Privacy Policy

Last updated: 11 June 2026. This policy explains how we handle personal information under the Privacy Act 2020 (New Zealand).

1. Who we are

Tendonsshine is the agency responsible for your personal information. We are located at 80 Saint Lukes Road, Mount Albert, Auckland 1025, New Zealand. Contact our privacy officer: support@tendonsshine.world, phone +64 9 978 6000.

2. Information we collect

We may collect:

  • Name and email address (contact form)
  • Message content and enquiry details
  • Phone number if you provide it
  • Technical data: IP address, browser type, device information, pages visited
  • Cookie and localStorage preferences (see Cookies Policy)
  • Billing details for paid services (processed via secure payment providers)

3. Why we collect information

We collect personal information to respond to enquiries, deliver services you request, improve our website, meet legal obligations, and — with your consent — send relevant updates. We will not use your information for purposes you would not reasonably expect.

4. Information Privacy Principles

We comply with the 13 Information Privacy Principles (IPPs) under the Privacy Act 2020, including:

  • Collecting information lawfully and fairly
  • Collecting only what is necessary for a lawful purpose
  • Being transparent about collection
  • Protecting information with reasonable security safeguards
  • Providing access and correction rights

5. Overseas disclosure

Some service providers (such as website hosting or analytics tools) may store data outside New Zealand. Before disclosing information overseas, we ensure the recipient is subject to comparable privacy safeguards, or we obtain your authorisation as required by IPP 12.

6. Marketing communications

We only send electronic marketing messages with your express consent, in line with the Unsolicited Electronic Messages Act 2007. Every message includes an unsubscribe option. You may opt out at any time.

7. Data retention

Contact enquiries: up to 24 months. Technical logs: up to 12 months. Financial records: 7 years as required by NZ tax law. Cookie preferences: until you clear browser storage or update settings.

8. Security

We use HTTPS encryption, access controls, staff training, and regular reviews of our data handling practices. No method of transmission over the internet is completely secure; we take reasonable steps to protect your information.

9. Your rights

Under the Privacy Act 2020 you may:

  • Request access to personal information we hold about you
  • Request correction of inaccurate information
  • Withdraw consent for optional processing
  • Complain to the Office of the Privacy Commissioner if you believe we have interfered with your privacy

Privacy Commissioner: www.privacy.org.nz · 0800 803 909

10. European visitors

If you are in the European Economic Area, you also have rights under the GDPR including data portability and the right to lodge a complaint with your local supervisory authority. Our lawful bases include consent, contract performance, and legitimate interests.

11. Children

Our services are not directed at anyone under 16. We do not knowingly collect information from children.

12. Changes

We may update this policy from time to time. Material changes will be posted on this page with a revised date.