This policy covers both mhfa.co.nz and MindFit.Studio — they're run by the same business (G2S Limitedtd), so one policy covers both sites.

1. Main Contact

• please email us at info@mhfa.co.nz

2. What we collect

• We only collect what we need to run a course, answer an enquiry, or send you something you've asked for:

• When you book a course or make an organisational enquiry: your name, email, phone number, and any course-related details you give us (preferred dates, organisation name, number of participants).

• When you pay for a course: your payment is processed directly by Stripe or via bank transfer. We don't see or store your full card details — Stripe handles that.

• When you send us a message or fill in a contact form: whatever you choose to tell us.

• When you subscribe to our newsletter ("Train Your Brain") or download a free resource: your name and email.

• Standard website data: like most websites, ours automatically picks up some basic technical information when you visit — your browser type, roughly where you're connecting from, and which pages you looked at. This comes through our website platform (Systeme.io) and any analytics tools we use, and isn't something we manually collect.

• We don't collect anything beyond this, and we never ask for sensitive personal details about your mental health — course bookings are about attending training, not about disclosing anything personal.

3. How we use it

• To register you for a course, send you joining instructions, and issue your certificate once you've completed it.

• To respond to enquiries and organisational bookings.

• To process payment (via Stripe) and keep basic records for invoicing and accounting.

• To send you our newsletter or course updates — only if you've ticked the box to say you want them. You can unsubscribe at any time, and we won't use the unsubscribe link to nag you about it.

• To improve the website, based on the basic, non-identifying technical data described above.

• We don't sell, rent, or trade your information to anyone, ever.

4. Who we share it with

• We use a small number of trusted services to actually run the business, and your information passes through them as part of that:

  • Stripe — to process payments securely. They have their own privacy policy covering payment data.

  • Systeme.io — the platform our websites, booking forms, and email newsletters run on.

  • Te Pou / the MHFA e-learning platform — if you book an Online or Refresher MHFA course, your name and email are shared with the licensed MHFA e-learning portal so you can access your course materials and gain accreditation.

• We don't share your information with anyone else, and none of these services are allowed to use your information for their own marketing.

5. How long we keep it

• We keep course and booking records for as long as we reasonably need them — generally for the length of your 3-year MHFA accreditation, plus a bit longer for our own accounting and tax requirements. If you ask us to delete your details and we don't have a legal or accounting reason to keep them, we will.

6. Cookies

• Our websites use standard website cookies (via Systeme.io) to remember basic things like whether you've seen a pop-up before, and to understand which pages get used. These aren't used to build an advertising profile on you. You can block cookies in your browser settings if you'd prefer — the site will still work, though some features (like staying logged into a booking form) might not.

7. Your rights

• Under the NZ Privacy Act, you can:

• Ask us what personal information we hold about you.

• Ask us to correct anything that's wrong.

• Ask us to delete your information, where we don't have a legal or accounting reason to keep it.

• Opt out of marketing emails at any time, with no questions asked.

• To do any of these, just email info@mhfa.co.nz - we'll sort it out directly, no formal process needed.

8. Keeping your information safe

• We take reasonable steps to keep your information secure, including relying on the security built into Stripe and Systeme.io for payment and data handling. No website can guarantee perfect security, but we don't hold anything more sensitive than what's needed to run a course, and we keep that to a minimum.

9. Children

• Our courses and content are aimed at adults. We don't knowingly collect information from children.

10. Changes to this policy

• If we update this policy, we'll change the date at the top. If anything changes in a way that affects how we use information you've already given us, we'll let you know directly.

11. Questions

• If anything here isn't clear, just ask info@mhfa.co.nz and we'll explain it properly, in plain English, same as everything else we do.