1. Introduction
This Privacy Policy describes how Enerjoints ("we", "us", or "our") collects, uses, stores, and protects personal information when you visit our website at enerjoints.world, use our contact form, enroll in our water balance awareness consultations, or interact with our educational services. We are committed to protecting your privacy and handling your data in accordance with the General Data Protection Regulation (GDPR), the Australian Privacy Act 1988, and other applicable international data protection laws.
By using our website and services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described herein, please refrain from using our website and services.
2. Data Controller Information
The data controller responsible for your personal information is:
- Business Name: Enerjoints
- Registered Address: 44/60 Gouger St, Adelaide SA 5000, Australia
- Contact Email: touch@enerjoints.world
- Contact Phone: +61 3 6234 7488
- Website: enerjoints.world
For any privacy-related enquiries, data subject requests, or concerns about how your information is handled, please contact us using the details above. We will respond to all privacy enquiries within 30 days of receipt.
3. Personal Data We Collect
We collect personal data only when it is necessary for the purposes outlined in this policy. The categories of personal data we may collect include:
3.1 Information You Provide Directly
- Contact Form Data: Full name, email address, and message content submitted through our contact form.
- Consultation Enquiries: Information you share when requesting or attending water balance awareness consultations, including lifestyle preferences and daily routine details relevant to our informational services.
- Program Enrollment: Name, email address, and payment-related information when enrolling in awareness programs or purchasing educational products.
- Communication Records: Content of email correspondence, phone call notes, and other communications between you and our team.
3.2 Information Collected Automatically
- Technical Data: IP address, browser type and version, operating system, device type, and screen resolution.
- Usage Data: Pages visited, time spent on pages, click patterns, referral source, and navigation paths through our website.
- Cookie Data: Information stored through cookies and similar technologies as described in our Cookie Policy.
3.3 Information We Do Not Collect
We do not intentionally collect sensitive personal data such as health records, medical diagnoses, financial account numbers, government identification numbers, or biometric data. Our services provide general informational content only and do not require medical or health-related personal information.
4. Legal Basis for Processing
Under the GDPR, we process your personal data based on the following legal grounds:
- Consent (Article 6(1)(a)): When you submit our contact form, accept cookies, or explicitly agree to data processing for specific purposes such as marketing communications.
- Contract Performance (Article 6(1)(b)): When processing is necessary to fulfill our contractual obligations, such as delivering consultation services or awareness programs you have enrolled in.
- Legitimate Interests (Article 6(1)(f)): When processing is necessary for our legitimate business interests, including website security, fraud prevention, service improvement, and internal analytics, provided these interests do not override your fundamental rights.
- Legal Obligation (Article 6(1)(c)): When processing is required to comply with applicable laws, regulations, or legal proceedings.
5. Purposes of Data Processing
We use your personal data for the following specific purposes:
- Responding to your enquiries submitted through our contact form or email
- Scheduling and delivering water balance awareness consultations and educational programs
- Providing personalised non-medical guidance documents and tracking resources
- Processing enrollments and managing program participation
- Improving our website functionality, user experience, and service offerings
- Conducting anonymised analytics to understand website usage patterns
- Sending service-related communications such as appointment confirmations and program updates
- Complying with legal obligations and responding to lawful requests from authorities
- Protecting the security and integrity of our website and services
6. Data Sharing and Third Parties
We do not sell, rent, or trade your personal data to third parties. We may share your information with the following categories of recipients only when necessary:
- Service Providers: Trusted third-party providers who assist with website hosting, email delivery, payment processing, and analytics. These providers are contractually bound to process data only on our instructions and in compliance with applicable data protection laws.
- Legal Requirements: When disclosure is required by law, regulation, court order, or governmental authority.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity, subject to the same privacy protections.
All third-party service providers are located either within Australia or in countries that provide an adequate level of data protection as recognised by the European Commission, or are bound by Standard Contractual Clauses approved by the European Commission.
7. International Data Transfers
Your personal data is primarily processed and stored within Australia. If we transfer data to service providers located outside Australia or the European Economic Area (EEA), we ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Adequacy decisions recognising the recipient country's data protection standards
- Binding Corporate Rules for multinational service providers
- Your explicit consent for specific transfers where required
8. Data Retention Periods
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law:
- Contact Form Submissions: Retained for 24 months from the date of submission, unless an ongoing business relationship exists.
- Consultation Records: Retained for 36 months from the date of the last consultation session.
- Program Enrollment Data: Retained for the duration of the program plus 12 months thereafter.
- Payment Records: Retained for 7 years in compliance with Australian tax and accounting regulations.
- Cookie and Analytics Data: Retained according to the periods specified in our Cookie Policy, typically between 1 and 26 months.
- Marketing Consent Records: Retained for the duration of consent plus 3 years after withdrawal.
When retention periods expire, personal data is securely deleted or anonymised so that it can no longer be associated with you.
9. Your Rights Under GDPR and Australian Privacy Law
Depending on your location, you may have the following rights regarding your personal data:
- Right of Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete personal data.
- Right to Erasure: Request deletion of your personal data where there is no compelling reason for continued processing.
- Right to Restrict Processing: Request limitation of processing in certain circumstances.
- Right to Data Portability: Receive your personal data in a structured, commonly used, machine-readable format.
- Right to Object: Object to processing based on legitimate interests or for direct marketing purposes.
- Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent, without affecting the lawfulness of prior processing.
- Right to Lodge a Complaint: File a complaint with the Office of the Australian Information Commissioner (OAIC) or your local data protection authority.
To exercise any of these rights, contact us at touch@enerjoints.world or call +61 3 6234 7488. We will respond within 30 days and may request verification of your identity before processing your request.
10. Data Security Measures
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction, including:
- HTTPS encryption for all data transmitted between your browser and our website
- Secure server infrastructure with regular security updates and patches
- Access controls limiting personal data access to authorised personnel only
- Regular security assessments and vulnerability testing
- Employee training on data protection practices and confidentiality obligations
- Incident response procedures for detecting, reporting, and addressing data breaches
While we strive to protect your personal data, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security but are committed to maintaining industry-standard protections.
11. Children's Privacy
Our website and services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child without parental consent, we will take steps to delete that information promptly. Parents or guardians who believe their child has provided personal data to us should contact us immediately.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or service offerings. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you via email or a prominent notice on our website. We encourage you to review this policy periodically.
13. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact us:
- Email: touch@enerjoints.world
- Phone: +61 3 6234 7488
- Address: 44/60 Gouger St, Adelaide SA 5000, Australia
We are committed to resolving any privacy concerns promptly and transparently.