Privacy Policy

Last updated: 13 June 2026

This Privacy Policy explains how Sievedrain ("we", "us", "our"), as an agency under the Privacy Act 2020 (New Zealand), collects, uses, stores, discloses, and protects your personal information when you visit sievedrain.world (the "Website").

We are based in New Zealand and primarily comply with New Zealand law. Where we offer services to individuals in the European Economic Area, we also respect applicable requirements under the General Data Protection Regulation (GDPR).

1. Agency Details

Under Information Privacy Principle (IPP) 3, we identify ourselves as the agency collecting your personal information:

Sievedrain
184 Papanui Road, Merivale, Christchurch 8014, New Zealand
Email: request@sievedrain.world
Phone: +64 21 348 139

Privacy contact: For all privacy enquiries, access requests, or complaints, contact us using the details above. We will respond within 20 working days, as required under IPP 6.

2. Personal Information We Collect

"Personal information" means information about an identifiable individual, as defined in the Privacy Act 2020. We may collect:

• Contact information: your name, email address, and message content when you submit our contact form.
• Technical information: IP address, browser type, device type, operating system, referring URL, and pages visited.
• Cookie and preference data: information stored via cookies, local storage, and similar technologies (see our Cookie Policy).
• Communication records: copies of correspondence when you contact us by email or phone.
• Event registration details: name and contact details if you register interest in workshops listed on our Website.

We collect information directly from you (IPP 3) when you submit forms or contact us. We may also receive limited technical data automatically through your browser or through third-party services embedded on our Website (IPP 3A — see Section 8).

3. Purpose of Collection (IPP 1 & 10)

We collect personal information only for lawful purposes connected with our functions, and we use it only for those purposes or directly related purposes. Our purposes include:

• Responding to enquiries submitted through our contact form or email.
• Operating, maintaining, and securing the Website.
• Understanding how visitors use the Website (analytics), where you have consented via our cookie banner.
• Communicating about events or workshops you have expressed interest in.
• Complying with legal obligations under New Zealand law.
• Defending or exercising our legal rights where necessary.

We do not use your personal information for direct marketing unless you have given clear consent, in accordance with the Unsolicited Electronic Messages Act 2007. You may unsubscribe from any marketing communications at any time.

4. Collection Notice (IPP 3 & 4)

When we collect personal information directly from you, we inform you at or before the time of collection about:

• the fact that information is being collected;
• the purpose of collection;
• the intended recipients or classes of recipients;
• your name and address (as the collecting agency);
• whether provision is voluntary or mandatory;
• your rights of access and correction under IPP 6 and IPP 7.

Contact form: Providing your name, email, and message is voluntary. If you choose not to provide this information, we cannot respond to your enquiry, but you may still browse the Website.

Analytics cookies: Non-essential cookies are optional. You may decline them via our cookie banner without affecting access to the Website's core content.

We collect information in a manner that is lawful, fair, and not unreasonably intrusive (IPP 4). We only collect information that is necessary for our stated purposes.

5. Disclosure of Personal Information (IPP 11)

We do not sell your personal information. We may disclose information to:

• Service providers who assist with website hosting, email delivery, or analytics, under contractual obligations to protect your data.
• Professional advisers (such as lawyers or accountants) where reasonably necessary.
• Law enforcement or regulatory authorities when required or authorised by New Zealand law, including by court order.
• Emergency services if we believe disclosure is necessary to prevent serious threat to life, health, or safety.

We will not disclose your personal information to third parties for their own marketing purposes without your consent.

6. Storage, Security & Retention (IPP 5 & 9)

We take reasonable safeguards to protect personal information against loss, unauthorised access, use, modification, or disclosure (IPP 5). Measures include:

• HTTPS encryption for data transmitted through the Website.
• Access controls limiting who can view stored information.
• Regular review of our security practices.
• Use of reputable hosting and service providers.

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected (IPP 9):

• Contact form submissions: up to 24 months from the date of enquiry, unless a longer period is required by law or for dispute resolution.
• Analytics data: up to 26 months, subject to your cookie preferences.
• Cookie consent records: up to 12 months.
• Communication records: up to 7 years where required for legal or accounting purposes.

When information is no longer needed, we securely delete or anonymise it.

7. Accuracy & Correction (IPP 7 & 8)

We take reasonable steps to ensure personal information is accurate, up to date, complete, relevant, and not misleading before we use or disclose it (IPP 8).

