Privacy Policy

Last updated:

1. Who we are and how to contact us

For the purposes of the Privacy Act 2020 (New Zealand), Lovelyvibrant is an agency that holds personal information collected through this website. For visitors in the European Economic Area, we also act as the data controller under the General Data Protection Regulation (EU GDPR), where that law applies. Contact details:

  • Business name: Lovelyvibrant
  • Address: Level 1/175 Vivian Street, Te Aro, Wellington 6011, New Zealand
  • Phone: +64 20 4191 5046
  • Email: chat@lovelyvibrant.world
  • Domain: lovelyvibrant.world

2. What data we collect

We may collect the following categories of personal information (also referred to as personal data where GDPR applies):

  • Name and email address submitted through the contact form
  • Message content you voluntarily provide
  • Technical data such as IP address, browser type, device type, and pages visited, collected automatically via cookies and server logs

We do not collect sensitive personal data such as financial information, identity documents, or data relating to personal circumstances.

3. How we comply with New Zealand law

We handle personal information in line with the Information Privacy Principles (IPPs) in Schedule 1 of the Privacy Act 2020. In practice this means we collect information only for lawful purposes connected to our site, we tell you what we collect and why, we keep information accurate and secure, and we give you ways to access and correct your information and to complain if something goes wrong.

If we disclose personal information to an overseas person or entity (for example a cloud or analytics provider based outside New Zealand), we take reasonable steps to ensure that the recipient is subject to comparable safeguards, or we rely on another permitted pathway under the Privacy Act 2020.

4. Legal basis for processing (including GDPR where applicable)

Where the GDPR applies, we rely on the following legal bases:

  • Consent — for analytics and marketing cookies, where you have given consent via the cookie banner
  • Legitimate interests — for technical and security logging necessary to operate the website
  • Performance of a contract or steps at your request — to respond to enquiries submitted through the contact form

Under New Zealand law, similar purposes are supported by the IPPs (for example, collecting information for a lawful purpose connected to our functions, and using or disclosing it in ways that are fair and lawful).

5. How we use your data

We use collected data for the following purposes:

  • Responding to enquiries submitted via the contact form
  • Maintaining website security and preventing abuse
  • Analysing aggregate site usage to improve our guides and templates (where consent is given)

We do not use your data for automated decision-making or profiling.

6. Data sharing

We do not sell personal data to third parties. Data may be shared only in the following circumstances:

  • With service providers who assist us in operating the website (such as hosting, analytics, or advertising platforms), under contracts or terms that require them to protect personal information and use it only for agreed purposes
  • Where required by applicable law, court order, or regulatory authority

7. Data retention

Contact form submissions are retained for up to 12 months from the date of receipt, after which they are deleted. Technical server logs are retained for up to 90 days. Cookie consent records are retained for 12 months.

8. Your rights (New Zealand and, where applicable, GDPR)

New Zealand: You may request access to personal information we hold about you and ask us to correct it if you think it is wrong. These rights are set out in IPP 6 (access) and IPP 7 (correction) of the Privacy Act 2020. We will respond to a privacy request as soon as reasonably practicable, and within 20 working days unless we need longer (for example, if the request is complex) and we let you know why.

European Economic Area (GDPR): Where the GDPR applies, you may also have the following rights regarding your personal data:

  • Right of access — to request a copy of the personal data we hold about you
  • Right to rectification — to request correction of inaccurate data
  • Right to erasure — to request deletion of your data where there is no lawful basis for continued retention
  • Right to restriction — to request that we limit how we process your data
  • Right to data portability — to receive your data in a structured, commonly used, machine-readable format (where applicable)
  • Right to object — to object to certain processing based on legitimate interests
  • Right to withdraw consent — at any time, where processing is based on consent

To exercise any of these rights, contact us at chat@lovelyvibrant.world.

9. Privacy breaches

If we become aware of a notifiable privacy breach that has caused or is likely to cause anyone serious harm, we will comply with the notifiable privacy breach requirements in Part 6 of the Privacy Act 2020, including reporting to the Office of the Privacy Commissioner when required and notifying affected individuals where appropriate.

10. Electronic messages (spam)

We do not send commercial electronic messages unless we have consent that meets the Unsolicited Electronic Messages Act 2007 (for example, you opted in with clear identification of what you are signing up for). Contact form submissions are used only to respond to your enquiry unless we separately obtain your consent for other communications.

11. Data security

We implement technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These include HTTPS encryption, restricted access controls, and regular security reviews.

12. International transfers

If personal data is transferred outside New Zealand or the European Economic Area, we ensure that appropriate safeguards are in place, such as standard contractual clauses approved by relevant data protection authorities.

13. Cookies

For information about the cookies we use, please see our Cookie Policy.

14. Changes to this policy

We may update this Privacy Policy from time to time. The date at the top of this page reflects the most recent revision. For material changes, we will take reasonable steps to bring the update to your attention (for example, a notice on the site). Continued use after notice may constitute acceptance where that is fair and lawful; where the law requires separate consent, we will obtain it.

15. Complaints

If you believe we have not handled your personal information appropriately, you may complain to the Office of the Privacy Commissioner (New Zealand) at www.privacy.org.nz. If you are in the European Economic Area, you may also contact your local data protection supervisory authority.