Privacy Policy
Last updated: 25 June 2026
This Privacy Policy explains how Greenyouthpower.ddd ("we", "us", "our") collects, uses, stores, discloses, and protects personal information when you visit our website or contact us. We are an agency for the purposes of the Privacy Act 2020 (New Zealand) and handle personal information in accordance with the Act's Information Privacy Principles (IPPs), including IPP 3A where personal information is collected indirectly (in force from 1 May 2026). Where the EU General Data Protection Regulation (GDPR) applies to you, we also comply with relevant GDPR requirements as described below.
1. Agency Identity and Contact
Agency / business name: Greenyouthpower.ddd
Physical address: 227 Kilmore Street, Christchurch Central City, Christchurch 8011, New Zealand
Email (privacy enquiries): hello@greenyouthpower.world
Phone: +64 27 841 7746
For privacy-related requests (access, correction, complaints), contact us using the details above. We will respond within 20 working days as required under the Privacy Act 2020, unless an extension is permitted by law.
2. What Is Personal Information?
Under the Privacy Act 2020, personal information means information about an identifiable individual. This may include your name, email address, message content, IP address, device identifiers, and information collected through cookies or similar technologies where it can be linked to you. It does not include information that does not identify you, such as fully anonymised aggregate statistics.
3. Personal Information We Collect
We collect only personal information that is reasonably necessary for our stated purposes (IPP 1). Categories include:
- Contact information: name, email address, and message content when you submit our contact form, email us, or call us.
- Technical information: IP address, browser type and version, device type, operating system, referring URLs, pages viewed, date and time of access, and general location derived from IP (e.g. city or region).
- Cookie and preference data: cookie consent choices stored in local storage and any analytics or marketing identifiers if you consent. See our Cookie Policy.
- Communication records: copies of correspondence when you contact us by email or phone.
We do not intentionally collect sensitive health information. Please do not include medical, diagnostic, or other sensitive personal information in contact messages. If such information is inadvertently provided, we will delete it where practicable unless we are required by law to retain it.
4. How We Collect Personal Information
Direct collection (IPP 2 and IPP 3): We collect most personal information directly from you — for example when you complete our contact form, send an email, or call us.
Indirect collection (IPP 3A): Some technical information (such as IP address and browsing data) may be collected automatically through server logs, cookies, or similar technologies without you actively providing it. Where we collect personal information indirectly, we take reasonable steps to ensure you are aware of the matters set out in this Policy as soon as reasonably practicable after collection, including through this Privacy Policy, our cookie banner, and our Cookie Policy.
Manner of collection (IPP 4): We collect personal information lawfully, fairly, and without intruding unreasonably on your personal affairs.
5. Notification at Collection (IPP 3 and IPP 3A)
When we collect your personal information, we inform you (or take reasonable steps to make you aware) of the following:
- That personal information is being collected and our identity as the collecting agency.
- The purpose(s) for which it is collected and the intended recipients or classes of recipients.
- Whether provision of the information is required by law or is voluntary, and what happens if you do not provide it.
- Your rights of access to and correction of personal information under IPPs 6 and 7.
- That this Policy contains further details about collection, use, storage, and disclosure.
Contact form: Providing your name, email, and message is voluntary. If you do not provide this information, we cannot respond to your enquiry through the form, but you may still contact us by phone.
6. Purposes of Collection and Use (IPP 1 and IPP 10)
We collect and use personal information only for lawful purposes connected with our functions and only where necessary for those purposes:
- To respond to enquiries submitted through our contact form, email, or phone.
- To operate, maintain, secure, and improve our website and user experience.
- To analyse website usage in aggregate form where you have consented to analytics cookies.
- To deliver relevant content where you have consented to marketing cookies (we do not sell personal information).
- To comply with legal obligations under New Zealand law, including responding to lawful requests from authorities.
- To protect our legal rights and defend against claims.
We will not use your personal information for a purpose other than the purpose for which it was collected unless we believe on reasonable grounds that the new use is directly related to the original purpose, you authorise the new use, or the use is permitted by the Privacy Act 2020.
GDPR legal bases (where applicable): consent (Art. 6(1)(a)), legitimate interests (Art. 6(1)(f)), and legal obligation (Art. 6(1)(c)).
7. Disclosure of Personal Information (IPP 11)
We do not sell your personal information. We may disclose personal information to:
- Service providers who assist with website hosting, email delivery, analytics (with your consent), and technical support, under contractual obligations to protect information and use it only for specified purposes.
- Professional advisers (e.g. lawyers) where reasonably necessary.
- Government agencies or courts when required or authorised by New Zealand law.
We take reasonable steps before disclosure to ensure personal information is accurate, up to date, complete, relevant, and not misleading (IPP 8).
8. Disclosure Outside New Zealand (IPP 12)
Some service providers (for example hosting, content delivery networks, analytics providers, or embedded map services such as Google Maps) may store or process personal information outside New Zealand, including in the United States, European Union, Australia, or other countries.
