Privacy Policy

1. Introduction

Tummy Tuck NZ ("we," "our," or "us") operates tummytuck.co.nz as a cosmetic surgery referral and information service. We are NOT medical practitioners, doctors, or surgeons. We are a referral service that connects potential patients with qualified plastic surgeons and cosmetic surgery clinics in New Zealand.

This Privacy Policy explains how we collect, use, disclose, and protect your personal information in accordance with the New Zealand Privacy Act 2020 and relevant health sector regulations.

2. Information We Collect

2.1 Personal Information you provide via the consultation form

Our 14-step consultation form collects only the fields listed below — nothing else. We do not request body photographs, weight, BMI, or pregnancy history. Fields are:

• Identity: First name, last name
• Contact: Email address, phone number
• Demographics: Age band (e.g. 36-45), region (Auckland / Wellington / Christchurch / other)
• Procedure interest: Type (full / mini / extended / apronectomy / not-sure)
• Medical context: Previous abdominal surgery (yes / no — categorical), free-text “medical conditions” box (optional), free-text “expectations” box (optional), free-text “additional info” box (optional)
• Timing & budget: Timeline band (asap / 1-3mo / 3-6mo / 6-12mo / researching), budget band (under-10k / 10-15k / 15-20k / need-guidance)
• Consultation preference: In-person / phone / video / flexible

The optional free-text medical-conditions box is intended for users who want to flag conditions a surgeon should know at first contact (e.g. ITP, prior C-section, diastasis recti, post-bariatric history). Anything you enter is treated as health information under HIPC 2020.

2.2 Automatically Collected Information

• Usage Data: IP address, browser type, pages visited, time spent on pages, referring URLs
• Device Information: Device type, operating system, unique device identifiers
• Cookies: We use Google Analytics to track website usage (see Section 6)

3. How We Use Your Information

We use your personal information to:

• Provide Referral Services: Match you with qualified plastic surgeons and cosmetic clinics based on your location, procedure type, and requirements
• Facilitate Consultations: Forward your information to selected surgeons who can provide consultations
• Communicate with You: Respond to inquiries, send appointment reminders, provide cost estimates, share educational content
• Improve Our Service: Analyze website usage to enhance user experience and content
• Marketing: Send promotional emails about tummy tuck procedures, surgeon profiles, and special offers (you can opt-out anytime)
• Legal Compliance: Comply with legal obligations and protect our rights

5. Your Rights Under NZ Privacy Act 2020

Under New Zealand privacy law, you have the right to:

• Access: Request a copy of all personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal retention requirements)
• Opt-Out: Unsubscribe from marketing emails at any time
• Restrict Processing: Ask us to limit how we use your information
• Data Portability: Receive your data in a structured, machine-readable format

To exercise these rights, contact us at privacy@tummytuck.co.nz

6. Cookies & Tracking Technologies

We use cookies and similar technologies to:

• Google Analytics (GA4): Track website usage, page views, session duration, user demographics
• Functionality Cookies: Remember your preferences and calculator inputs
• Marketing Cookies: May be used for retargeting campaigns (you can disable these in your browser)

You can disable cookies in your browser settings. However, some features of our website may not function properly without cookies.

7. Data Security

We implement industry-standard security measures including:

• SSL/TLS encryption for data transmission
• Secure cloud storage with access controls
• Regular security audits and monitoring
• Employee training on data protection
• Confidentiality agreements with service providers

However, no internet transmission is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

8. Data Retention

We retain your personal information for:

• Active Inquiries: Until consultation is completed or you withdraw consent
• Marketing Database: Until you unsubscribe or request deletion
• Legal Requirements: 7 years for medical referral records (as required by NZ health sector regulations)
• Anonymized Data: We may retain anonymized usage statistics indefinitely for research purposes

9. Children's Privacy

Our services are NOT intended for individuals under 18 years of age. We do not knowingly collect information from minors. If you are under 18, do not use this website or provide any personal information.

10. International Data Transfers

Your information is primarily stored in New Zealand. However, some service providers (e.g., Google Analytics, email platforms) may process data internationally. When data is transferred overseas, we ensure appropriate safeguards are in place as required by the NZ Privacy Act 2020.

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically. The "Last Updated" date at the top indicates the most recent revision. Material changes will be notified via email or prominent website notice. Continued use of our service after changes constitutes acceptance of the updated policy.