Privacy Policy

Last updated:

This Privacy Policy describes how Gracefuljoint ("we," "us," or "our"), operating through the website gracefuljoint.world, collects, uses, stores, and protects personal information in connection with our digital detox programs and related services. By accessing our website, enrolling in a program, or submitting a contact form, you acknowledge that you have read and understood this Privacy Policy.

1. Data Controller Information

The data controller responsible for your personal information is Gracefuljoint, located at 28 Liverpool Street, Hamilton Central, Hamilton 3204, New Zealand. For privacy-related inquiries, you may contact us at office@gracefuljoint.world or by phone at +64274896886.

2. Scope of This Policy

This Privacy Policy applies to all personal data processed by Gracefuljoint in relation to:

• Our digital detox programs, including Clarity Starter, Mindful Disconnect, and Complete Screen-Free Reset
• Website visits to gracefuljoint.world and interactions with our online portal
• Contact form submissions, enrollment requests, and customer support communications
• Coaching sessions included in premium program tiers
• Community discussion features available to program participants
• Marketing communications about our digital wellness products and services

3. Personal Data We Collect

3.1 Information You Provide Directly

When you interact with Gracefuljoint, we may collect the following categories of personal data:

• Identity information: full name, username, and account credentials for our program portal
• Contact information: email address, phone number, and postal address
• Communication data: messages submitted through our contact form, support tickets, and coaching session notes
• Program data: enrollment selections, progress tracking, screen-time logs, reflection responses, and habit tracker entries
• Payment information: billing name, transaction records, and payment confirmation details processed through our secure payment providers
• Consent records: timestamps and versions of privacy and marketing consents you have provided

3.2 Information Collected Automatically

When you visit gracefuljoint.world, we may automatically collect:

• Device and browser information: IP address, browser type, operating system, and device identifiers
• Usage data: pages visited, time spent on pages, navigation paths, and referral sources
• Cookie and tracking data as described in our Cookies Policy
• Log data: server timestamps, error reports, and security event records

3.3 Information from Third Parties

We may receive limited personal data from third-party service providers who assist us in delivering our digital detox programs, including payment processors, email delivery services, and analytics platforms. Such providers process data only on our instructions and in accordance with applicable data protection laws.

4. How We Use Your Personal Data

Gracefuljoint processes your personal data for the following purposes related to our digital detox products:

• Delivering and administering enrolled programs, including providing daily modules, progress tracking, and portal access
• Processing enrollments, payments, and refund requests for Clarity Starter, Mindful Disconnect, and Complete Screen-Free Reset
• Conducting one-on-one coaching sessions included in the Complete Screen-Free Reset program
• Responding to contact form submissions and customer support inquiries
• Sending program-related notifications, reminders, and educational content
• Facilitating community discussion features for eligible program participants
• Improving our programs, website functionality, and user experience through aggregated analytics
• Complying with legal obligations under New Zealand law, including tax and consumer protection requirements
• Protecting the security and integrity of our systems, website, and participant accounts
• Sending marketing communications about new programs or features, where you have provided consent

5. Legal Basis for Processing

We process your personal data on the following legal grounds:

• Contractual necessity: processing required to deliver the digital detox program you have enrolled in
• Consent: where you have explicitly agreed to data processing, such as through our contact form consent checkbox or marketing opt-in
• Legitimate interests: improving our services, ensuring website security, and communicating about program updates, balanced against your privacy rights
• Legal obligation: compliance with applicable New Zealand legislation and regulatory requirements

6. Data Sharing and Disclosure

Gracefuljoint does not sell your personal data. We may share your information with:

• Service providers who assist in program delivery, payment processing, email communications, hosting, and analytics
• Professional advisors including legal, accounting, and compliance consultants bound by confidentiality obligations
• Law enforcement or regulatory authorities when required by applicable law or to protect our legal rights
• Successors in the event of a merger, acquisition, or sale of assets, subject to equivalent privacy protections

All third-party processors are contractually required to handle your data securely and only for specified purposes related to our digital detox programs.

7. International Data Transfers

While Gracefuljoint is based in New Zealand, some of our service providers may process data in other countries. When personal data is transferred outside New Zealand, we ensure appropriate safeguards are in place, including contractual clauses and verification that the recipient country provides adequate data protection or equivalent measures.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes described in this policy:

• Program enrollment and progress data: retained for the duration of your enrollment plus three years for support and quality assurance purposes
• Contact form submissions: retained for two years unless a longer period is required for ongoing correspondence
• Payment and transaction records: retained for seven years in accordance with New Zealand tax and accounting requirements
• Marketing consent records: retained for the duration of consent plus two years
• Website analytics data: retained in aggregated form for up to twenty-six months
• Coaching session notes: retained for two years following program completion

After the applicable retention period, personal data is securely deleted or anonymised.

9. Your Rights

Under the New Zealand Privacy Act 2020 and applicable data protection frameworks, you have the following rights regarding your personal data:

• Right of access: request a copy of the personal data we hold about you
• Right to correction: request correction of inaccurate or incomplete personal data
• Right to deletion: request deletion of your personal data where no longer necessary or where consent is withdrawn
• Right to restrict processing: request limitation of how we use your data in certain circumstances
• Right to data portability: receive your program data in a structured, machine-readable format
• Right to withdraw consent: withdraw consent for marketing or optional data processing at any time
• Right to lodge a complaint: contact the Office of the Privacy Commissioner in New Zealand if you believe your rights have been violated

To exercise any of these rights, contact us at office@gracefuljoint.world. We will respond within twenty business days.

10. Data Security

Gracefuljoint implements appropriate technical and organisational measures to protect your personal data, including encryption of data in transit using TLS/SSL protocols, secure access controls for our program portal, regular security assessments, staff training on data handling practices, and incident response procedures for potential data breaches. While we strive to protect your information, no method of electronic transmission or storage is completely secure.

11. Children's Privacy

Our digital detox programs are designed for individuals aged sixteen and older. We do not knowingly collect personal data from children under sixteen without verifiable parental consent. If we become aware that we have collected data from a child without appropriate consent, we will take steps to delete that information promptly.

12. Program-Specific Data Processing

12.1 Clarity Starter

Participants in the Clarity Starter program provide basic account information and screen-time tracking data. This data is used solely to deliver the seven-day program modules and provide email support.

12.2 Mindful Disconnect

Mindful Disconnect participants additionally contribute reflection responses and community discussion posts. Community posts are visible to other enrolled participants within the program portal and are moderated by our team.

12.3 Complete Screen-Free Reset

Premium program participants may share additional personal context during coaching sessions. Coaching notes are stored securely and accessed only by assigned coaches and supervisory staff for quality assurance purposes.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our digital detox programs, legal requirements, or data processing practices. Material changes will be communicated via email to enrolled participants and posted on gracefuljoint.world with an updated effective date. Continued use of our services after changes constitutes acceptance of the revised policy.

14. Contact Us

For questions, concerns, or requests regarding this Privacy Policy or our data practices, contact Gracefuljoint:

Address: 28 Liverpool Street, Hamilton Central, Hamilton 3204, New Zealand

Phone: +64274896886

Email: office@gracefuljoint.world