Privacy Policy

1. Introduction

Metabolic Alignment is operated by Stacey Oldham ("we", "us", "our"). We are committed to protecting your personal information in accordance with the New Zealand Privacy Act 2020 and the Privacy Principles contained within it.

This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and what rights you have in relation to that information. It applies to all visitors and clients of metabolicalignment.nz and metabolicalignment.com, and to anyone who engages our coaching services, online programmes, or purchases our digital products.

By using our website or services, you acknowledge that you have read and understood this policy.

2. Who We Are

Business name: Metabolic Alignment
Operator: Stacey Oldham, PreKure Certified Master Holistic Health Coach
Contact email:stacey@metabolicalignment.nz
Websites: metabolicalignment.nz and metabolicalignment.com

We are based in New Zealand and our services are primarily offered to clients in New Zealand and Australia, although we may also work with international clients.

3. What Information We Collect

3.1 Information You Provide Directly

We may collect the following personal information when you interact with us:

• Full name and contact details (email address, phone number)

• Health and wellbeing information you share during coaching sessions or intake forms

• Payment information (processed securely via Stripe — we do not store card details)

• Communications you send us by email or through our website contact forms

• Information provided when you enrol in our online programmes or purchase digital products

• Information provided when you subscribe to our email list via MailerLite

3.2 Information Collected Automatically

When you visit our website, we may automatically collect

• Your IP address and browser type

• Pages visited and time spent on each page

• Referring website or search terms used to find us

• Device type and operating system

This information is collected through Squarespace (our website platform) and its built-in analytics. Squarespace may use cookies and similar tracking technologies. Please refer to Squarespace's own privacy policy for further details.

3.3 Information About Minors

Our services are primarily designed for adults. Where we work with a client under the age of 18, we require written consent from a parent or legal guardian before collecting or processing any personal information. Parental or guardian details may also be collected in this context. If you believe we have inadvertently collected information about a minor without appropriate consent, please contact us immediately at stacey@metabolicalignment.nz.

4. How We Use Your Information

We use your personal information to:

• Deliver coaching services, online programmes, and digital products you have purchased

• Communicate with you about your coaching programme, appointments, or enquiries

• Process payments securely via Stripe

• Send you newsletters, health tips, and marketing emails where you have subscribed (you may unsubscribe at any time)

• Maintain client records securely via Carepatron

• Comply with our legal and professional obligations, including those under the NZ Privacy Act 2020 and our professional association code of conduct (HCANZA Health Coaches Association of Australia and New Zealand)

• Improve and personalise our website and services

We will only use your information for the purposes for which it was collected, or for a directly related purpose you would reasonably expect.

5. Legal Basis — NZ Privacy Act 2020

We collect and process your personal information in accordance with the 13 Information Privacy Principles (IPPs) set out in the New Zealand Privacy Act 2020. Key principles we adhere to include:

• IPP 1: We only collect information that is necessary for a lawful purpose connected to our services.

• IPP 2: We collect information directly from you wherever practicable, and we tell you why we need it.

• IPP 3: We collect information in a lawful and fair manner.

• IPP 4: We take reasonable steps to ensure that information collected is accurate and up to date.

• IPP 5: We do not keep personal information longer than necessary.

• IPP 6: You have the right to request access to your personal information.

• IPP 7: You have the right to request correction of your personal information.

• IPP 10: We only use personal information for the purpose for which it was collected.

• IPP 11: We do not disclose your personal information to third parties except as described in this policy.

• IPP 12: We do not transfer personal information outside New Zealand unless the recipient country has comparable privacy protections, or you have consented.

6. Third-Party Services We Use

We use trusted third-party platforms to operate our business. Each provider has its own privacy policy governing how it handles data. The platforms we use include:

6.1 Carepatron

We use Carepatron to store and manage client health records, intake forms, session notes, and appointment information. Carepatron is a health-management platform that applies appropriate security and confidentiality standards. Your health information stored in Carepatron is treated as sensitive information and handled with the highest level of care.

