1. Introduction
Kneelbowax ("we," "us," or "our") operates the website kneelbowax.world and provides walking lifestyle programs, educational guidance, consulting services, and personalized non-medical plans. We are committed to protecting your privacy and handling your personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR), the Australian Privacy Act 1988, and other relevant international privacy legislation.
This Privacy Policy explains what personal data we collect, why we collect it, how we use and store it, who we share it with, and what rights you have regarding your data. By using our website or services, you acknowledge that you have read and understood this Privacy Policy.
2. Data Controller Information
The data controller responsible for your personal data is:
- Company Name: Kneelbowax
- Address: George St, The Rocks NSW 2000, Australia
- Email: hello@kneelbowax.world
- Phone: +61 412 271 725
- Website: kneelbowax.world
For any privacy-related inquiries, data subject requests, or concerns about how your personal data is processed, please contact us using the details above.
3. Personal Data We Collect
3.1 Information You Provide Directly
When you interact with our website or services, you may voluntarily provide the following categories of personal data:
- Contact Information: Your name, email address, phone number, and postal address when you submit our contact form or request program information.
- Communication Data: The content of messages you send us, including inquiries about walking programs, lifestyle consulting, or educational products.
- Consent Records: Records of consent you provide for data processing, marketing communications, and cookie usage.
- Program Preferences: Information about your walking interests, activity preferences, and scheduling requirements when you request personalized plans.
3.2 Information Collected Automatically
When you visit our website, we may automatically collect certain technical information, including:
- IP address and approximate geographic location
- Browser type, version, and operating system
- Device type and screen resolution
- Pages visited, time spent on pages, and navigation paths
- Referring website or search engine
- Date and time of access
This data is collected through cookies and similar technologies as described in our Cookie Policy. We only collect analytics and marketing data with your explicit consent.
4. Purpose and Legal Basis for Processing
We process your personal data for the following purposes and on the following legal bases under GDPR Article 6:
- Responding to Inquiries (Contract/Consent): To respond to your contact form submissions and provide information about our walking programs and services.
- Service Delivery (Contract): To enroll you in programs, deliver personalized walking plans, and provide consulting services you have requested.
- Website Functionality (Legitimate Interest): To ensure our website operates correctly, securely, and efficiently.
- Analytics (Consent): To understand how visitors use our website and improve user experience, only when you have consented to analytics cookies.
- Marketing (Consent): To send relevant information about our programs and educational products, only when you have provided explicit consent.
- Legal Compliance (Legal Obligation): To comply with applicable laws, regulations, and legal processes.
5. Data Retention Periods
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected:
- Contact Form Submissions: Retained for 24 months from the date of submission, unless a business relationship is established.
- Program Enrollment Records: Retained for the duration of your program participation plus 36 months thereafter for reference and support purposes.
- Consulting Session Notes: Retained for 36 months from the date of the last session.
- Marketing Consent Records: Retained for the duration of consent plus 12 months after withdrawal.
- Analytics Data: Aggregated analytics data is retained for 26 months. Individual identifiers are anonymized after 14 months.
- Cookie Consent Records: Retained for 12 months from the date of consent.
- Legal and Financial Records: Retained for 7 years as required by Australian tax and commercial law.
After the applicable retention period expires, personal data is securely deleted or anonymized so that it can no longer be associated with you.
6. Data Sharing and Third Parties
We do not sell your personal data to third parties. We may share your data with the following categories of recipients when necessary:
- Service Providers: Trusted third-party providers who assist with website hosting, email delivery, analytics (with consent), and payment processing. All service providers are bound by data processing agreements requiring them to protect your data.
- Legal Authorities: When required by law, court order, or governmental regulation.
- Professional Advisors: Lawyers, accountants, or auditors when necessary for legitimate business purposes.
Where data is transferred outside the European Economic Area (EEA) or Australia, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission or equivalent mechanisms.
7. Security Measures
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:
- HTTPS encryption for all data transmitted between your browser and our servers
- Secure storage with access controls limited to authorized personnel
- Regular security assessments and vulnerability monitoring
- Employee training on data protection and privacy practices
- Incident response procedures for potential data breaches
- Password policies and multi-factor authentication for internal systems
While we strive to protect your personal data, no method of transmission over the internet or electronic storage is completely secure. We encourage you to use strong passwords and protect your account credentials.
8. Your Rights Under GDPR and Applicable Laws
Depending on your location, you may have the following rights regarding your personal data:
- Right of Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete personal data.
- Right to Erasure: Request deletion of your personal data when it is no longer necessary or when you withdraw consent.
- Right to Restrict Processing: Request limitation of processing in certain circumstances.
- Right to Data Portability: Receive your personal data in a structured, commonly used, machine-readable format.
- Right to Object: Object to processing based on legitimate interests or for direct marketing purposes.
- Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent, without affecting the lawfulness of prior processing.
- Right to Lodge a Complaint: File a complaint with a supervisory authority, such as the Office of the Australian Information Commissioner (OAIC) or your local data protection authority.
To exercise any of these rights, contact us at hello@kneelbowax.world. We will respond to your request within 30 days. We may need to verify your identity before processing your request.
9. Children's Privacy
Our website and services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately and we will take steps to delete such information.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.
11. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us:
- Email: hello@kneelbowax.world
- Phone: +61 412 271 725
- Address: George St, The Rocks NSW 2000, Australia