Anna-Leeza Hull, trading as Winning Edge Cycling, NZBN 9429048866446 (we, us or our), respects your right to privacy and understands that protecting your personal information is important.

We comply with the New Zealand Privacy Act 2020 (Privacy Act) when handling personal information.

This Privacy Policy explains how we collect, hold, use, disclose and protect personal information obtained through our website, including website enquiries, appointment bookings, service purchases, email marketing subscriptions and website analytics.

Additional personal information collected during athlete onboarding and ongoing coaching services, including health and performance information, is addressed through separate privacy information provided as part of those services.

1. The information we collect

Personal information means information about an identifiable individual (a natural person).

The types of personal information we may collect about you through our website include:

• your name;
• your contact details, including your email address and telephone number;
• information you voluntarily provide when completing our website contact form or communicating with us;
• information provided when scheduling appointments through Calendly, including your name, contact details, appointment preferences and any additional information you choose to provide;
• your email marketing preferences and subscription information;
• details of the services you have purchased or enquired about, including relevant transaction and payment confirmation information processed through our third-party payment provider, Stripe;
• information about your interactions with our marketing communications, including email engagement and subscription preferences, through Klaviyo;
• website usage and analytics information collected through Google Analytics, including page views, website interactions, referral sources, approximate geographic location, device information, browser information and other usage statistics;
• information collected through cookies and similar technologies used by our website, analytics and marketing services; and
• any additional personal information you voluntarily provide to us when interacting with our website or associated services.

Payment card information is processed through Stripe. Winning Edge Cycling does not directly collect or store complete payment card details through its website.

2. How we collect personal information

We collect personal information in a variety of ways, including:

Directly: We collect personal information that you voluntarily provide to us, including when you complete the contact form on our website, subscribe to our email marketing communications through our Klaviyo subscription form, schedule an appointment through Calendly, purchase our services through Stripe, or contact us via email or telephone.

Indirectly: We may collect personal information automatically when you interact with our website, including through cookies, Google Analytics and other website technologies. This may include information about your device, browser, approximate geographic location, website activity and interactions with our website.

Through third-party service providers: We may receive personal information from third-party platforms that support our website and business operations, including Webflow, Stripe, Klaviyo, Google Analytics, Microsoft 365 and Calendly, where relevant to the services they provide.

3. Collection and use of personal information

We may collect, hold, use and disclose personal information for the following purposes:

• to operate, maintain and provide access to our website and its functionality;
• to respond to enquiries, requests and communications submitted through our website or other contact channels;
• to provide information about our coaching services and assist prospective clients with their enquiries;
• to facilitate appointment bookings, confirmations, reminders and scheduling communications through Calendly;
• to facilitate the purchase of our services, process payments through Stripe and maintain relevant transaction records;
• to manage email marketing subscriptions and send promotional communications, business updates and information about our services through Klaviyo, where you have subscribed or otherwise authorised us to do so;
• to manage marketing preferences, subscription records and unsubscribe requests;
• to monitor and analyse website traffic, visitor interactions and website performance through Google Analytics;
• to improve our website, user experience, services and marketing activities;
• to manage and respond to business enquiries and communications through Microsoft 365;
• for internal record keeping, administrative, invoicing, billing and business management purposes;
• to maintain the security, functionality and integrity of our website and associated systems;
• to comply with our legal obligations, respond to lawful requests and resolve any disputes; and
• for any other purpose required or authorised by law.

We will collect and use personal information only for lawful purposes connected with our business activities and in accordance with applicable privacy requirements.

4. Disclosure of personal information to third parties

We may disclose personal information to third-party service providers where reasonably necessary to operate our website, administer our business and provide our services.

These providers include:

• Webflow: Our website hosting and management provider, for operating our website, managing website functionality and processing contact form submissions.
• Stripe: Our third-party payment processing provider, for facilitating payments, managing transactions, processing refunds and maintaining relevant payment records.
• Klaviyo: Our email marketing provider, for managing email subscriptions, sending marketing communications, recording subscriber preferences and analysing engagement with our communications.
• Google Analytics: Our website analytics service, for collecting and analysing website traffic, visitor interactions and website performance.
• Microsoft 365: Our business communication and information management provider, for receiving, storing and managing enquiries, correspondence and relevant business records.
• Calendly: Our appointment scheduling provider, for managing bookings, appointment information, confirmations and reminders.
• Professional advisers and service providers: Including accountants, legal advisers, IT support providers and other contractors where reasonably necessary for the operation and administration of our business.
• Regulatory authorities and law enforcement: Where disclosure is required or authorised by law, including in connection with legal proceedings, regulatory obligations or the establishment, exercise or defence of our legal rights.
• Other third parties: Where you have authorised the disclosure or where disclosure is otherwise required or permitted by law.

We do not sell personal information collected through our website.

