This Privacy Policy sets out how Boulder Co. complies with its obligations under the New Zealand Privacy Act 2020 (NZPA) in the collection, use, disclosure, and protection of your personal information. We are committed to protecting your privacy and ensuring your personal information is handled responsibly.
What Information We Collect
We collect and store personal information that is necessary for us to carry out our functions and activities, including providing you with our Boulder Co. services and managing our marketing efforts.
This information may include, but is not limited to:
- Identity and Contact Data: Name, email address, phone number, and physical address.
- Membership Data: Membership status, attendance records, billing history, and payment details (held securely by our third-party payment processor, not directly by us).
- Usage Data: Information about how you use our website, including your IP address, browser type, and interaction with our web pages (collected via cookies and tracking technologies).
How We Collect Your Information
We collect personal information directly from you when you:
- Complete a lead form or contact form on our website.
- Sign up for a membership or service agreement.
- Subscribe to our marketing communications.
- Interact with our website, social media accounts or online advertising.
How We Hold and Store Your Information
a. CRM and Security
Your personal information is primarily stored within our secure Customer Relationship Management System, which is a trusted third-party service provider. We ensure that our CRM has robust security measures, including encryption and access controls, to protect your data from loss, misuse, and unauthorised access.
b. Data Retention
We retain your personal information only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.
- We retain your data while you are an active member or prospect receiving communications from us.
- Your personal data will be securely deleted or anonymised upon your request, unless there is an ongoing lawful reason to retain it.
How We Use and Share Your Information
We use and disclose your personal information only for the purposes for which it was collected, or a directly related purpose, including:
a. Core Services & Administration
- Processing and managing purchases, billing, payments, and debt collection.
- Sharing with third parties we have engaged to assist us to provide the products or services you have requested.
- Providing customer support and responding to inquiries.
- Communicating with you about your account or purchases.
- Send marketing communications.
- Improving our website, products, and services.
- Contacting you regarding service updates, changes to terms, or urgent matters.
- To prevent and resolve unauthorised access to, or attacks on our systems; or where otherwise legally permitted.
b. Marketing Communications
We use your name and email address to send you electronic direct marketing and other promotional materials.
- Opt-Out: At the time you provide your personal information for sign-up, you are given an opportunity to opt-out of receiving these marketing emails. All marketing communications will also contain a clear unsubscribe link, allowing you to opt-out at any time.
c. Sharing with Marketing Partners
Disclosure: We share certain personal information with major overseas advertising platforms, such as Google and Meta, to measure and optimise our advertising campaigns. This process involves the secure transfer of data (such as your email address and phone number), which is cryptographically hashed (scrambled) to prevent direct identification.
- Purpose: To confirm whether a lead from our website resulted in a sale, to improve the targeting of our advertisements, and to ensure we are only advertising to people who may be interested in our services.
We do not sell your personal information to third parties.
Overseas Disclosure of Information
As detailed above, the platforms we use are based overseas (e.g., in the United States). By sharing your data with them for advertising purposes, we are disclosing your personal information outside of New Zealand.
We take reasonable steps to ensure that these overseas recipients are required to protect your personal information in a way that provides comparable safeguards to those required under the NZPA.
Cookies and Tracking Technologies
We use cookies, pixels, and similar tracking technologies on our website.
- What they do: These are small data files placed on your device to help us understand user behaviour, remember your preferences, and track the performance of our advertising.
- Standard Practice (NZPA): We provide you with clear information and the right to opt-out of non-essential tracking by disabling cookies in your browser.
Data Security
We take reasonable steps to protect your personal information from loss, misuse, or unauthorized access. This includes secure storage and transmission of sensitive information.
Your Rights
Under the NZPA, you have the right to:
- Access: Request a copy of the personal information we hold about you.
- Correction: Ask us to correct or update any of the information we hold about you if you believe it is inaccurate, incomplete, or misleading.
Other Information
- CCTV surveillance is in use at Boulder Co. facilities for safety and security.
- Photos and video of users may be collected for security and marketing purposes. We will endeavour to collect consent whenever possible if using images for marketing purposes and will remove any published images online by reasonable request. Please be aware that during events and competitions group photos are likely to be taken.
Contact Information
If you have any questions about this Privacy Policy, wish to access or correct your information, or make a complaint, please contact our Privacy Officer:
Privacy Officer: Kester Brown
Email: marketing@boulderco.co.nz
