Privacy Policy

Last updated:

Flushingflex ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, store, and safeguard your personal information when you visit our website at https://flushingflex.world (the "Site").

We are based in New Zealand. We handle personal information in accordance with the Privacy Act 2020 and the Information Privacy Principles (IPPs). Where the General Data Protection Regulation (GDPR) also applies to you, we describe relevant rights in Section 10 below.

1. Who We Are (Privacy Act Agency)

For the purposes of the Privacy Act 2020, the agency responsible for your personal information is:

Flushingflex
62 Te Kumi Road, Te Kūiti 3910, New Zealand
Email: reach@flushingflex.world
Phone: +64 7 878 0003

We provide free educational relaxation and mindfulness content. We do not sell products or paid subscriptions through this Site.

2. Information We Collect

2.1 Personal Data Provided Voluntarily

When you use our contact form, we collect the following information:

Your name
Your email address
The content of your message
Your consent status for data processing

2.2 Automatically Collected Data

When you visit our Site, we may automatically collect certain technical information, including:

IP address
Browser type and version
Operating system
Pages visited and time spent on each page
Referring website address
Date and time of access

3. How and Why We Use Your Information

We collect personal information only where it is necessary for lawful purposes connected with our functions. We use your information to:

Respond to inquiries you submit through the contact form
Operate, maintain, and secure the Site
Understand how visitors use the Site (only where you have consented to analytics cookies)
Improve our content and user experience
Meet legal and regulatory obligations in New Zealand and elsewhere where applicable
Protect against misuse, fraud, or unauthorized access

We will not use your contact details for direct marketing unless you have given clear consent, and you may opt out at any time.

4. Collection Notice (IPP 3)

When you submit the contact form, we tell you at the point of collection what information we need, why we need it, and that our Privacy Policy explains how we handle it. Providing your details is voluntary, but we cannot reply to your inquiry without your name, email, and message.

5. Disclosure of Information

We do not sell or rent your personal information. We may disclose information only where permitted by the Privacy Act 2020, including:

To trusted service providers who help us operate the Site (for example hosting or email delivery), under confidentiality and data-protection obligations
Where required or authorized by law, regulation, court order, or a New Zealand government agency with lawful authority
Where reasonably necessary to protect our rights, users, or the public

6. Overseas Disclosure (IPP 12)

Some service providers or technologies we use may store or process data outside New Zealand (for example in the United States or the European Union). Where we disclose personal information overseas, we take reasonable steps to ensure the recipient protects your information in a manner consistent with the Privacy Act 2020, such as contractual safeguards or reliance on comparable privacy laws. Details of third-party providers are described in our Cookie Policy.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

Contact form submissions: Retained for up to 12 months after the inquiry is resolved
Analytics data: Retained for up to 26 months
Cookie consent preferences: Stored in your browser's local storage until you clear it or change your preferences

8. Your Rights Under the Privacy Act 2020

Under the Privacy Act 2020 and the IPPs, you have the right to:

Access personal information we hold about you (IPP 6)
Request correction of inaccurate, incomplete, or misleading information (IPP 7)
Withdraw consent where processing is based on consent (for example contact form or optional cookies), without affecting prior lawful use
Complain to us or to the Office of the Privacy Commissioner if you believe we have interfered with your privacy

To make an access or correction request, contact us using the details in Section 16. We will respond within a reasonable period, and in any event within 20 working days where practicable under New Zealand law, unless an extension is permitted. We may need to verify your identity before releasing information.

9. Privacy Breaches

If a privacy breach has caused or is likely to cause serious harm, we will assess the breach and, where required under the Privacy Act 2020, notify the Office of the Privacy Commissioner and affected individuals without undue delay.

10. Additional Rights for EEA Visitors (GDPR)

If you are located in the European Economic Area, you may also have rights under the GDPR, including erasure, restriction of processing, data portability, and objection to processing based on legitimate interests. To exercise GDPR rights, contact us using the details in Section 16. We will respond within one month where GDPR applies.

Our lawful bases under GDPR are: consent (contact form and optional cookies), legitimate interests (site security and improvement, where balanced against your rights), and legal obligation where required.

11. Cookies

Our website uses cookies to enhance your browsing experience. For detailed information about the cookies we use and how to manage them, please refer to our Cookie Policy.

12. Data Security (IPP 5)

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

Secure data transmission protocols
Access controls limiting data access to authorized personnel only
Regular review and updating of security practices

While we strive to protect your personal data, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security.

13. Children's Privacy

Our Site is intended for a general adult audience. We do not knowingly collect personal information from anyone under 16 without appropriate parental or guardian consent. If you believe a child has provided us with personal information, please contact us and we will take reasonable steps to delete it.

14. Complaints to the Privacy Commissioner

If you are not satisfied with our response to a privacy concern, you may contact the Office of the Privacy Commissioner (Te Mana Mātāpono Matatapu):

Website: www.privacy.org.nz
Phone: 0800 803 909 (New Zealand)

We encourage you to contact us first so we can try to resolve your concern promptly.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Material changes will be posted on this page with an updated revision date. Continued use of the Site after changes are posted constitutes notice of the updated policy.

16. Contact Us

If you have questions, wish to access or correct your information, or have a privacy complaint, please contact us: