unfounded or excessive, in which case we may charge a reasonable fee or refuse the request as permitted by the Act.

12. Rights of International Visitors (GDPR)

If you are located in the European Economic Area, you may also have additional rights under the GDPR, including the right to erasure, restriction of processing, data portability, and the right to lodge a complaint with your local supervisory authority. To exercise GDPR rights, contact us using the details in Section 1.

13. Privacy Complaints

If you have a concern about how we have handled your personal information, please contact us first so we can try to resolve the matter. If you are not satisfied with our response, you may lodge a complaint with:

Office of the Privacy Commissioner
PO Box 10094, Wellington 6143, New Zealand
Phone: 0800 803 909 (within New Zealand)
Website: www.privacy.org.nz

14. Notifiable Privacy Breaches

Under Part 6 of the Privacy Act 2020, if we become aware of a privacy breach that has caused or is likely to cause serious harm to an affected individual, we are required to notify the Office of the Privacy Commissioner and affected individuals as soon as practicable. We maintain internal procedures to identify, assess, and respond to privacy breaches in accordance with the Act.

15. Security of Personal Information (IPP 5)

We implement reasonable safeguards to protect personal information against loss, unauthorised access, use, modification, or disclosure. These measures include encrypted connections (HTTPS), access controls, secure hosting environments, and periodic review of our information handling practices. No method of transmission over the internet is completely secure. If we become aware that your personal information has been compromised, we will act in accordance with our obligations under the Privacy Act 2020.

16. Children's Privacy

Our website is intended for a general audience and is not directed at children under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us and we will take steps to delete it promptly.

17. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal or similarly significant effects on individuals.

18. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices, technology, or applicable law (including amendments to the Privacy Act 2020). The updated version will be posted on this page with a revised date. Material changes will be brought to your attention where reasonably practicable.

19. Contact

For any questions about this Privacy Policy or to exercise your privacy rights, contact:

Expelwashing.ddd
194 Esk Street, Invercargill 9810, New Zealand
Email: writetous@expelwashing.world
Phone: +64 22 082 3885

Back to Home