We take your privacy very seriously.

At Taylored Technologies Limited (we, us, our), we are committed to protecting your Personal Information and ensuring compliance with the New Zealand Privacy Act 2020 (Privacy Act) (if you are in New Zealand), the European Union’s General Data Protection Regulation (GDPR) (if you are in a Member State of the European Union), and the California Consumer Privacy Act (CCPA) (if you are a California resident). 

This Privacy Policy gives details of the Personal Information that we collect via our website(s), Digital Wearable Devices, mobile apps, diagnostic tests, or when you interact with us or use our Services. 

This Privacy Policy also covers how and why Personal Information is collected, used, disclosed, and processed; and the lawful basis on which your Personal Information will be processed by us; how you can request access to or correction of your Personal Information, and how you can manage receiving communications from us. 

If you are in the EU or if you are a California resident, then you have additional rights under the applicable privacy laws which are outlined in the ‘GDPR’ and ‘CCPA’ sections of this Privacy Statement. 

This Privacy Policy should be read in conjunction with our Terms of Use. Unless defined in this Privacy Policy, all capitalised terms have the same meaning given to it in our Terms of Use. 

Collection and Use of Personal Information and Health Data

We collect personal information such as name, contact information, payment details, and health data including genetic and wearable diagnostic testing, medical history, and any relevant health information that the guest chooses to disclose. This information is collected to create a personalised health experience for each guest during the XXuop  retreat, tailor each guest’s experience to their individual needs, and provide them with advanced knowledge and tools to enhance their health and well-being.

All information collected will be solely used for the purpose of the retreat and will not be shared with any third parties without the guest’s explicit consent, unless required by law.

Access, Correction, and Deletion of Personal Information and Health Data

Guests have the right to access, correct, or delete their personal information and health data held by us, in accordance with the New Zealand Privacy Act 2020. To exercise these rights, please contact us at [email protected]. We will respond to your request within a reasonable timeframe and in accordance with the law.

If you no longer agree with our Privacy Policy or do not agree with the changes that we make to our Privacy Statement from time to time, please discontinue your use of our Site. If you withdraw your consent, we will stop collecting your Personal Information, but we may not be able to continue providing some or all of our Services to you.

If you wish to ‘opt-out’ of receiving certain communications from us or your Personal Information being provided to third parties for direct marketing purposes, then you should notify us or unsubscribe from our mailing list by clicking ‘unsubscribe’ at the bottom of our communications to you. If you decide to do so, then we will only communicate with you to the extent necessary to perform our obligations to you, such as to complete our transaction with you or where we are required to do so by law.

You can otherwise contact us at any time by emailing [email protected] or writing to us at Taylored Technologies Limited, 83A Tristram Street, Level 2, Hamilton, 3204, New Zealand, Attn: Privacy.

For the purpose of:

• The GDPR, the withdrawal of your consent does not affect the lawfulness of any processing activities based on such consent before its withdrawal.
• The Privacy Act, your Personal Information will only be used for the purpose for which it was collected in accordance with this Privacy Statement and the law. If that purpose no longer exists or your Personal Information is no longer needed for the purpose in which it was collected, then we will no longer use your Personal Information. 
• The CCPA, you may exercise your ‘right to opt-out’ and ‘right to delete’ and request that we stop collecting your Personal Information and delete the Personal Information that we hold about you (subject to lawful exceptions). 

Data controller 

The “data controller” (for the purpose of the GDPR), the “agency” (for the purpose of the Privacy Act) and the “business” (for the purpose of the CCPA) that is responsible for your information is Taylored Technologies Limited (NZCN 8135230), based in New Zealand. 

Information that is collected and processed

The table below outlines the 5 general categories of information that we collect for processing and the legal basis on which that information is processed: 

In addition to those that are outlined in the table, we will also collect and process information where you give us your informed consent. 

How the information is used and disclosed

With your consent, we will collect, use and disclose your Personal Information for the following purposes:  

• to provide you with our Services, including to:

• identify and verify your identity;

• communicate with you, such as sending you promotional emails about new Services, special offers, promotions or information about our Services; 

• update, secure, and troubleshoot our Services as well as providing support; 

• share information, when it is required to provide the Service;

• improve and develop our Services;

• personalise the Services and make recommendations to you;

• respond to your queries regarding the Site, or our Services; 

• provide you with a positive user experience when you visit our Site or use our Services;

• to bill you and to collect our Fees that you owe us, including authorising and processing credit card transactions or undertaking credit checks (if necessary);

• develop new Services, features and/or content; and

• keep you updated on things that are happening at Taylored Technologies;

• to run and maintain our Site and Services such as ensuring our Site and network system are secure; 
• for our internal record keeping purposes;
• to allow for the operation of our legitimate business activities and functions;
• the sale of all or substantially all of our business (whether by assets or shares); 
• to comply with our legal obligations; and
• for any other purposes you consent to.