Overseas disclosure

Some of our third-party service providers operate internationally and may store, access or process personal information outside New Zealand.

Where we disclose personal information to an overseas recipient, we will comply with Information Privacy Principle 12 of the Privacy Act, where applicable.

This may include ensuring that the recipient is subject to comparable privacy safeguards, is required to protect the information through appropriate contractual arrangements, or that another lawful basis for overseas disclosure applies.

Where overseas service providers hold or process information solely on our behalf, we will take reasonable steps to ensure that appropriate privacy and security protections are maintained.

5. Your rights and controlling your personal information

Your choice: You are not required to provide personal information to us. However, if you choose not to provide certain information, we may be unable to respond to your enquiries, process purchases, arrange appointments or provide certain website services.

Information from third parties: If we receive personal information about you from a third party, we will handle that information in accordance with this Privacy Policy and applicable privacy laws. If you provide personal information about another individual, you must have appropriate authority to share that information with us.

Marketing communications and unsubscribing: If you subscribe to our email marketing communications through Klaviyo, you may unsubscribe at any time using the unsubscribe link included in our marketing emails or by contacting us directly. We will respect your marketing preferences and process unsubscribe requests in accordance with applicable law.

Access and correction: Subject to any applicable exceptions under the Privacy Act 2020, you have the right to request access to, and correction of, personal information we hold about you. You may submit a request using the contact details provided in this Privacy Policy. We will respond in accordance with the Privacy Act.

Retention: We will retain personal information only for as long as reasonably necessary for the purposes for which it was collected, or as otherwise required or permitted by law. When personal information is no longer required, we will take reasonable steps to securely delete or de-identify it.

Complaints: If you have concerns about how we collect, use, store or disclose your personal information, please contact us using the details provided in this Privacy Policy.

We will investigate your complaint and respond appropriately.

If you are dissatisfied with our response, you may contact the Office of the Privacy Commissioner in New Zealand at www.privacy.org.nz.

6. Storage and security

We are committed to protecting the personal information we collect from misuse, loss, unauthorised access, modification and disclosure.

Personal information may be stored electronically through Microsoft 365, on our business computers and devices, and within third-party platforms used to operate our website and provide associated services, including Webflow, Stripe, Klaviyo and Calendly.

We take reasonable steps to safeguard personal information through appropriate technical, administrative and organisational security measures. These may include password-protected accounts and devices, access controls, secure storage arrangements, software updates and other measures appropriate to the nature and sensitivity of the information held.

Access to personal information is limited to individuals and service providers who reasonably require it for legitimate business purposes.

Where we engage third-party service providers to process or store personal information, we take reasonable steps to ensure that appropriate privacy and security safeguards are in place.

While we take reasonable precautions to protect personal information, no method of electronic storage or transmission over the internet can be guaranteed to be completely secure.

If a privacy breach occurs, we will assess and respond to it in accordance with our obligations under the New Zealand Privacy Act 2020, including notifying affected individuals and the Office of the Privacy Commissioner where required.

7. Cookies

Our website uses cookies and similar tracking technologies to support website functionality, understand visitor behaviour, analyse website performance and improve our services and marketing communications.

Cookies are small text files stored on your device when you visit a website. They may collect information about your browser, device, website interactions and browsing activity.

We may use the following types of cookies and tracking technologies:

• Essential cookies: Cookies necessary for the operation, security and functionality of our website.
• Analytics cookies: Cookies used by Google Analytics to collect information about website traffic, page views, visitor interactions and website performance.
• Marketing cookies and tracking technologies: Technologies used by Klaviyo to support email marketing subscriptions, understand visitor interactions and measure engagement with our marketing activities, where enabled.

Some cookies and tracking technologies may be provided by third-party services and may involve the processing of information outside New Zealand.

You can manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of some parts of our website.

For further information about how third-party providers process personal information, please refer to their respective privacy policies.

8. Links to other websites

Our website may contain links to third-party websites and services, including external payment processing and appointment booking platforms.

We do not control the privacy practices of these third-party websites and are not responsible for how they collect, use, store or disclose personal information independently of Winning Edge Cycling.

We encourage you to review the privacy policies of any third-party websites or services you access through our website.

9. Amendments

We may update this Privacy Policy from time to time to reflect changes to our business operations, website functionality, third-party service providers or applicable legal requirements.

Any updated Privacy Policy will be published on our website, with the date of the most recent update indicated below.

We encourage you to review this Privacy Policy periodically to remain informed about how we handle personal information.

10. Contact and privacy enquiries

For any questions, requests or complaints relating to this Privacy Policy or the handling of your personal information, please contact:

Anna-Leeza Hull
Trading as Winning Edge Cycling
NZBN: 9429048866446

Email: anna@winningedgecycling.com

Last updated: 22 October 2026

Adapted from the LegalVision New Zealand Privacy Policy template.