Privacy Policy

Last updated:

1. Agency and Data Controller

Radianttrcleanse, located at 2 Plymouth Street, Whanganui 4500, New Zealand, is the agency responsible for collecting, holding, using, and disclosing your personal information under the Privacy Act 2020 (New Zealand). For visitors in the European Union or European Economic Area, we act as the data controller under the General Data Protection Regulation (GDPR).

Contact: contact@radianttrcleanse.world | Phone: +64 6 348 2301

2. Scope and Legal Basis

This policy applies to all personal information we collect when you visit our website, submit a contact form, register interest in a group ride, or communicate with us by phone or email.

We handle personal information in accordance with the Privacy Act 2020 and its Information Privacy Principles (IPPs). Where GDPR also applies, we rely on lawful bases including consent (contact form, non-essential cookies), legitimate interests (website security and improvement), and steps taken at your request before entering a service arrangement (responding to ride inquiries).

We collect personal information only where it is necessary for our stated purposes and we take reasonable steps to ensure information is accurate, up to date, complete, relevant, and not misleading.

3. Personal Information We Collect

3.1 Information You Provide

  • Name and email address submitted via the contact form
  • Message content and any ride preferences or details you choose to share
  • Privacy consent confirmation and timestamp
  • Phone number or other contact details if you provide them voluntarily

3.2 Automatically Collected Information

  • IP address, browser type, operating system, and device information
  • Pages visited, session duration, and referral source
  • Cookie and localStorage preferences related to your consent choices

Some automatically collected data may constitute personal information under the Privacy Act 2020 when it can reasonably identify you, either alone or together with other information.

4. How We Use Personal Information

We use your personal information to:

  • Respond to inquiries about group cycling rides and community events
  • Confirm registrations and provide ride status or weather updates upon request
  • Maintain and improve website functionality and user experience
  • Analyse aggregated traffic patterns where you have consented to analytics cookies
  • Meet legal obligations, prevent misuse, and protect the security of our systems

We do not use your personal information for a purpose other than the purpose for which it was collected unless an exception under the Privacy Act 2020 applies, such as where you authorise further use or the further use is directly related to the original purpose.

5. Disclosure to Third Parties

We do not sell your personal information. We may disclose information to trusted service providers who assist us with website hosting, email delivery, or analytics. These providers may process data in New Zealand or overseas. Before disclosing personal information overseas, we take reasonable steps to ensure the recipient protects it in a way that, overall, provides comparable safeguards to the Privacy Act 2020.

We may also disclose information where required or authorised by New Zealand law, including in response to a lawful request from a government agency or court.

6. Data Retention

Contact form submissions and related correspondence are retained for up to 24 months from the date of last communication, unless a longer period is required by law or reasonably needed to resolve a dispute. Analytics data is retained for up to 26 months where analytics cookies are enabled. Cookie consent records are stored locally on your device until you clear browser data.

When personal information is no longer needed for any purpose for which it may lawfully be used, we take reasonable steps to destroy or de-identify it.

7. Your Rights Under the Privacy Act 2020 (New Zealand)

Under the Privacy Act 2020, you have the right to:

  • Access — request access to personal information we hold about you (IPP 6)
  • Correction — request correction of inaccurate, out-of-date, incomplete, irrelevant, or misleading information (IPP 7)
  • Withdraw consent — where processing is based on consent, withdraw that consent for future processing
  • Complain — lodge a complaint with us or with the Office of the Privacy Commissioner if you believe we have interfered with your privacy

To exercise these rights, contact us at contact@radianttrcleanse.world. We will respond within 20 working days as required by the Privacy Act 2020, or inform you if an extension applies.

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner at privacy.org.nz or call 0800 803 909.

8. Your Rights Under GDPR (EU/EEA Visitors)

If you are located in the EU/EEA, you also have the right to:

  • Access your personal data and receive a copy
  • Rectify inaccurate or incomplete data
  • Request erasure of your data in certain circumstances
  • Restrict or object to processing in certain circumstances
  • Data portability for data provided with consent
  • Withdraw consent at any time without affecting prior lawful processing
  • Lodge a complaint with your local supervisory authority

Where data is transferred outside the European Economic Area, we ensure appropriate safeguards such as Standard Contractual Clauses where required.

9. Notifiable Privacy Breaches

If we become aware of a privacy breach that has caused or is likely to cause serious harm, we will notify the Office of the Privacy Commissioner and affected individuals as soon as practicable, in accordance with the Privacy Act 2020.

10. Security Measures

We implement reasonable security safeguards under IPP 5, including HTTPS encryption, access controls, and procedures designed to protect personal information against loss, unauthorised access, use, modification, disclosure, or other misuse.

11. Children's Privacy

Our website is not directed at individuals under 16. We do not knowingly collect personal information from children without appropriate parental or guardian consent. If you believe a child has provided us information without consent, please contact us for prompt removal.

12. Marketing Communications

We do not send unsolicited electronic marketing messages in breach of the Unsolicited Electronic Messages Act 2007. If you receive ride updates or newsletters from us, you may opt out at any time by replying to the message or contacting us directly.

13. Changes to This Policy

We may update this policy to reflect changes in law or our practices. The "Last updated" date at the top will be revised accordingly. Material changes will be communicated on this page. Continued use of the website after changes constitutes acceptance of the updated policy.