Privacy Policy

Haven Thai Massage (“Haven Thai Massage”, “we”, “us” and “our”) respects your privacy and is committed to handling your personal information with care, transparency and respect.

This Privacy Policy explains how we collect, hold, use and disclose personal information when you visit our website, contact us, make or manage a booking, purchase or redeem a gift voucher, or receive a service from us.

We handle personal information in accordance with the Privacy Act 2020 (NZ) and the Health Information Privacy Code 2020.

1. Information We Collect

Depending on how you interact with us, we may collect:

• your name, telephone number and email address;
• appointment details and service or therapist preferences;
• booking, payment, transaction and gift voucher information;
• messages, enquiries, feedback and complaint details;
• information provided by a parent, legal guardian or authorised representative;
• health-related information that may affect the suitability, safety or comfort of your massage, including injuries, ongoing pain, recent surgery or procedures, allergies, skin sensitivities, medications, pregnancy or other relevant health concerns;
• information relating to your consent, preferred pressure, areas you would like addressed or avoided and other service preferences; and
• technical information collected when you use our website, such as your IP address, browser, device and website usage information.

We do not generally receive or store your complete payment card details. Payments may be securely processed by an authorised third-party payment provider.

You may browse our website without identifying yourself. However, certain contact and booking information will be required if you wish to make an appointment, purchase a gift voucher or request a service.

2. How We Collect Information

We generally collect information directly from you when you:

• make or manage an appointment through our online booking system;
• contact us by telephone, email, message or in person;
• complete a consultation or consent form;
• purchase or redeem a gift voucher;
• provide feedback or make an enquiry or complaint; or
• visit or interact with our website.

Where appropriate, information may also be provided by your parent, legal guardian or authorised representative.

We may receive limited information from authorised third-party providers that help us manage bookings, payments, gift vouchers, communications or website services.

When collecting information, we may provide a shorter privacy collection notice through our booking form, consultation form, consent form or another relevant collection point. Any collection notice should be read together with this Privacy Policy.

3. How We Use Your Information

We may collect, hold and use your information to:

• arrange, confirm and manage appointments;
• send booking confirmations, reminders and service-related messages;
• understand your preferences and personalise your experience;
• consider whether a service is appropriate within the scope of our massage and wellness services;
• modify, postpone or decline a service where reasonably necessary;
• allocate an appropriate therapist and manage our business operations;
• process payments and administer gift vouchers;
• respond to enquiries, feedback or complaints;
• maintain appropriate consultation, business and transaction records;
• operate, protect and improve our website and services; and
• comply with legal, regulatory, insurance, taxation and safety requirements.

We will only use personal information for marketing where you have consented or where otherwise permitted by law.

We will not use health or other sensitive information for marketing without your express consent.

You may unsubscribe from marketing communications at any time by following the instructions in the message or by contacting us.

Unsubscribing from marketing communications will not prevent us from sending necessary booking confirmations, appointment reminders or other service-related communications.

4. Health and Sensitive Information

Information about your health may be considered sensitive information.

We collect health and other sensitive information with your consent where required by law and only where it is reasonably necessary for us to consider the suitability, safety and comfort of a service.

Providing health-related information is voluntary. However, if you choose not to provide information that may be relevant to your service, we may need to modify, postpone or decline the service.

Health-related information helps us understand your comfort needs and consider whether a massage or wellness enhancement should be modified, postponed or declined.

This information is not collected or used to diagnose, treat or manage a medical condition.

Access to health-related information is limited to our therapists, including authorised independent contractors, authorised team members and service providers who reasonably require the information to provide or support your service.

You are responsible for providing information that is complete and accurate and for informing us of any relevant changes before each appointment.

5. Sharing Your Information

Where reasonably necessary, we may share personal information with:

• our therapists, including authorised independent contractors, and authorised team members who reasonably require the information to provide or support your service;
• online booking and gift voucher platforms;
• payment processing providers;
• website hosting, email, messaging, IT, analytics and security providers;
• accountants, insurers, legal advisers and other professional advisers; and
• government agencies, emergency services, regulatory bodies or other authorities where required or permitted by law.

We only provide the information reasonably necessary for these parties to perform their services or meet applicable legal requirements.

Our therapists, contractors and authorised team members are expected to maintain the confidentiality of personal information and use it only for authorised business purposes.

We do not sell or rent personal information.