Before disclosing personal information overseas, we take reasonable steps to ensure the recipient will protect the information with safeguards comparable to those under the Privacy Act 2020, such as:
- Contractual clauses requiring comparable protection (including the Privacy Commissioner's model contract clauses where appropriate).
- Using providers subject to privacy laws that provide comparable safeguards.
- Obtaining your express authorisation where comparable safeguards cannot be assured, after informing you that your information may not receive the same level of protection as under New Zealand law.
Where you consent to analytics or marketing cookies, you acknowledge that related data may be processed by overseas providers. Further details are in our Cookie Policy.
9. Storage, Security, and Retention (IPP 5 and IPP 9)
Security (IPP 5): We implement reasonable safeguards against loss, misuse, unauthorised access, disclosure, or alteration, including HTTPS encryption, access controls, secure hosting environments, and staff awareness of privacy obligations. No internet transmission is completely secure; you use our website at your own risk.
Retention (IPP 9): We keep personal information only for as long as necessary for the purposes for which it was collected, or as required by law:
- Contact form submissions: up to 24 months after resolution of your enquiry, unless a longer period is required by law or for dispute resolution.
- Email correspondence: up to 36 months.
- Server logs and analytics data: typically 12–26 months, then deleted or anonymised where possible.
- Cookie consent records: stored on your device until cleared; any server-side consent logs retained up to 12 months.
When retention periods end, we securely delete or anonymise personal information where practicable.
10. Access to Personal Information (IPP 6)
You have the right to request access to personal information we hold about you. To make a request:
- Email hello@greenyouthpower.world with sufficient detail to identify you and the information sought.
- We may need to verify your identity before releasing information.
- We will respond within 20 working days. If we need more time, we will notify you and explain why, as permitted under the Privacy Act 2020.
We may refuse access in limited circumstances permitted by the Privacy Act 2020 (for example where disclosure would endanger safety or unreasonably prejudice the privacy of another person). If we refuse access, we will explain the reason and inform you of your right to complain to the Office of the Privacy Commissioner.
11. Correction of Personal Information (IPP 7)
You may request correction of personal information you believe is inaccurate, out of date, incomplete, irrelevant, or misleading. We will correct the information or, if we disagree, attach a statement of your views to the record as required by the Privacy Act 2020. Contact us using the details in Section 1. We will respond within 20 working days.
12. Unique Identifiers (IPP 13)
We do not assign unique identifiers (such as customer numbers) unless necessary for operational functions. Analytics or marketing tools, if enabled with your consent, may use their own identifiers subject to their privacy policies. We take reasonable steps to prevent arbitrary linking of identifiers across unrelated services.
13. Notifiable Privacy Breaches
Under Part 6 of the Privacy Act 2020, if a privacy breach has caused or is likely to cause serious harm to an affected individual, we are required to notify the Office of the Privacy Commissioner and affected individuals as soon as practicable, unless an exception applies. We maintain internal procedures to assess and respond to suspected breaches. If you believe your personal information has been compromised through our website, contact us immediately at the details in Section 1.
14. Marketing Communications
We do not send commercial electronic messages without your consent, in accordance with the Unsolicited Electronic Messages Act 2007. If we ever send newsletters or promotional emails, they will include a functional unsubscribe facility and identify Greenyouthpower.ddd as the sender. Replying to a contact form enquiry is not treated as consent to ongoing marketing unless you separately opt in.
15. Your Rights Under GDPR (Where Applicable)
If you are located in the European Economic Area or UK, you may additionally have rights to data portability, restriction of processing, objection to processing based on legitimate interests, and withdrawal of consent. GDPR requests are handled within one month unless extended as permitted. Our legal bases are set out in Section 6.
16. Children
Our website is intended for a general audience and is not directed at children under 16. We do not knowingly collect personal information from children without parental or guardian consent. If you believe a child has provided personal information to us, contact us and we will take reasonable steps to delete it.
17. Third-Party Links and Embedded Content
Our site may link to external websites or embed third-party content (e.g. Google Maps on our Contacts page). Those third parties have their own privacy practices. We are not responsible for their collection or use of personal information. Review their policies before interacting with embedded services.
18. Complaints
If you are concerned about how we have handled your personal information, contact us first so we can try to resolve the matter. If you are not satisfied with our response, you may complain to:
Office of the Privacy Commissioner (New Zealand)
Website: www.privacy.org.nz
Freephone: 0800 803 909
Postal: PO Box 10 094, Wellington 6143, New Zealand
EEA/UK residents may also lodge a complaint with their local data protection supervisory authority.
19. Health Content and Advertising
This website publishes general food and lifestyle information. We do not collect health data for advertising profiling. If third-party advertising is displayed in future, it will comply with Google Ads policies and the ASA Therapeutic and Health Advertising Code. We do not permit ads for unapproved supplements, prescription medicines, or misleading health claims on our pages. See our About page for editorial standards.
20. Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices, technology, or legal requirements. The "Last updated" date at the top will change when we make revisions. Material changes will be posted on this page. We encourage you to review this Policy periodically. Continued use of the website after changes constitutes acceptance where permitted by law.