Privacy Policy

Effective Date: 10/4/2025

This Privacy Policy (hereinafter referred to as the "Policy") is promulgated by AthleTech, a digital-first organization duly incorporated and operating in accordance with the legislative frameworks of New Zealand. The express intent of this document is to set forth, with exhaustive specificity, the myriad mechanisms, purposes, and protocols by which we, AthleTech ("AthleTech," "we," "us," "our"), acquire, process, store, disseminate, and ultimately dispose of information, including but not limited to, Personal Data and other Identifiable and/or Non-Identifiable Data, as defined under applicable legislative regimes.

This Policy, through its execution, aims to comply with and, where practicable, exceed the requirements articulated under the New Zealand Privacy Act 2020, and, to the extent applicable and not inconsistent therewith, the General Data Protection Regulation (Regulation (EU) 2016/679), the Australian Privacy Principles, and other intersecting international data protection instruments and transnational regulatory frameworks.

1. DEFINITIONS

For the purposes of this Policy, and to ensure clarity in interpretation and application, the following definitions shall apply:

• "Data Subject" shall mean any identified or identifiable natural person whose Personal Data is collected, retained, or otherwise processed by AthleTech.

• "Personal Data" shall refer to any information relating to an identified or identifiable natural person, including, but not limited to, names, contact information, behavioral data, transactional history, location metadata, and online identifiers.

• "Processing" shall mean any operation or set of operations which is performed on Personal Data or on sets of Personal Data, whether or not by automated means.

• "Controller" shall denote AthleTech, which determines the purposes and means of the Processing of Personal Data.

• "Processor" shall mean any third-party natural or legal entity that processes Personal Data on behalf of the Controller.

• "Consent" means any freely given, specific, informed and unambiguous indication of the Data Subject’s wishes.

2. SCOPE OF APPLICABILITY

This Policy applies universally to all Users, whether registered or anonymous, who interact with any of AthleTech’s proprietary platforms, software interfaces, mobile applications, digital assets, communication channels, and affiliated third-party services, regardless of geographical origin or domicile.

3. LEGAL BASES FOR PROCESSING

AthleTech shall only process Personal Data under one or more of the following lawful bases:

• Explicit and affirmative consent provided by the Data Subject.

• Necessity for the performance of a contract.

• Compliance with a legal obligation to which AthleTech is subject.

• Protection of vital interests of the Data Subject or another person.

• Fulfillment of tasks carried out in the public interest or exercise of official authority.

• Legitimate interests pursued by AthleTech, except where such interests are overridden by the interests or fundamental rights and freedoms of the Data Subject.

4. CATEGORIES OF DATA COLLECTED

AthleTech may collect and process the following categories of data:

A. Data Provided Directly by the Data Subject:

• Full legal name

• Residential and/or mailing address

• Telephone number(s)

• Electronic mail address(es)

• Geolocation data

• Professional qualifications and employment details

• Financial and transactional data

B. Automatically Collected Data:

• IP address and device information

• Cookies and web tracking technologies

• Session metadata

• Interactional behavior including clickstream, dwell time, bounce rate, scroll depth

• Access time logs and browser identifiers

C. Third-Party and Indirect Data:

• Social media profiles and related engagement metrics

• Commercial affiliate data

• Publicly available databases and registries

5. PURPOSES OF DATA COLLECTION

The data collected may be used for the following articulated and legally substantiated purposes:

• Facilitation of service provisioning and user experience customization

• Implementation of customer relationship management processes

• Execution of direct marketing initiatives, provided that such activities adhere to opt-in/opt-out compliance mandates

• Performance monitoring, analytics, and internal auditing

• Technical troubleshooting and platform optimization

• Fraud detection and cybersecurity

• Compliance with regulatory or judicial mandates

6. DATA RETENTION

AthleTech shall retain Personal Data for no longer than is necessary for the purposes for which the Personal Data are processed. The exact retention period shall vary based on:

• Statutory or regulatory data retention obligations

• The contractual duration of service provisioning

• The ongoing relevance of the data to legitimate business interests

Upon the expiration of the retention period, data shall be securely erased, anonymized, or archived in accordance with prevailing industry standards.

7. DATA SECURITY AND SAFEGUARDING

We implement a wide spectrum of administrative, physical, and technical safeguards designed to protect Personal Data against unauthorized access, unlawful disclosure, accidental loss, destruction, or damage. These safeguards include but are not limited to:

• End-to-end encryption protocols

• Multi-factor authentication systems

• Intrusion detection and prevention mechanisms

• Regularized vulnerability assessments and penetration testing

• Role-based access controls

8. RIGHTS OF DATA SUBJECTS

Data Subjects shall possess the following rights, exercisable by submitting a verifiable request to AthleTech’s designated data officer:

• Right to access their Personal Data

• Right to rectification of inaccurate or incomplete data

• Right to erasure ("Right to be Forgotten")

• Right to restrict or object to Processing

• Right to data portability

• Right to withdraw consent at any time

• Right to lodge a complaint with a supervisory authority

9. INTERNATIONAL DATA TRANSFERS

Where data is transferred across international borders, AthleTech shall ensure that such transfers are compliant with relevant cross-border data protection protocols, including but not limited to:

• Standard Contractual Clauses (SCCs)

• Binding Corporate Rules (BCRs)

• Adequacy determinations by regulatory authorities

10. COOKIES AND TRACKING TECHNOLOGIES

AthleTech uses cookies and similar technologies for a variety of purposes. These may include:

• Session management

• Traffic analytics and performance metrics

• Behavioral advertising

• User preference retention

Users may exercise control over cookie preferences through their browser settings. However, disabling cookies may impair certain functionalities.

11. DISCLOSURE TO THIRD PARTIES

AthleTech shall not disclose Personal Data to third parties except:

• Where expressly consented to by the Data Subject

• Where necessary for the execution of a service or transaction

• Where mandated by legal compulsion or judicial order

• To protect the vital interests of the Data Subject

All third-party processors shall be contractually obligated to adhere to data protection standards commensurate with those articulated herein.

12. POLICY MODIFICATION

AthleTech reserves the exclusive and unilateral right to amend this Policy at any time. Any such modifications shall be effective immediately upon publication on our official website. Continued use of our services following such changes shall constitute tacit acceptance of the revised terms.

13. CONTACT INFORMATION

For all inquiries, complaints, or requests related to this Privacy Policy or the handling of Personal Data, please contact:

AthleTech – Privacy Department
Attn: Data Protection Officer
Auckland, New Zealand
Phone: +64 27 529 9449
Email: kial@athletech.co.nz
Website: https://athletech.co.nz

​

Generally speaking, a Privacy Policy often addresses these types of issues: the types of information the website is collecting and the manner in which it collects the data; an explanation about why is the website collecting these types of information; what are the website’s practices on sharing the information with third parties; ways in which your visitors an customers can exercise their rights according to the relevant privacy legislation; the specific practices regarding minors’ data collection; and much much more. 

To learn more about this, check out our article “Creating a Privacy Policy”.