6. Interstate and Overseas Processing

Some third-party providers may store or process personal information outside New Zealand. This may include providers of online booking, payment processing, website hosting, email, messaging, analytics, data storage or security services.

The countries or storage locations involved may vary depending on the providers and systems we use.

Where practicable, further information about likely processing or storage locations may be obtained by contacting us or reviewing the privacy policy of the relevant service provider.

Where personal or health information is disclosed or transferred outside New Zealand, we take reasonable steps required by applicable privacy laws.

Third-party providers may also be subject to the privacy and data-protection laws of the countries or jurisdictions in which they operate.

7. Website, Cookies and External Services

Our website may use cookies and similar technologies to:

• support essential website functions;
• remember certain preferences;
• understand how visitors use our website;
• maintain website security; and
• improve the online experience.

You may adjust your browser settings to restrict or block cookies. However, some website functions may not operate correctly if cookies are disabled.

Our website may contain links, embedded features or services provided by third parties, such as an online booking platform, payment service, gift voucher provider, analytics service or map service.

These third-party services operate under their own terms, privacy policies and data-handling practices. We encourage you to review the relevant policies before providing personal information directly to those services.

8. Storage and Security

We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure.

Information may be stored:

• electronically;
• in physical consultation or business records; or
• through authorised booking, payment, website or data-storage providers.

Access is limited to therapists, contractors, team members and service providers who reasonably require the information to perform their duties.

No electronic transmission or storage system can be guaranteed to be completely secure.

If we become aware of a data breach, we will assess and respond to it in accordance with applicable legal requirements, including the Notifiable Data Breaches scheme where applicable.

9. Retention of Information

We retain personal information only for as long as reasonably necessary to:

• provide and manage our services;
• maintain appropriate consultation, business and transaction records;
• respond to enquiries or complaints; and
• meet applicable legal, insurance, taxation and regulatory requirements.

Health and consultation records will generally be retained for at least seven years after the date on which we last provided a health service to the individual.

Where the individual was under 18 years of age at the time of their last service, records will generally be retained until the individual reaches 25 years of age, or for any longer period required by law, insurance or other applicable requirements.

When personal information is no longer required, we will take reasonable steps to securely delete or de-identify it where appropriate and legally permitted.

10. Access and Correction

You may contact us to:

• request access to personal information we hold about you; or
• ask us to correct information that is inaccurate, incomplete or out of date.

We may ask you to verify your identity before processing your request.

In some circumstances, access may be limited or refused where permitted by law. If this occurs, we will explain the reason where reasonably possible and advise you of any available complaint options.

Please contact us if your name, telephone number, email address, health information or other relevant details change.

Access or correction requests may be sent to info@haventhaimassage.co.nz.

11. Children and Guests Under 18

Where a guest is under 18 years of age, personal or health-related information may be provided by the guest’s parent or legal guardian.

We may require the parent or legal guardian to provide consent, complete a consultation form or verify their authority before the guest receives a service.

We will handle information relating to guests under 18 with particular care and use or disclose it only for appropriate booking, service, safety, administrative or legal purposes.

12. Photography, Recordings and Testimonials

We will not use an identifiable photograph, video, audio recording, testimonial or other personal content relating to a guest for marketing purposes without obtaining appropriate permission.

Where permission is provided, we will use the content only for the purposes explained when consent is obtained.

You may contact us if you wish to withdraw permission for future use.

Withdrawal will not affect any use that occurred before permission was withdrawn. It may not always be possible to remove material that has already been lawfully published, printed or shared.

13. Privacy Enquiries and Complaints

If you have a question or complaint about how we handle your personal information, please contact us using the details below.

Please provide enough information for us to understand and investigate your concern.

We will acknowledge your complaint and aim to respond within a reasonable period, generally within 30 days.

You should generally allow us an opportunity to investigate and respond to your complaint first. If you are not satisfied with our response, you may be entitled to contact the Office of the New Zealand Privacy Commissioner:

Website: www.privacy.org.nz Telephone: 0800 803 909

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, systems, third-party providers, business practices or legal obligations.

The current version will be published on our website with the date of the latest update.

15. Contact Us

If you have a privacy question, access or correction request, or complaint, please contact:

Haven Thai Massage 40 Victoria Road Devonport, Auckland 0624 New Zealand

Phone: 027 563 5583 Email: info@haventhaimassage.co.nz

Last updated: 25 September 2026