PRIVACY POLICY
Privacy Policy
Introduction
At Dunedin Bouldering Ltd (trading as Resistance Climbing), we respect your privacy and take your personal information seriously. This policy explains what information we collect, how we use it, how we keep it safe, and what choices you have.
When we collect, use or share personal information, we do so in line with the New Zealand Privacy Act 2020.
If you have any questions, just get in touch using the contact details at the end of this policy.
Changes to this policy
We may update this policy from time to time. If we do, we will post the updated version on our website.
Last updated: 31 May 2026
We collect personal information so we can run the business, provide our services, manage memberships and bookings, keep people safe, process payments, and stay in touch with our customers.
The information we may collect includes:
your name, contact details, date of birth, emergency contact details, membership details, attendance records, billing address and billing history
information you provide in waivers, booking forms, contact forms, emails, phone calls or social media messages
photos or video where relevant to safety, security, events or marketing
website and device information collected through cookies or similar technologies
How we collect your information
directly from you when you complete a waiver, registration, booking or membership form
when you buy products or services from us, or make payments through our payment provider
when you contact us by website form, email, phone or social media
when you use our website, including through cookies and analytics tools
from CCTV footage at our premises for safety and security purposes
How we store and protect your information
We store personal information using the systems and service providers we use to run the business, including GymMaster for customer and membership management, EzyPay for payment processing, and Squarespace for our website. We take reasonable steps to keep personal information secure, and only staff or contractors who need it for their work can access it.
We do not store full payment card details ourselves. Those are handled by our payment provider.
How long we keep your information
We keep personal information only for as long as we need it for the purpose it was collected, or as long as the law requires. After that, we delete it securely or remove details that identify you where we reasonably can.
How we use your information
We may use your personal information to:
to set up and manage memberships, visits, classes, bookings and customer accounts
to provide products and services
to process payments and manage accounts
to communicate with you, including about bookings, memberships, incidents, safety matters and customer support
to send marketing or promotional messages where permitted by law, and you can opt out of marketing communications at any time
to improve our services, systems and website, including through aggregated or anonymised analysis where appropriate
to protect our legal rights and interests, and to comply with legal obligations
When we may share your information
Sometimes we may share personal information where needed to run the business or where the law allows or requires it. This may include sharing information with:
service providers that help us operate the business, such as software, website hosting, payment processing, IT support or professional advisers
regulators, law enforcement agencies, courts or other parties where disclosure is required or authorised by law
a buyer or successor if our business is sold or reorganised
other people where you have authorised us to do so
Some of our service providers may store or process personal information outside New Zealand. If that happens, we will take reasonable steps to make sure the information is protected in a way that is comparable to New Zealand privacy law, or otherwise allowed by law.
We do not sell personal information.
How we protect your information
We take reasonable steps to protect personal information from being lost, misused, or accessed by people who should not see it.
Accessing or correcting your information
You can ask us for a copy of the personal information we hold about you, or ask us to correct it if it is wrong.
We may need to check your identity before we give you access to your information or make a correction. If we do not agree with a requested correction, we will still follow the steps required by the law.
If you would like to request access to or correction of your personal information, please contact us using the details below and tell us enough so we can identify you and understand your request.
Using our website
No system for storing or sending information is completely secure, but we take reasonable steps to protect the personal information you share with us online.
Our website may include links to other websites. Those websites have their own privacy practices, so we encourage you to read their privacy policies too.
CCTV, photography and video
We use CCTV at our premises for safety and security. CCTV footage is only accessed when needed for safety, security, incident review, or legal reasons. We usually keep footage for a short time, but may keep it longer if needed for an investigation or legal issue.
We may take photos or videos at our premises, classes, events, or competitions for day-to-day operations, community updates, or marketing. If someone is clearly identifiable and the image is being used for marketing, we will seek consent where reasonably practicable.
If you would prefer not to appear in marketing images, or want to ask about a photo or video of you, please contact us. We will consider reasonable requests.
At events and competitions, it may not be practical to obtain consent from every person who appears in crowd or group images.
Cookies and website analytics
Our website uses cookies and similar tools. Some are needed for the website to work properly, and others help us understand how people use the site so we can improve it.
necessary cookies help the site operate securely and properly
analytics or performance cookies help us understand how people use the site and improve it
Information collected through cookies or analytics may include:
browser, network and device information
pages visited before and on our website
IP address and general usage data
This may also include how you interact with the website, such as:
pages viewed and navigation paths
clicks, scrolling and searches
timestamps and session information
We may use third-party providers such as Squarespace or analytics providers to help us host the website and understand website traffic and use. Some website data may be stored outside New Zealand.
If something goes wrong
If we become aware of a privacy breach, we will look into it and take the steps required by law, including notifying affected people and the Privacy Commissioner if we need to.
Contact us
If you have any questions about this policy, or if you want to ask for access to or correction of your personal information, please contact us at dunedinbouldering@gmail.com. If you are concerned about how we have handled your information, please contact us first. You can also contact the Office of the Privacy Commissioner.