Privacy Policy

This Privacy Policy explains how BoxHiit30 collects, uses, stores and shares your personal information. We are committed to protecting your privacy in accordance with the New Zealand Privacy Act 2020.

This policy applies to all interactions with us, including your use of our website, booking systems and social media, and when you visit our studios or contact us directly.

What we collect

We may collect the following personal information:

• Name, email address and phone number
• Date of birth
• Payment details processed through secure third-party platforms
• Fitness and health information, if voluntarily provided
• Emergency contact details
• Feedback, photos and video footage from events or training

We may also collect technical information from your device, including your IP address and browser; social-media engagement data; and information from cookies when you use our website.

Why we collect it

We collect your information to:

• Provide safe, personalised fitness services
• Book and manage your sessions
• Communicate with you, including reminders and promotions
• Understand your goals and track your progress
• Process payments securely
• Improve our services and customer experience
• Comply with legal and health obligations

How we collect it

We collect your information when you sign up for a trial, membership or promotion; book or check in; use our website or social-media pages; provide information in person, through a form or over the phone; enter a competition; or give us feedback.

We may also receive relevant information from service providers such as Ezypay, GymMaster, Myzone, Evolt and social-media platforms including Meta, Facebook and Instagram.

Cookies and tracking

Our website uses cookies to improve your browsing experience, measure website usage and support advertising. You can manage cookies through your browser settings. Third-party services, including analytics and advertising tools, may also use cookies or similar technology.

Third-party services and overseas storage

Some service providers we use may process or store information outside New Zealand, including in Australia, the United States, the United Kingdom, Canada or Ireland. These providers may include Myzone, GymMaster, Google, Meta, GoHighLevel, Evolt and Ezypay.

We take reasonable steps to work with providers that maintain appropriate privacy and security standards. Where overseas disclosure occurs, we handle it in accordance with the Privacy Act 2020.

Your rights under New Zealand law

Under the Privacy Act 2020, you may:

• Ask for a copy of personal information we hold about you
• Ask us to correct your personal information
• Withdraw consent to marketing communications or optional data collection
• Make a complaint if you believe your privacy has been breached

To make a request or complaint, email [email protected]. You may also contact the Office of the Privacy Commissioner.

How we protect your information

We use secure systems and limit access to personal information. Payment providers encrypt payment information, and BoxHiit30 does not store full credit-card details. No system is completely secure, so we also encourage you to use strong passwords and keep your contact details up to date.

Photos, videos and testimonials

We may celebrate member achievements by sharing photos, videos or testimonials where permission has been provided or where your membership agreement permits this use. You may opt out or request removal at any time by emailing us.

Retention and deletion

We retain personal information only for as long as reasonably required to provide our services, meet legal or accounting obligations, resolve disputes and enforce agreements. When it is no longer needed, we take reasonable steps to securely delete or anonymise it.

Changes to this policy

We may update this Privacy Policy from time to time. The latest version will be available on this website and will show the date it was last updated.

Contact us