Privacy Policy

Last updated:

This Privacy Policy describes how Cartilageiaplane ("we", "us", or "our") collects, uses, stores, and protects personal information in connection with our corporate health challenge programmes, wellness packages, and related services offered through cartilageiaplane.world. We are committed to safeguarding the privacy of organisational representatives, programme participants, and website visitors in accordance with the Privacy Act 2020 of New Zealand and applicable data protection principles.

1. Data Controller

The data controller responsible for your personal information is Cartilageiaplane, located at 121 Tauhinu Road, Wellington 6022, New Zealand. For privacy-related enquiries, you may contact us by phone at +64224143487 or via the contact details listed on our connect page. Our designated privacy contact reviews all data protection matters related to our corporate health challenge products and services.

2. Scope of This Policy

This policy applies to personal information collected when you browse our website, submit enquiries about our Sprint Challenge Package, Team Wellness Quarterly, or Enterprise Health Programme, register as a programme participant through your employer, attend in-person wellness events, or interact with our digital challenge platforms. It does not apply to third-party websites linked from our pages, which maintain their own privacy practices.

3. Information We Collect

3.1 Information You Provide Directly

We collect information that you voluntarily provide when contacting us, including your name, email address, organisation name, job title, phone number, and message content submitted through our contact form. When your employer enrols your team in a corporate health challenge, we may receive participant names, work email addresses, department affiliations, and emergency contact details necessary for programme administration.

3.2 Challenge Participation Data

During active wellness programmes, we collect activity metrics such as step counts, challenge completion status, milestone achievements, survey responses, and event attendance records. This data is used solely to facilitate programme delivery, generate team leaderboards, and produce anonymised outcomes reports for client organisations.

3.3 Automatically Collected Information

When you visit cartilageiaplane.world, we may automatically collect technical data including your IP address, browser type, device information, operating system, referring URLs, pages viewed, and session duration. This information is gathered through cookies and similar technologies as described in our Cookies Policy.

3.4 Payment and Billing Information

For organisations purchasing wellness packages, we collect billing contact details, company registration information, purchase order references, and invoicing addresses. Payment card details, when applicable, are processed by our secure third-party payment processor and are not stored on our servers.

4. How We Use Your Information

We use personal information for the following purposes related to our corporate health challenge products:

5. Legal Basis for Processing

We process personal information based on one or more of the following grounds: your explicit consent provided through our contact form or programme registration; the performance of a contract between your organisation and Cartilageiaplane for wellness package delivery; our legitimate interests in operating and improving our corporate health challenge services, provided such interests do not override your fundamental rights; and compliance with legal obligations under New Zealand law.

6. Sharing Your Information

We do not sell personal information to third parties. We may share data with trusted service providers who assist in programme delivery, including cloud hosting providers, email communication platforms, payment processors, and event venue partners. These providers are contractually bound to process data only on our instructions and maintain appropriate security measures. We may disclose information when required by law, court order, or governmental authority, or to protect the rights, safety, and property of Cartilageiaplane, our clients, and participants.

7. Organisational Client Reporting

When your employer engages our services, designated organisational contacts receive aggregated participation reports and challenge outcomes. Individual participant data shared with client organisations is limited to what is necessary for programme administration, such as leaderboard rankings and completion status. Sensitive health information beyond activity metrics is not collected or shared unless explicitly required and consented to as part of a customised programme scope.

8. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes described in this policy. Contact form submissions are retained for twenty-four months unless a business relationship is established. Programme participation data is retained for the duration of the active challenge plus twelve months for reporting and reference purposes. Contractual and billing records are retained for seven years in accordance with New Zealand tax and accounting requirements. After retention periods expire, data is securely deleted or anonymised.

9. Data Security

We implement appropriate technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure, or destruction. These measures include encrypted data transmission via HTTPS, access controls limiting employee access to personal data on a need-to-know basis, secure server infrastructure, regular security assessments, and staff training on data protection practices. While we strive to protect your information, no method of electronic transmission or storage is completely secure.

10. International Data Transfers

Our primary data processing occurs within New Zealand. Where we use service providers located outside New Zealand, we ensure appropriate safeguards are in place, including contractual data protection clauses and verification that the recipient jurisdiction provides adequate protection or that supplementary measures are applied to protect your information.

11. Your Rights

Under the Privacy Act 2020, you have the right to access personal information we hold about you, request correction of inaccurate or incomplete data, request deletion of your information where no legal basis for retention exists, withdraw consent for processing where consent is the legal basis, and lodge a complaint with the Office of the Privacy Commissioner of New Zealand. To exercise these rights, contact us using the details provided in Section 1. We will respond to verified requests within twenty business days.

12. Children's Privacy

Our corporate health challenge services are designed for adult workplace participants. We do not knowingly collect personal information from individuals under the age of sixteen. If we become aware that we have collected data from a minor without appropriate authorisation, we will take steps to delete such information promptly.

13. Third-Party Links

Our website may contain links to external resources such as Google Maps and partner venues. We are not responsible for the privacy practices of these third parties and encourage you to review their respective privacy policies before providing personal information.

14. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our corporate health challenge products, legal requirements, or operational practices. Material changes will be communicated through a notice on cartilageiaplane.world. The date at the top of this page indicates when the policy was last revised. Continued use of our services after changes constitutes acceptance of the updated policy.

15. Contact Us

If you have questions or concerns about this Privacy Policy or our data handling practices related to our wellness packages and challenge programmes, please contact Cartilageiaplane at 121 Tauhinu Road, Wellington 6022, New Zealand, by phone at +64224143487, or through our contact form at connect-hub.html.