Privacy Policy
Scendent Limited (NZBN 9429050458431)
Last updated: 29 July 2026
THE SHORT VERSION
We collect the minimum we need to send you your order, run our programmes, and talk to you if you've asked us to. We don't sell your information. You can ask us what we hold on you and we'll tell you. You can ask us to delete it and we will, unless the law says we have to keep it.
The long version is below, because you deserve the detail.
1. WHO WE ARE
This policy explains how Scendent Limited ("Scendent", "we", "us", "our") collects, uses, stores and discloses personal information when you use scendent.co.nz (the "Site"), buy from our store, contribute, attend a workshop, apply to a programme, or contact us.
We are the "agency" responsible for your personal information under the Privacy Act 2020 (New Zealand).
Contact for all privacy matters:
Scendent Limited, 9 Pacific Park Way, Papamoa Beach, Bay of Plenty 3118, New Zealand
Email: scendentofficial@gmail.com (subject line PRIVACY)
Phone: 027 726 0101
2. WHAT WE COLLECT AND WHY
We only collect personal information we actually need for a lawful purpose connected to what we do (Information Privacy Principle 1). Here is every category.
2.1 When you browse the Site
| What | Why | Source |
|---|---|---|
| IP address, device type, browser, operating system, screen size | To load the Site correctly and keep it secure | Automatic |
| Pages viewed, time on page, referring site, search terms used | To understand what's useful and improve the Site | Cookies and analytics |
| Approximate location (city/region level, from IP) | Currency display, shipping estimates, regional resource relevance | Automatic |
2.2 When you buy from our store
| What | Why |
|---|---|
| Name, email, phone | To confirm, fulfil and support your order |
| Billing address, shipping address | To take payment and deliver the goods |
| Order contents, order history | Fulfilment, returns, and warranty claims |
| Payment method details | Processed by Shopify Payments and/or PayPal — we never see or store your full card number |
2.3 When you contribute
Name, email, contribution amount, date, and any message you attach. Used to process the contribution, send you a confirmation, and — only if you opt in — keep you updated on the work your money supports.
2.4 When you book a workshop, event or training
Name, email, phone, organisation (if applicable), and any accessibility or dietary requirements you choose to tell us.
Health and support information. For wellbeing-focused sessions we may ask whether there is anything we should know to keep you safe. This is health information and is subject to the Health Information Privacy Code 2020. Giving it is always optional. We use it only to run the session safely, we share it only with the facilitator delivering your session, and we delete it within 30 days of the session ending.
2.5 When you apply to a programme (Advocate Training, scholarships)
Name, contact details, age or date of birth, the content of your application, and any supporting material you send us. Used to assess the application and administer the programme.
Reference and background checking. For roles or programmes involving contact with young people we may carry out reference checks and NZ Police vetting. We will always tell you before we do, and we will always ask for your written consent first.
2.6 When you use the Directory of Help
We do not use Directory of Help activity for advertising, profiling or marketing. We do not build profiles of Directory users. We do not share Directory activity with advertisers or anyone else. We do not use it to target you with anything, and we never will.
Being straight with you about the technical position: our site-wide analytics and advertising tools (clause 6) run across the Site as a whole. Where it is technically possible to exclude Directory pages from advertising and behavioural tracking, we do. We are working to extend that exclusion further, and we would rather tell you that plainly than claim a guarantee we cannot fully verify.
If you want certainty that nothing is recorded, decline non-essential cookies and use a private browsing window. The Directory works completely — all listings, all crisis numbers, all links — either way. Nothing about it is gated behind consent.
If you follow a link out to a third-party service, that service's own privacy policy applies from that point. We have no visibility into what happens there.
2.7 When you sign up to our newsletter
Email address, and your name if you give it. You can unsubscribe from any message. We comply with the Unsolicited Electronic Messages Act 2007 — every commercial message we send identifies us and includes a working unsubscribe.
2.8 When you contact us
Whatever you put in the message, plus your contact details, so we can reply.
3. HOW WE COLLECT IT
Almost always directly from you (IPP 2). The exceptions:
- Automatically, via cookies and analytics, when you browse
- From referees, where you have consented to reference checking
- From payment providers, who confirm to us that a payment succeeded
We will never collect your personal information by unlawful, unfair or unreasonably intrusive means (IPP 4).
4. IF WE COLLECT IT, WE TELL YOU
Wherever we collect personal information from you directly, we aim to make clear at that point: who we are, why we're collecting it, whether it's voluntary or required, who we'll share it with, and that you have a right to access and correct it (IPP 3). We link this policy from our site footer and from the forms where we collect personal information. If you find a place where we collect information without making this clear, tell us and we'll fix it.
5. UNDER-18s AND YOUNG PEOPLE
Scendent works with and for young people. We take this seriously.
- Purchases and accounts. You must be 16 or over to create an account or place an order. If you're under 16, ask a parent or guardian to do it.
- Newsletter. 16 or over.
- Workshops, events and programmes. Under-18s are welcome. Where a participant is under 18 we require written parental or guardian consent before we collect their personal information, and we collect only what is needed to run the session safely.
- Directory of Help. Open to everyone, at any age, with no sign-up required. Nobody should have to hand over their identity to find help.
If you are a parent or guardian and believe we hold information about your child that we shouldn't, email scendentofficial@gmail.com and we will delete it promptly.