From time to time, we may disclose your Personal Information to third party service providers, in both New Zealand and overseas, whom we engage to assist us in our business functions and activities (for example sending your Wellness Data to overseas labs for testing, sending marketing communications, and providing maintenance services for our Site). We will require our third party service providers to comply with the terms of this Privacy Policy and the applicable privacy laws of the country in which they are located. 

We may also use third party service providers to monitor and analyse the use of our Services such as:

• Google Analytics

Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. Google uses the data collected to track and monitor the use of our Service. This data is shared with other Google services. Google may use the collected data to contextualise and personalise the ads of its own advertising network.

You may opt-out of certain Google Analytics features through your mobile device settings, such as your device advertising settings or by following the instructions provided by Google in their privacy policy: https://policies.google.com/privacy.

For more information on the privacy practices of Google, please visit the Google Privacy & Terms web page: https://policies.google.com/privacy.

• Firebase

Firebase is an analytics service provided by Google Inc.

You may opt-out of certain Firebase features through your mobile device settings, such as your device advertising settings or by following the instructions provided by Google in their privacy policy: https://policies.google.com/privacy.

We also encourage you to review the Google’s policy for safeguarding your data: https://support.google.com/analytics/answer/6004245.

For more information on what type of information Firebase collects, please visit the How Google uses data when you use our partners’ sites or apps webpage: https://policies.google.com/technologies/partner-sites.

• Klaviyo

Klaviyo is an email marketing and communications service provider and we may use Klaviyo to manage and send emails and text messages to you.  

Their privacy policy can be viewed at: https://www.klaviyo.com/marketing-resources/data-privacy.

In some cases, we may remove personal identifiers from your Personal Information and maintain it in an aggregate form. We may combine this information with other information that we hold to produce anonymous, aggregated statistical information to form part of our Services or our marketing, or in scientific publications published by our research partners. Once your Personal Information is anonymised, it may no longer be capable of identifying, or being re-linked, to you.

How we use cookies

A cookie is a small file which asks permission to be placed on your computer’s hard drive. Once you agree, the file is added and the cookie helps analyse web traffic or lets you know when you visit a particular site. Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.

We use traffic log cookies to identify which pages are being used. This helps us analyse information  about web page traffic and improve our Site to tailor it to customer needs. We only use this information for statistical analysis purposes and then the information is removed from the system when it’s no longer required for the purpose.

Overall, cookies help us provide you with a better Site and user experience by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the information you choose to share with us. You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. 

If you decline cookies, this may prevent you from taking full advantage of functionality and Services available on our Site.

List of cookies we collect

The table below lists the cookies we collect and what information they store.

Transfer of information to other countries 

In order to provide you with our Services, we may need to disclose and transfer your Personal Information to third parties located outside New Zealand.  We will take reasonable steps to ensure that the overseas recipient is required to protect your Personal Information in a way that, overall, provides comparable safeguards to those under New Zealand privacy laws. Examples of such steps include a written agreement between us and the recipient, or making reasonable enquiries regarding the data protection standards of the country in which the recipient is domiciled in. 

If you are in a Member State of the European Union, your Personal Information may be transferred to or stored in a geographic region that imposes different privacy obligations than the country you are currently in. We will only transfer your Personal Information to a “secure third country”, such as New Zealand, or to a third country or international organisation where appropriate safeguards are provided in accordance with the GDPR.

Controlling your Personal Information

You can choose to restrict the collection or use of your Personal Information in the following ways:

• Indicate to us in writing that you do not wish to be contacted for direct marketing purposes. If you have told us, then you have opted-out of receiving electronic marketing communications from us. 
• If you have previously agreed to us using your Personal Information for direct marketing purposes, you can change your mind at any time by letting us know you no longer wish for your Personal Information to be used for direct marketing purposes by contacting us using the contact details listed above or unsubscribing from our mailing list by clicking ‘unsubscribe’ at the bottom of our electronic communications. 

We will not sell, distribute or lease your Personal Information to third parties unless we have your consent or we are required by law to do so. 

Links to other websites

Our Site may contain links to other websites of interest. However, once you have used these links to leave our Site, you should note that we do not have any control over the other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting third party websites and such websites are not governed by this Privacy Policy. You should exercise caution and look at the privacy policy applicable to those websites. 

How you can request access or correction of your information

If you wish to request correction of your Personal Information that we hold, please login to your account on our Site to make changes. If you do not have an account with us, then contact us using the contact details listed above. 