6.2 MailerLite

We use MailerLite to manage our email subscriber list and send newsletters and promotional emails. If you subscribe to our email list, your name and email address will be stored by MailerLite. You may unsubscribe at any time using the link provided in every email, or by contacting us directly.

6.3 Stripe

Payments for our services and digital products are processed securely via Stripe. We do not store your payment card details on our own systems. Stripe is PCI-DSS compliant. Please refer to Stripe's privacy policy at stripe.com/nz/privacy for details on how your payment information is handled.

6.4 Squarespace

Our website is hosted and built on Squarespace. Squarespace collects certain analytical and technical data from website visitors, including through cookies. Please refer to Squarespace's privacy policy at squarespace.com/privacy for further information.

7. Cookies

Our website may use cookies — small text files stored on your device — to improve your browsing experience and gather usage analytics. Cookies used on our site may include:

• Session cookies that expire when you close your browser

• Persistent cookies that remain on your device for a set period

• Analytics cookies used by Squarespace to understand how visitors use our site

Most browsers allow you to control cookies through their settings. Disabling cookies may affect the functionality of our website. By continuing to use our website, you consent to our use of cookies as described here.

8. Sharing Your Information

We do not sell, rent, or trade your personal information. We may share your information only in the following circumstances:

• With the third-party service providers listed above (Carepatron, MailerLite, Stripe, Squarespace) to the extent necessary to operate our services

• If required by law, court order, or regulatory authority

• To protect the rights, property, or safety of Metabolic Alignment, our clients, or the public

• In the event of a business transfer — if Metabolic Alignment is sold or restructured, your information may transfer to the new owner, who will be bound by equivalent privacy obligations

We require all third parties to handle your information securely and in accordance with applicable privacy laws.

9. Data Storage and Security

Your personal information is stored securely using password-protected and encrypted systems, including Carepatron, MailerLite, Stripe, and Squarespace. We take reasonable steps to protect your information from unauthorised access, loss, misuse, disclosure, or modification.

While we take all reasonable precautions, no data transmission over the internet or electronic storage system can be guaranteed as 100% secure. If you have concerns about the security of your information, please contact us at stacey@metabolicalignment.nz.

10. Data Retention

We retain your personal information for as long as necessary to fulfil the purposes set out in this policy, or as required by law. In general:

• Client health records and session notes are retained for a minimum of seven (7) years after the conclusion of our coaching relationship, or as required by our professional obligations.

• Email marketing data is retained until you unsubscribe or request deletion.

• Payment and transaction records are retained as required by NZ tax and financial record-keeping laws (generally seven years).

• Website analytics data is retained in accordance with Squarespace's data retention policies.

Once information is no longer needed, we will take reasonable steps to destroy or de-identify it.

11. Your Rights

Under the New Zealand Privacy Act 2020, you have the right to:

• Request access to the personal information we hold about you

• Request correction of any personal information that is inaccurate or incomplete

• Request deletion of your personal information (subject to our legal retention obligations)

• Withdraw consent to the use of your information for marketing purposes at any time

• Lodge a complaint with the Office of the Privacy Commissioner (privacy.org.nz) if you believe your privacy rights have been breached

To exercise any of these rights, please contact us at stacey@metabolicalignment.nz. We will respond to your request within 20 working days as required by law.

12. International Clients

If you are located outside New Zealand, please be aware that your information may be processed and stored in New Zealand or in the countries where our third-party service providers operate (including the United States, where Stripe, MailerLite, and Squarespace are based). By using our services, you consent to this transfer of information. We ensure that any such transfers are subject to appropriate safeguards consistent with the NZ Privacy Act 2020.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. The updated policy will be published on our website with a revised "last updated" date. We encourage you to review this policy periodically. Continued use of our website or services after any changes constitutes your acceptance of the updated policy.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or how we handle your personal information, please contact:

Stacey Oldham
Metabolic Alignment
stacey@metabolicalignment.nz

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner:

www.privacy.org.nz

Phone: 0800 803 909 (New Zealand)