6. WHO WE SHARE IT WITH
We share personal information only with the service providers below, only for the purposes described, and only to the extent necessary (IPP 11).
| Provider | What they get | What for | Where |
|---|---|---|---|
| Shopify Inc. | Order, account and browsing data | Hosting our store and processing payments | Canada, USA, Ireland |
| Printful Inc. | Name, shipping address, order contents | Printing and shipping merchandise | USA, Latvia, Mexico, Spain, others |
| Google (Analytics 4) | Pseudonymous usage data, IP (truncated) | Understanding Site usage | USA |
| Meta Platforms | Pseudonymous event and conversion data | Advertising measurement | USA, Ireland |
| TikTok | Pseudonymous event and conversion data | Advertising measurement | Singapore, USA, Ireland |
| Email provider | Email address, name, engagement data | Sending the newsletter you subscribed to | Varies |
| Freight and postal carriers | Name, address, phone | Delivering your order | Varies |
We also disclose personal information where we are required to by law, to respond to a lawful request from a public authority, to enforce our Terms of Service, or where there is a serious threat to someone's life, health or safety.
We do not sell your personal information. We do not trade, rent, or licence it.
7. INFORMATION GOING OVERSEAS
Our providers store and process data outside New Zealand (see the table above). Before disclosing personal information offshore we satisfy ourselves that the recipient is subject to comparable safeguards, whether through binding contractual terms, their own privacy framework, or applicable law (IPP 12).
By using the Site and buying from us, you understand your information will be handled overseas by the providers listed.
8. KEEPING IT SAFE
We protect personal information against loss, misuse and unauthorised access (IPP 5) through:
- HTTPS/TLS encryption across the entire Site
- PCI-DSS compliant payment processing — card details never touch our systems
- Access limited to people who need it to do their job
- Two-factor authentication on administrative accounts
No system is perfectly secure. If a privacy breach occurs that is likely to cause you serious harm, we will notify you and the Office of the Privacy Commissioner as required by Part 6 of the Privacy Act 2020.
9. HOW LONG WE KEEP IT
We don't keep personal information longer than we need it (IPP 9).
| Category | Retention |
|---|---|
| Order and transaction records | 7 years (Tax Administration Act / Companies Act requirements) |
| Contribution records | 7 years |
| Customer accounts | Until you ask us to close it |
| Newsletter subscription | Until you unsubscribe |
| Workshop health and support information | 30 days after the session |
| Workshop attendance records | 2 years |
| Programme applications (unsuccessful) | 12 months, then deleted |
| Programme applications (successful) | Duration of participation plus 2 years |
| General enquiries | 2 years |
| Analytics data | 14 months (GA4 default) |
10. YOUR RIGHTS
Under the Privacy Act 2020 you have the right to:
- Access the personal information we hold about you (IPP 6)
- Correct it if it's wrong, or attach a statement of correction if we disagree (IPP 7)
- Withdraw consent to marketing at any time
- Ask us to delete information we no longer have a lawful reason to keep
- Complain, to us and then beyond us
To exercise any of these, email scendentofficial@gmail.com with subject line PRIVACY. We will respond within 20 working days, as the Act requires. There is no charge.
Additional rights if you are in the EU, EEA or UK
Because we ship worldwide, the GDPR and UK GDPR may apply to you. If so, you additionally have the right to data portability, the right to restrict processing, the right to object to processing based on legitimate interests, and the right not to be subject to solely automated decision-making with legal effect. We do not carry out automated decision-making or profiling that produces legal effects.
Our lawful bases for processing are: performance of a contract (orders, bookings), consent (marketing, optional analytics and advertising cookies, health information), legal obligation (tax and financial records), and legitimate interests (site security, fraud prevention, service improvement).
You may lodge a complaint with your local supervisory authority. In the UK that is the Information Commissioner's Office at ico.org.uk.
Additional rights if you are in California
Under the CCPA/CPRA you may request disclosure of the categories of personal information collected, request deletion, and opt out of "sharing" for cross-context behavioural advertising. Our Meta and TikTok pixels may constitute "sharing" under the CPRA — you can opt out by emailing scendentofficial@gmail.com. We do not sell personal information for money.
11. COOKIES AND TRACKING
We use cookies and similar technologies. Full detail — including every cookie, its purpose and its lifespan — is in our separate Cookie Policy.
Do Not Track. There is still no agreed industry standard for responding to browser DNT signals, so we do not currently respond to them. We do honour Global Privacy Control (GPC) signals where your browser sends them.
12. THIRD-PARTY LINKS
The Site links to other websites, most significantly through the Directory of Help. We are not responsible for their content, their accuracy, or their privacy practices. A link is not an endorsement. Read their policies before giving them your information.
13. COMPLAINTS
If you're unhappy with how we've handled your personal information, tell us first: scendentofficial@gmail.com, subject line PRIVACY. We aim to acknowledge within 5 working days and give you a substantive response within 20 working days.
If you're not satisfied with our response, you can complain to:
Office of the Privacy Commissioner
PO Box 10094, Wellington 6143, New Zealand
Phone: 0800 803 909
Web: privacy.org.nz
14. CHANGES
We may update this policy to reflect changes in what we do or what the law requires. The "Last updated" date at the top always shows the current version. If we make a change that materially affects how we handle your personal information, we'll tell you by email or through a notice on the Site before it takes effect.
Scendent Limited · NZBN 9429050458431 · 9 Pacific Park Way, Papamoa Beach, Bay of Plenty 3118, New Zealand