We will correct your Personal Information if it is necessary to ensure that your Personal Information is accurate, up to date, complete and not misleading.  If we decide that it is unnecessary to correct your Personal Information, we will let you know the legal reasons for our decision.  If you are not happy with those reasons, then you have the right to complain to the New Zealand Privacy Commissioner: www.privacy.org.nz/your-rights/how-to-complain/.    

If you wish to request access to your Personal Information that we hold, contact us using the contact details listed above. You have the right to request access to Personal Information that we hold about you. If we do not give you access to the Personal Information that you have requested, then we will let you know the legal reasons for not disclosing your Personal Information. If you are not happy with the legal reasons provided, then you have the right to complain to the New Zealand Privacy Commissioner: www.privacy.org.nz/your-rights/how-to-complain/.    

Security

We are committed to ensuring that your Personal Information is secure. To prevent unauthorised access, use, modification, disclosure, loss or destruction, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the Personal Information that we collect. We will also take reasonable steps to ensure that our third parties whom we disclose your Personal Information to also take reasonable steps to protect your Personal Information in accordance with this Privacy Policy and the applicable privacy laws.

Privacy complaints

If you are in New Zealand and you think that your privacy rights have been interfered with, you can make a written complaint to our Privacy Officer by email to i[email protected], or otherwise contact the NZ Privacy Commissioner at https://www.privacy.org.nz/your-rights/making-a-complaint/complaint-form/. 

GDPR 

If you are in a Member State of the European Union, you have the following rights with respect to your Personal Information: 

• Lodging complaints: You have the right to lodge a complaint with a ‘supervisory authority’ established by a Member State under Article 51 of the GDPR. 
• Right of rectification: You have the right to obtain from us without undue delay the rectification of inaccurate Personal Information. We may seek to verify the accuracy of the Personal Information before correcting it.
• Right to restrict processing: You have the right to limit the ways in which we use your Personal Information, in particular where: 

• you contest the accuracy of your Personal Information; 

• the processing is unlawful and you oppose the erasure of your Personal Information;  

• we no longer need your Personal Information for the purposes of the processing, but you require the information for the establishment, exercise or defence of legal claims; or 

• you have objected to the processing of your Personal Information pending the verification by a supervisory authority of whether our legitimate grounds to process override your own.

• Right of access and portability: You have the right to request certain copies of your Personal Information held by us. You may also be entitled to request copies of Personal Information that you have provided to us in a structured, commonly used, and machine-readable format and/or request us to transmit this information to another service provider nominated by you (where technically feasible).
• Right to be forgotten: You have the right to request the erasure of your Personal Information without undue delay where one of the grounds set out in Article 17(1) of the GDPR apply. Please note that: 

• we may retain some of your Personal Information as necessary for our legitimate business interests, such as fraud detection and prevention and enhancing safety; 

• we may retain and use your Personal Information to the extent necessary to comply with our legal obligations. For example, we may keep some of your information for tax, legal reporting, auditing and regulatory compliance obligations; and

• Because we maintain our Site to protect from accidental or malicious loss and destruction, residual copies of your Personal Information may not be able to be removed from our backup systems.

If you are in the EU and you think that your privacy rights have been interfered with, you can make a written complaint to our representative in the EU for GDPR purposes by email to [email protected].

CCPA 

Under the CCPA, Personal Information means ‘information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.’

If you are a California resident, you have the following rights with respect to your Personal Information: 

• Right of Access: You have the right to request that we disclose to you the categories of Personal Information we have collected about you, the categories of sources from which the Personal Information is collected, the business purpose or commercial purpose for collecting or selling personal information, the categories of third parties with whom we share Personal Information, and the categories of Personal Information we have disclosed about you for a business purpose. You also have the right to request that we provide you with a copy of the specific pieces of Personal Information we have collected about you in the preceding 12 months of your request without any charge to you.
• Right to Deletion: You have the right to request that we delete the Personal Information we collect from you. However, in certain situations we are not required to delete your Personal Information, such as when the information is necessary in order to complete the transaction for which the Personal Information was collected, to provide Services requested by you, to comply with a legal obligation, to secure our Site or other online Services, or to otherwise use your Personal Information internally in a lawful manner that is compatible with the context in which you provided the information.
• Right to opt-out: We do not sell Personal Information to third parties without your consent. We do allow third parties to collect Personal Information through our Site and share Personal Information with third parties for the business purposes described in this Privacy Policy. You can at any time opt-out of your Personal Information being used for direct marketing purposes (including continuing to receive promotional materials from us) by contacting us using the contact details listed above or unsubscribing from our mailing list by clicking ‘unsubscribe’ at the bottom of our communications to you.
• Right Not to Be Subject to Discrimination: We do not discriminate against a customer because the customer exercised any of his or her rights under the CCPA.