Privacy Policy

1. Who We Are

This Privacy Policy applies to Alcott Review Ltd ("we", "us", "our"), a company registered in New Zealand (NZBN 9429046789231), with its registered address at Level 2, 57 Fort Street, Auckland CBD 1010, New Zealand.

We operate the website at https://fitmotionin.world/ ("the Site") and are the operator of Peak State, a food supplement available for online order.

Contact: info@fitmotionin.world · Phone: +64 9 377 4826

2. Applicable Law

We collect and process personal information in accordance with the Privacy Act 2020 (New Zealand) and its Information Privacy Principles (IPPs). Where our activities involve individuals in the European Economic Area or United Kingdom, we also observe the applicable provisions of the General Data Protection Regulation (GDPR) and the UK GDPR as relevant.

The supervisory authority for privacy matters in New Zealand is the Office of the Privacy Commissioner (OPC). You have the right to make a complaint to the OPC if you believe we have interfered with your privacy: privacy.org.nz.

3. Information We Collect

We may collect the following categories of personal information:

• →Order information: Full name, phone number, delivery address, quantity, and payment method preference - collected when you submit an order form.
• →Contact information: Name, email address, and message content - collected when you use the contact form.
• →Technical data: IP address, browser type, operating system, referring URL, pages visited, and time on site - collected automatically via server logs and, where you consent, via analytics cookies.
• →Quiz responses: Anonymous answers to our on-site lifestyle quiz. We do not associate quiz responses with individual identities unless you subsequently submit an order or contact form.
• →Marketing parameters: UTM tags and click identifiers (gclid) appended to URLs by advertising platforms. These are captured as hidden form fields when you submit an order.

We do not intentionally collect sensitive personal information (health data, financial credentials). While our site relates to men's wellness, we do not ask you to disclose medical conditions and we do not use information you share to infer or record health diagnoses.

4. How We Use Your Information

We use your personal information only for the following purposes:

• Processing and fulfilling your order for Peak State, including contacting you to confirm delivery details.
• Responding to enquiries submitted via our contact form.
• Processing returns and refunds in accordance with our Refund Policy and the Consumer Guarantees Act 1993.
• Improving and maintaining the Site, including understanding how visitors use it (analytics - only where you have consented to analytics cookies).
• Measuring the performance of advertising campaigns (advertising analytics - only where you have consented to ad cookies).
• Complying with applicable legal obligations, including record-keeping requirements.

We do not sell, rent, or share your personal information with third parties for their own marketing purposes.

5. Legal Basis for Processing (GDPR)

Where GDPR applies, we rely on the following legal bases:

• Contract performance - processing your order and managing the customer relationship.
• Legitimate interests - maintaining site security, preventing fraud, and improving our editorial content.
• Consent - analytics and advertising cookies, and any direct marketing (you may withdraw consent at any time).
• Legal obligation - retaining records as required by applicable law.

6. Cookies and Tracking

We use cookies and similar technologies. Our implementation follows Google Consent Mode v2: all advertising and analytics storage is defaulted to denied until you actively consent via our cookie banner. Functional and security cookies are always active as they are necessary for the Site to operate.

For full details of every cookie we use and how to manage them, see our Cookie Policy.

7. Data Retention

We retain personal information for as long as necessary to fulfil the purposes described in this policy:

• Order records: 7 years from the date of order, in accordance with New Zealand tax and business record-keeping requirements.
• Contact enquiries: Up to 2 years from the date of the enquiry, unless the matter requires ongoing action.
• Analytics data: Aggregated, anonymised data as configured in the analytics platform (typically 14 months for session data).

8. Your Rights

Under the Privacy Act 2020 (NZ) and, where applicable, the GDPR, you have rights including:

• Access: Request a copy of the personal information we hold about you.
• Correction: Ask us to correct inaccurate or incomplete information.
• Erasure (GDPR): Request deletion of your personal data where no overriding legal basis exists for retention.
• Objection / Restriction (GDPR): Object to or request restriction of processing in certain circumstances.
• Portability (GDPR): Receive your data in a structured, machine-readable format where processing is based on consent or contract.
• Withdraw consent: Withdraw cookie consent at any time via the cookie banner. This does not affect the lawfulness of prior processing.
• Complain to the OPC: Lodge a complaint with the Office of the Privacy Commissioner at privacy.org.nz if you believe your privacy has been interfered with.

To exercise your rights, contact us at info@fitmotionin.world. We will respond within 20 working days as required by the Privacy Act 2020.

9. Third-Party Services

We may use third-party services including Google Analytics and Google Ads (subject to your cookie consent), web hosting providers, and courier/logistics partners for order fulfilment. These providers act as data processors under our instruction and are bound by appropriate data processing agreements. We do not share your information with them beyond what is necessary for the stated purpose.

10. International Transfers

Some of our service providers (e.g. Google) process data on servers located outside New Zealand. Where personal information is transferred overseas, we ensure appropriate safeguards are in place in accordance with Information Privacy Principle 12 of the Privacy Act 2020 and, where applicable, GDPR Chapter V (Standard Contractual Clauses or adequacy decisions).

11. Security

We take reasonable technical and organisational measures to protect your personal information against unauthorised access, disclosure, alteration, or destruction. Our site uses HTTPS encryption. No method of transmission over the internet is completely secure; we cannot guarantee absolute security but we will notify you of any breach that poses a risk of serious harm as required by the Privacy Act 2020.

12. Children

This Site and Peak State are intended for adults. We do not knowingly collect personal information from individuals under the age of 18. If you believe we have inadvertently collected information from a minor, please contact us and we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The updated version will be posted on this page with a revised "Last updated" date. We encourage you to review this policy periodically.

14. Contact

For any privacy-related enquiries, access requests, or complaints, please contact our Privacy Officer:

Alcott Review Ltd · Level 2, 57 Fort Street, Auckland CBD 1010, New Zealand · info@fitmotionin.world · +64 9 377 4826

If you are not satisfied with our response, you may refer your complaint to the Office of the Privacy Commissioner: privacy.org.nz · PO Box 10094, Wellington 6143, New Zealand.