Kanika policies

Privacy and Data Protection Policy

Effective 29 October 2026. Last reviewed 28 October 2026.

What you bring into a Kanika space is sacred. We collect only what the work requires, we use it only for the reason you gave it, we protect it, and we never sell it.

Who we are

This policy covers Kanika, operated by Naturesscript Limited ("Kanika", "we", "us"), based in the Lake Taupo region of Aotearoa New Zealand and working with clients worldwide. It applies to our website, sessions, trainings, memberships, masterclasses, community spaces, events and products.

Our Privacy Officer is Corrie, Founder of Kanika. Contact: [email protected].

The law we follow

We follow the Privacy Act 2020 and its 13 Information Privacy Principles, including Principle 3A on information collected from someone other than you, in force from 1 May 2026. Because sessions involve information about your body, breath, emotional life and wellbeing, we treat that information as health information under the Health Information Privacy Code 2020.

If you live outside New Zealand, the laws of your own country may give you further rights. Contact us and we will honour them where they apply.

What we collect

Contact and account details: name, email, phone, country, time zone, and your login to our community platform.
Booking and payment details: what you purchased, payment plan status and invoices. Card details are handled by our payment providers. We never see or store your full card number.
Session and wellbeing information: your intake form, what you share about your history, body, beliefs and emotional patterns, and our session notes.
Messages: what you send us by email, WhatsApp, direct message or within the community.
Quiz and survey answers: including your Kanika quiz results.
Training information: for practitioners and trainees, your background, prior qualifications, embodiment tasks, case study submissions and progress.
Recordings: live classes, trainings and group calls may be recorded. We tell you before recording begins.
Website data: cookies and analytics such as pages visited, device type and approximate location.

When information comes from someone else

Sometimes we receive your information from another source. For example, a practitioner refers you to us, a friend buys a session as a gift for you, or a payment or booking platform passes on your details. When this happens we take reasonable steps to let you know, as soon as practicable, that we hold your information, why, who we may share it with, and how to access or correct it.

Why we use it

To deliver your sessions, training, membership and the support that comes with them.
To keep you safe, including recognising when another form of care may serve you better.
To process payments and keep the records the law requires.
To send you emails you signed up for, such as quiz results and our community sequence.
To improve our offerings, using information that no longer identifies you wherever possible.

We do not use your session information for marketing. We never share a client story, image or testimonial without your written consent.

Who we share it with

We never sell, rent or trade your information. We share it only:

With Kanika practitioners or trainee practitioners you choose to work with, and only what they need.
With trusted service providers who help us run the business, such as our community platform, email service, payment processors, scheduling and cloud storage. They may use your information only to provide their service to us.
For case study support within our practitioner membership, and only once every identifying detail has been removed.
Where the law requires it, or where sharing is necessary to prevent a serious threat to your life or health or that of someone else.

Information stored outside New Zealand

Some of our service providers store information on servers in other countries, including the United States, Australia and the European Union. We choose providers that protect information to a standard comparable to New Zealand law, as Principle 12 requires.

How we protect it

We use password protected and encrypted platforms, limit access to those who need it, and require every Kanika practitioner to keep client information confidential. No system is perfectly secure, so we review our protections regularly.

How long we keep it

Session records and intake forms: 10 years from your last session, then securely destroyed.
Financial records: 7 years, as New Zealand tax law requires.
Email list details: until you unsubscribe.
Recordings: for as long as the related course or membership remains available.

Your rights

You can ask to see the information we hold about you and ask us to correct it. We will respond within 20 working days, at no cost. If we decline a correction, you can ask us to attach a statement of the correction you sought.

Emails and messages

We only send marketing emails with your consent, in line with the Unsolicited Electronic Messages Act 2007. Every email includes an unsubscribe link, and we act on it within 5 working days.

Cookies

Our website uses cookies to function and to understand how it is used. You can decline or delete cookies through your browser settings. Some features may not work without them.

Privacy breaches

If a privacy breach occurs that has caused or is likely to cause serious harm, we will notify you and the Office of the Privacy Commissioner as soon as practicable.

Age

Our offerings are for adults aged 18 and over. We do not knowingly collect information from anyone under 18 without the consent of a parent or guardian.

Concerns and complaints

Please bring any privacy concern to our Privacy Officer first at [email protected]. If you are not satisfied with our response, you can contact the Office of the Privacy Commissioner on 0800 803 909.

Changes to this policy

We may update this policy as our work or the law evolves. The current version always lives on this page, with its review date at the top.

Our other policies

Questions about any policy? Email [email protected]