Privacy

Privacy Policy

Last updated: 28 May 2026

Attractiveexcept (“we”, “us”) operates attractiveexcept.world from Aotearoa New Zealand. We handle personal information in accordance with the Privacy Act 2020 and its Information Privacy Principles (IPPs). Where the EU General Data Protection Regulation (GDPR) applies, we also meet those requirements.

Agency / data controller

Attractiveexcept
26 Bruce McLaren Road, Henderson, Auckland 0612, New Zealand
Email: feedback@attractiveexcept.world
Phone: +64 22 545 6789

Information we collect

  • Contact details: name, email, phone when you enquire or book.
  • Messages: content you send via our form or email.
  • Booking records: session dates, invoices, attendance (for paid services).
  • Technical data: IP address, browser, device, pages viewed, cookie IDs.
  • Preferences: cookie consent stored in your browser (localStorage).

Why we collect it (purposes)

  • Respond to enquiries and deliver booked services.
  • Process payments and meet tax obligations (GST records).
  • Secure and improve our website.
  • Send marketing only where you have opted in (Unsolicited Electronic Messages Act 2007).
  • Run analytics or advertising cookies only with your consent.

Legal bases (GDPR visitors)

Contract, legitimate interests (security, service improvement), legal obligation, and consent for non-essential cookies and marketing email.

Disclosure to third parties

We do not sell personal information. We use processors (hosting, email, payment) under contracts requiring confidentiality and IPP-equivalent safeguards. Overseas disclosure occurs only where permitted under IPP 12—with safeguards such as contractual clauses where needed.

Retention

  • Enquiries: up to 24 months unless a longer period is needed for disputes.
  • Financial records: 7 years (Inland Revenue requirements).
  • Server logs: up to 90 days.
  • Cookie preferences: until you clear them or withdraw consent.

Security

HTTPS encryption, access controls, and periodic review of systems. No online transmission is fully secure—please use strong passwords on your devices.

Your rights (New Zealand)

Under the Privacy Act 2020 you may request access to and correction of your personal information. Contact us using the details above. If we decline a request, we will explain why. You may complain to the Office of the Privacy Commissioner: privacy.org.nz.

Your rights (GDPR)

Where GDPR applies, you may also request erasure, restriction, portability, or object to processing, and withdraw consent. You may lodge a complaint with your EU supervisory authority.

Children

Services are not directed at children under 16 without guardian involvement. We do not knowingly collect their information without appropriate consent.

Notifiable privacy breaches

We maintain procedures under the Privacy Act 2020 for assessing and notifying serious harm breaches to the Commissioner and affected individuals where required.

Changes

Material updates will be posted here with a new date. Continued use after changes constitutes acknowledgement for website use; for active clients we will notify where appropriate.