GravoMax Fitness Privacy Policy | New Zealand Privacy Act 2020

Privacy Policy

🔒

Effective Date: October 2025

GravoMax Fitness ("we", "us") is committed to protecting your privacy. We collect and handle your personal information in accordance with the New Zealand Privacy Act 2020. This document explains how your data is used, stored, and protected.

1. Information We Collect

We collect information necessary to process your orders and improve your shopping experience. This includes:

  • Identifiable Information: Name, billing address, shipping address, email, and phone number.
  • Transactional Data: Order history, products purchased, and customer support inquiries.
  • Technical Data: IP address, browser type, and device information (collected automatically via cookies).
Note regarding Payments: We do not store your full credit card details. All payment transactions are processed via secure, PCI-DSS compliant third-party gateways (for example, Stripe or Windcave).

2. How We Use Your Data

Your personal information is used strictly for the following purposes:

  • To process and deliver your orders (including sharing address details with couriers).
  • To communicate with you regarding order updates, warranty claims, or returns.
  • To prevent fraud and ensure the security of our platform.
  • To improve our website functionality and marketing (where permitted by law and, where required, with your consent).
  • To comply with legal or tax obligations in New Zealand.

3. Data Sharing & Third Parties

We respect your privacy and do not sell your personal data to data brokers. We only share information with trusted service providers required to operate our business:

  • Logistics: Courier and freight partners (for example, Mainfreight, Post Haste) to deliver goods.
  • Payments: Secure payment processors to handle transactions.
  • Marketing: Email automation platforms (only if you have opted in).

4. International Data Transfers

As an e-commerce business using modern cloud technologies, some of your personal information may be stored or processed by service providers located outside of New Zealand (for example, cloud hosting providers or analytics tools).

We take reasonable steps to ensure that these offshore providers offer a level of data protection comparable to the safeguards required under the New Zealand Privacy Act 2020.

5. Cookies, Analytics & Advertising

Our website uses cookies to function correctly and to help us understand how customers use our site.

Third-Party Tracking Tools

We may use services such as Google Analytics and Facebook Pixel. These tools may collect anonymous or pseudonymous data to help us:

  • Analyze website traffic and performance.
  • Deliver relevant advertisements to you (retargeting / remarketing).

You can opt out of certain types of targeted advertising by adjusting your browser settings or visiting the Google Ad Settings page and the advertising preferences of other platforms you use.

6. Storage & Security

We are committed to keeping your information secure. We use industry-standard SSL encryption (HTTPS) to protect data transmission. Your data is retained only for as long as necessary to fulfil the purposes outlined in this policy or to satisfy tax and legal requirements.

7. Your Privacy Rights

Under the Privacy Act 2020, you have the right to:

  • Access: Request a copy of the personal information we hold about you.
  • Correction: Request that we update or correct incorrect information.
  • Deletion: Request that we delete your data (subject to legal retention requirements).

To exercise these rights, please contact our Privacy Officer below.

8. Contact Us & Privacy Officer

If you have any questions about this policy, or wish to make a request regarding your data, please contact our designated Privacy Officer:

Email: support@gravomaxfitness.co.nz

Phone: 09 440 9900

Physical Address:
Privacy Officer, GravoMax Fitness
12A Ashfield Road, Wairau Valley, Auckland 0627

If you are not satisfied with our response, you have the right to make a complaint to the Office of the Privacy Commissioner (New Zealand).