Privacy Policy

This document explains how Expeloayoungex collects, uses, stores, and protects personal data when you visit expeloayoungex.world or interact with our services.

Last updated:

1. Data Controller

The data controller responsible for your personal information is:

Expeloayoungex
128 Willis Street, Te Aro
Wellington 6011, New Zealand
Telephone: +64 4 385 2626
Email: assist@expeloayoungex.world
Website: expeloayoungex.world

As the data controller, we determine the purposes and means of processing personal data collected through our website, contact forms, consulting services, and educational product purchases.

2. Data We Collect

We may collect and process the following categories of personal data depending on how you interact with our website and services:

2.1 Information You Provide Directly

  • Contact form data: Full name, email address, and message content submitted through our contact page.
  • Consulting enquiries: Household details, dietary preferences, scheduling preferences, and any additional information you choose to share when requesting personalised planning sessions.
  • Purchase information: Name, email address, billing address, and payment-related details when you purchase educational products or enrol in programs.
  • Communication records: Content of emails, phone conversations, and other correspondence with our team.

2.2 Information Collected Automatically

  • Technical data: IP address, browser type and version, operating system, device type, and referring URL.
  • Usage data: Pages visited, time spent on pages, navigation paths, and interaction patterns on our website.
  • Cookie data: Information stored through cookies and similar technologies as described in our Cookie Policy.

2.3 Information We Do Not Collect

We do not intentionally collect sensitive personal data such as medical records, health diagnoses, government identification numbers, or financial account credentials through our website forms. Our services provide general nutritional education only and are not designed to process clinical health information.

Under the General Data Protection Regulation (GDPR) and applicable New Zealand privacy legislation, we process personal data on the following legal bases:

  • Consent: When you submit a contact form, accept non-essential cookies, or agree to receive communications from us, you provide explicit consent for the specified processing activities.
  • Contractual necessity: Processing required to fulfil our obligations when you purchase educational products, enrol in programs, or book consulting sessions.
  • Legitimate interests: Processing necessary for our legitimate business interests, such as improving website functionality, analysing usage patterns, and preventing fraud, provided these interests do not override your fundamental rights.
  • Legal obligation: Processing required to comply with applicable laws, regulations, court orders, or governmental requests.

4. Purpose of Data Usage

We use collected personal data exclusively for the following purposes:

  • Responding to enquiries submitted through our contact form or email
  • Delivering consulting sessions, personalised planning documents, and educational products you have requested or purchased
  • Processing payments and managing order fulfilment for digital and physical products
  • Sending service-related communications such as booking confirmations, program updates, and policy change notifications
  • Analysing website usage to improve content quality, navigation, and user experience (only with your cookie consent)
  • Maintaining the security and integrity of our website and preventing unauthorised access
  • Complying with legal, regulatory, and tax obligations in New Zealand and applicable international jurisdictions
  • Defending legal claims and resolving disputes

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.

5. Data Retention Period

We retain personal data only for as long as necessary to fulfil the purposes described in this policy, unless a longer retention period is required by law.

  • Contact form submissions: Retained for up to 24 months from the date of submission, unless an ongoing business relationship exists.
  • Customer and purchase records: Retained for up to 7 years to comply with New Zealand tax and accounting requirements.
  • Consulting session notes: Retained for up to 3 years after the final session, then securely deleted unless you request earlier deletion.
  • Marketing consent records: Retained for the duration of consent plus 12 months after withdrawal.
  • Server logs and analytics data: Retained for up to 12 months, then anonymised or deleted.
  • Cookie consent preferences: Stored locally on your device for up to 12 months.

When retention periods expire, data is securely deleted or irreversibly anonymised using industry-standard methods.

6. Data Sharing and Third Parties

We do not sell, rent, or trade your personal data to third parties for their marketing purposes. We may share data with the following categories of recipients when necessary:

  • Service providers: Hosting providers, email delivery services, payment processors, and analytics platforms that process data on our behalf under strict contractual obligations.
  • Professional advisers: Legal, accounting, and compliance professionals bound by confidentiality duties.
  • Regulatory authorities: Government bodies when required by applicable law or valid legal process.

All third-party processors are required to implement appropriate technical and organisational security measures and process data only according to our documented instructions.

7. Security Measures

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

  • HTTPS encryption for all data transmitted between your browser and our servers
  • Access controls limiting personal data access to authorised personnel on a need-to-know basis
  • Regular review of data processing practices and security configurations
  • Secure storage of digital records with backup and recovery procedures
  • Staff training on data protection responsibilities and incident reporting protocols
  • Incident response procedures for detecting, reporting, and investigating suspected data breaches

While we take reasonable precautions, no method of electronic transmission or storage is completely secure. We encourage you to use strong passwords and exercise caution when sharing personal information online.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Right of access: Request a copy of the personal data we hold about you.
  • Right to rectification: Request correction of inaccurate or incomplete personal data.
  • Right to erasure: Request deletion of your personal data where there is no compelling reason for continued processing.
  • Right to restrict processing: Request limitation of processing under certain circumstances.
  • Right to data portability: Receive your data in a structured, commonly used, machine-readable format where technically feasible.
  • Right to object: Object to processing based on legitimate interests or for direct marketing purposes.
  • Right to withdraw consent: Withdraw consent at any time where processing is based on consent, without affecting the lawfulness of prior processing.
  • Right to lodge a complaint: File a complaint with the Office of the Privacy Commissioner in New Zealand or your local data protection authority.

To exercise any of these rights, contact us at assist@expeloayoungex.world. We will respond within 30 days of receiving a verifiable request. We may need to verify your identity before processing certain requests.

9. International Data Transfers

Our primary operations and data storage are based in New Zealand. If personal data is transferred to service providers located outside New Zealand or the European Economic Area, we ensure appropriate safeguards are in place, including standard contractual clauses approved by relevant authorities, adequacy decisions, or binding corporate rules.

You may request information about the specific safeguards applied to international transfers by contacting us using the details provided in this policy.

10. Children's Privacy

Our website and services are directed at adults making nutrition decisions for their households. We do not knowingly collect personal data from individuals under 16 years of age without verifiable parental consent. If you believe we have inadvertently collected data from a child, please contact us immediately and we will take steps to delete such information.

11. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or business operations. The date at the top of this page indicates when the policy was last revised. Material changes will be communicated through a notice on our website or, where appropriate, by direct email to registered users.

We encourage you to review this policy regularly. Continued use of our website after changes are posted constitutes acceptance of the updated policy.

12. Contact Us About Privacy

For questions, concerns, or requests related to this Privacy Policy or our data handling practices, please contact:

Privacy Enquiries — Expeloayoungex
128 Willis Street, Te Aro, Wellington 6011, New Zealand
Email: assist@expeloayoungex.world
Phone: +64 4 385 2626