Privacy Policy

Introduction

Welcome to Ecovivoflora operating as PoolShift. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at ecovivoflora.world, use our pool facilities, or engage with our services. By accessing or using our services, you acknowledge that you have read, understood, and agree to be bound by the terms of this Privacy Policy.

This policy applies to all information collected through our website, mobile applications, email correspondence, telephone communications, in-person interactions at our facilities, and any related services, sales, marketing, or events. We encourage you to read this policy carefully and contact us if you have any questions or concerns.

Information We Collect

Personal Information

We collect personal information that you voluntarily provide to us when you register for membership, book sessions, fill out forms on our website, subscribe to communications, or otherwise contact us. The personal information we may collect includes:

• Full name and preferred name
• Email address
• Telephone number and mobile number
• Residential address and postal address
• Date of birth
• Emergency contact information
• Payment information including credit card details and billing address
• Membership preferences and aquatic activity interests
• Health information relevant to pool usage and safety
• Photographs or videos taken at our facilities with your consent
• Communication preferences for marketing and service updates

Automatically Collected Information

When you visit our website, certain information about your device and browsing actions is automatically collected. This information may include:

• Internet Protocol (IP) address
• Browser type and version
• Operating system
• Device type and unique device identifiers
• Pages visited and time spent on pages
• Referral source and exit pages
• Date and time stamps of visits
• Clickstream data and navigation patterns
• Geographic location data based on IP address

Facility Usage Information

When you use our pool facilities, we collect information about your visits including check-in times, session types attended, frequency of visits, and participation in programs or classes. This information helps us improve our services and ensure optimal facility management.

How We Use Your Information

We use the information we collect for various purposes related to operating our pool facilities and providing quality service:

• Service Delivery: To process your membership registration, manage your account, schedule and confirm bookings, process payments, and provide access to our pool facilities and aquatic programs.
• Communication: To send you service-related communications including booking confirmations, membership renewals, schedule changes, facility closures, safety notifications, and responses to your inquiries.
• Marketing: With your consent, to send promotional materials about new programs, special offers, member events, and updates about our services. You can opt out of marketing communications at any time.
• Safety and Security: To maintain the safety and security of our facilities, prevent unauthorized access, monitor facility usage, respond to emergencies, and comply with health and safety regulations.
• Improvement: To analyze usage patterns, understand member preferences, improve our facilities and services, develop new programs, and enhance your overall experience at PoolShift.
• Legal Compliance: To comply with applicable laws, regulations, legal processes, or enforceable governmental requests, and to enforce our terms of service and other agreements.
• Business Operations: To manage our business operations, conduct internal record keeping, financial reporting, business analysis, and quality assurance.

Legal Basis for Processing

Under New Zealand privacy law and applicable regulations, we process your personal information based on the following legal grounds:

• Consent: You have given explicit consent for us to process your personal information for specific purposes, such as marketing communications.
• Contractual Necessity: Processing is necessary to fulfill our contract with you, such as providing membership services and facility access.
• Legal Obligation: Processing is necessary to comply with legal obligations, including health and safety requirements, tax obligations, and regulatory compliance.
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as improving our services, preventing fraud, and ensuring facility security, provided these interests do not override your fundamental rights.

Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following limited circumstances:

• Service Providers: We engage trusted third-party companies to perform functions on our behalf, such as payment processing, email delivery, data analysis, marketing assistance, and facility maintenance. These providers have access to personal information only as needed to perform their functions and are contractually obligated to maintain confidentiality.
• Legal Requirements: We may disclose your information when required by law, court order, or governmental regulation, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business Transfers: In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred to the acquiring entity, subject to the same privacy protections.
• Emergency Situations: We may share relevant information with emergency services, medical personnel, or your designated emergency contacts in situations requiring immediate action for health or safety reasons.
• With Your Consent: We may share your information with third parties when you have given us explicit consent to do so.

Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our security measures include:

• Encryption of sensitive data during transmission using SSL/TLS protocols
• Secure storage systems with restricted access controls
• Regular security assessments and vulnerability testing
• Employee training on data protection and confidentiality
• Physical security measures at our facilities
• Incident response procedures for potential data breaches

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but continuously work to maintain industry-standard protection measures.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specific retention periods include:

• Active membership information: Retained for the duration of your membership plus 7 years for financial and legal compliance
• Booking and transaction records: Retained for 7 years in accordance with tax and accounting regulations
• Marketing communications: Retained until you withdraw consent or we determine the information is no longer needed
• Website usage data: Typically retained for 2 years for analytical purposes
• Security footage: Retained for 30 days unless required for incident investigation

When personal information is no longer needed, we securely delete or anonymize it in accordance with our data retention and disposal procedures.

Your Privacy Rights

Under New Zealand privacy law, you have the following rights regarding your personal information:

• Right to Access: You can request access to the personal information we hold about you and receive a copy of your data.
• Right to Correction: You can request that we correct any inaccurate or incomplete personal information.
• Right to Deletion: You can request deletion of your personal information, subject to legal retention requirements.
• Right to Restrict Processing: You can request that we limit how we use your personal information in certain circumstances.
• Right to Object: You can object to our processing of your personal information for direct marketing purposes.
• Right to Data Portability: You can request to receive your personal information in a structured, commonly used format.
• Right to Withdraw Consent: Where processing is based on consent, you can withdraw that consent at any time.

To exercise any of these rights, please contact us using the contact information provided below. We will respond to your request within 20 working days as required by New Zealand law.

Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and understand user preferences. Cookies are small text files stored on your device that help us remember your preferences and improve website functionality.

We use the following types of cookies:

• Essential Cookies: Necessary for website operation and cannot be disabled
• Performance Cookies: Collect information about how you use our website to help us improve its performance
• Functionality Cookies: Remember your preferences and choices to provide enhanced features
• Analytics Cookies: Help us understand visitor behavior and measure website effectiveness

You can control cookie settings through your browser preferences. Please note that disabling cookies may affect website functionality. For more information, see our Cookie Policy.

Third-Party Links

Our website may contain links to third-party websites, including payment processors, social media platforms, and partner organizations. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit. This Privacy Policy applies only to information collected by PoolShift.

Children's Privacy

Our services are available to individuals of all ages. When collecting information from children under 16, we require parental or guardian consent. Parents or guardians can review, modify, or delete their child's personal information by contacting us. We take additional precautions to protect children's privacy and will only use their information for the purposes of providing pool services and ensuring their safety at our facilities.

International Data Transfers

Your personal information is primarily stored and processed in New Zealand. If we transfer data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with New Zealand privacy law and applicable international data protection regulations.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on our website with a revised "Last Updated" date. We encourage you to review this Privacy Policy periodically. Your continued use of our services after changes are posted constitutes your acceptance of the updated policy.

Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We will make every effort to resolve your concerns promptly and fairly. If you are not satisfied with our response, you have the right to lodge a complaint with the New Zealand Privacy Commissioner.

Privacy Commissioner Contact

Office of the Privacy Commissioner

PO Box 10094, Wellington 6143, New Zealand

Phone: 0800 803 909

Website: www.privacy.org.nz