You have the right to request correction of your personal information if you believe it is inaccurate, incomplete, or out of date (IPP 7). To request correction, contact us at request@sievedrain.world. If we disagree with a correction request, we will attach a statement of your requested correction to the record where appropriate.

8. Overseas Disclosure (IPP 13)

Some of our service providers may store or process personal information outside New Zealand, including in Australia, the United States, or the European Union. Under IPP 13, before disclosing personal information overseas we take reasonable steps to ensure the recipient protects your information to a standard comparable to the Privacy Act 2020.

Overseas recipients may include:

• Website hosting providers.
• Google LLC (Google Analytics and Google Maps embedded on our contact page).
• Email service providers.

Under IPP 13, before disclosing personal information overseas, we assess whether the recipient country provides comparable privacy safeguards. Where safeguards are insufficient, we use contractual protections or obtain your consent where appropriate.

By using our Website and consenting to analytics cookies, you acknowledge that your information may be processed in countries that may not have equivalent privacy laws to New Zealand.

9. Indirect Collection (IPP 3A)

From 1 May 2026, IPP 3A requires agencies to take reasonable steps to notify individuals when personal information is collected from a source other than the individual concerned. This may apply where:

• analytics or advertising tools collect data through your browser without direct form submission;
• embedded third-party content (such as Google Maps) collects technical data automatically.

We address indirect collection through this Privacy Policy, our Cookie Policy, and our cookie consent banner displayed on your first visit.

10. Unique Identifiers (IPP 12)

We may assign unique identifiers (such as cookie IDs or analytics user IDs) for website functionality and analytics. We will not assign a unique identifier that is also used by another agency unless necessary, and we take reasonable steps to prevent misuse of identifiers we assign.

11. Notifiable Privacy Breaches

Under the Privacy Act 2020, if a privacy breach has caused or is likely to cause serious harm to affected individuals, we are required to notify:

• the Office of the Privacy Commissioner as soon as practicable; and
• each affected individual unless an exception applies under the Act.

We maintain internal procedures to identify, assess, and respond to privacy breaches. If you believe your personal information has been compromised, please contact us immediately at request@sievedrain.world.

12. Your Rights

Under the Privacy Act 2020, you have the right to:

• Access personal information we hold about you (IPP 6).
• Request correction of inaccurate or incomplete information (IPP 7).
• Withdraw consent for optional processing such as analytics cookies, without affecting the lawfulness of prior processing.
• Complain to the Office of the Privacy Commissioner if you believe we have interfered with your privacy.

Under GDPR (where applicable to EEA visitors), you may also have rights to erasure, restriction of processing, data portability, and objection to processing.

To exercise your rights, contact us at request@sievedrain.world. We will respond within 20 working days. We may request proof of identity before releasing information.

If you are not satisfied with our response, you may contact:

Office of the Privacy Commissioner
PO Box 10094, Wellington 6140, New Zealand
Phone: 0800 803 909
Website: privacy.org.nz

13. Information Privacy Principles

Our handling of personal information is guided by the Information Privacy Principles in Schedule 3 of the Privacy Act 2020:

1. IPP 1 — Purpose of collection of personal information.
2. IPP 2 — Source of personal information.
3. IPP 3 — What to tell the individual when collecting information directly.
4. IPP 3A — What to tell the individual when collecting information from another source (effective 1 May 2026).
5. IPP 4 — Manner of collection of personal information.
6. IPP 5 — Storage and security of personal information.
7. IPP 6 — Access to personal information.
8. IPP 7 — Correction of personal information.
9. IPP 8 — Accuracy of personal information to be checked before use.
10. IPP 9 — Retention — agency must not keep information longer than required.
11. IPP 10 — Limits on use of personal information.
12. IPP 11 — Limits on disclosure of personal information.
13. IPP 12 — Unique identifiers.
14. IPP 13 — Disclosure of personal information outside New Zealand.

14. Children's Privacy

This Website is intended for a general audience and is not directed at children under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us and we will take steps to delete it promptly.

15. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices, technology, or legal requirements. The updated version will be posted on this page with a revised "Last updated" date. Material changes will be communicated where appropriate.

16. Contact

For privacy-related questions, access requests, correction requests, or complaints:
Sievedrain
184 Papanui Road, Merivale, Christchurch 8014, New Zealand
Email: request@sievedrain.world
Phone: +64 21 348 139