Bia Bliss respects your privacy and is committed to handling your personal information carefully.

This Privacy Policy explains how Embody Holistica, trading as Bia Bliss, collects, uses, stores and shares personal information when you visit biabliss.com, make an enquiry, purchase a product, book a session or participate in our services.

Privacy contact

1. Information we collect

Information you provide

We may collect:

• your name, email address and contact details;
• your phone or WhatsApp number when you choose to communicate that way;
• booking, appointment and purchase information;
• billing and transaction records;
• enquiry forms, questionnaires and correspondence;
• preferences relating to communications and marketing; and
• information you choose to share during sessions or through email, WhatsApp or booking forms.

Because of the nature of our services, information you choose to share may include sensitive details about:

• sexuality and self-pleasure practices;
• physical or emotional wellbeing;
• relationships and personal history;
• goals, concerns, habits or patterns;
• pain, injuries or health circumstances relevant to participation; and
• your experiences during coaching or embodiment counselling.

Please share only information that you are comfortable providing and that is reasonably relevant to the service.

We do not normally receive or store your complete card details. Payments are processed by third-party payment providers.

Information collected automatically

When you use the website, we and our service providers may collect:

• IP address;
• browser and device information;
• approximate location derived from technical data;
• pages viewed and links used;
• referring websites;
• dates and times of visits; and
• cookies and similar technical information.

We aim to collect only information reasonably necessary for lawful purposes connected with providing our services and operating the business.

2. Whether you must provide information

You may choose not to provide personal information.

However, without some essential information, we may be unable to:

• respond to an enquiry;
• process a payment;
• confirm or manage a booking;
• deliver a digital product;
• assess whether a practice is reasonably appropriate for you; or
• provide the requested service safely and effectively.

We usually collect information directly from you.

If we collect personal information about you from another person or source, we will take reasonable steps to notify you where required by law.

3. How we use your information

We may use personal information to:

• respond to enquiries;
• process purchases and payments;
• schedule and deliver sessions;
• provide digital products and access instructions;
• personalise coaching and preparation information;
• send booking confirmations, reminders and service communications;
• provide customer support;
• keep accounting, tax and business records;
• maintain and secure the website and related systems;
• prevent fraud, misuse or security incidents;
• manage complaints or disputes;
• meet legal, professional and regulatory obligations; and
• send marketing communications where you have consented or where otherwise permitted by law.

Purchasing a product or booking a service does not automatically require you to subscribe to general promotional emails.

You may unsubscribe from marketing emails at any time. We may still send transactional messages needed to administer an active booking or purchase.

4. Legal grounds for processing

Where New Zealand privacy law applies, we collect and use personal information only for lawful purposes connected with our functions and services.

Where United Kingdom or European data-protection law applies, we may rely on:

• performance of a contract, to process a purchase, booking or service;
• consent, including for optional marketing or non-essential cookies;
• legitimate interests, including responding to enquiries, administering the business, protecting security, preventing fraud and improving services, where those interests are not overridden by your rights; and
• legal obligations, including tax, accounting and regulatory requirements.

Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect processing that occurred lawfully before consent was withdrawn.

5. Who receives your information

We do not sell personal information.

We may share limited information with service providers where reasonably necessary to operate the business and deliver services.

These may include providers used for:

• payment processing;
• appointment scheduling;
• video calls;
• email and communications;
• website hosting;
• website security and content delivery;
• analytics;
• accounting and administration; and
• hosting or delivering digital content.

Current providers may include:

• Stripe;
• TidyCal;
• Zoom;
• Kit;
• WordPress;
• Cloudflare;
• Namecheap, our website-hosting provider;
• mailbox.org, our email provider;
• Google services, including Google Analytics;
• Microsoft Clarity;
• WhatsApp or Meta;
• PayPal;
• Wise; and
• Zelle.

This list may change as business systems change.

Each provider handles information under its own terms and privacy practices.

We may also disclose personal information:

• with your permission;
• where required or authorised by law;
• to professional advisers where reasonably necessary;
• to confidential supervisors or consultants, with identifying information removed or minimised where practicable; or
• where disclosure is reasonably necessary to address a serious threat to someone’s life, health or safety.

6. Coaching confidentiality

Information shared during coaching or embodiment counselling is treated as private and confidential.

The limits of confidentiality are described in our Terms of Service and may include:

• your consent to disclosure;
• a legal requirement;
• a valid legal process;
• a serious and imminent threat to life, health or safety; or
• confidential professional supervision or consultation.

We will not intentionally record a live session or enable an automated transcript or AI-generated meeting summary without informing you and obtaining your consent.

7. Cookies and analytics

The website may use cookies and similar technologies.

Some cookies are necessary for the website to function, maintain security or remember basic settings.

We may also use analytics and behavioural-insight technologies to understand how the website is used. These may include Google Analytics and Microsoft Clarity.

Where required by law, non-essential cookies will not be placed without your consent.

You can manage cookies through:

• the website’s cookie controls, where available; and
• your browser settings.

Disabling cookies may affect some website functions.

8. Overseas storage and processing

Some service providers may store or process personal information outside New Zealand, including in the United States, the European Union (for example Germany, where our email provider mailbox.org is based) and other countries.

Some overseas providers process information on our behalf as hosting, cloud or technology providers. Their privacy and security practices also apply.

Where personal information is disclosed to an overseas organisation, we take reasonable steps to comply with New Zealand Information Privacy Principle 12. This may include using providers subject to the New Zealand Privacy Act, comparable privacy laws, contractual safeguards or another lawful basis.

Where required, we may ask for your informed authorisation before making an overseas disclosure that may not receive protections comparable to those available in New Zealand.

9. How long we retain information

We retain information only for as long as reasonably necessary for the purpose for which it was collected and for any applicable legal, tax, professional or dispute-resolution requirements.

Generally:

• financial and transaction records may be retained for at least seven years;
• client and session records are retained only for as long as reasonably necessary to provide services, manage the professional relationship and meet legal or ethical obligations;
• enquiry records may be retained for a reasonable follow-up period;
• marketing information may be retained until you unsubscribe or it is no longer required; and
• technical and analytics information is retained according to the settings of the relevant systems.

When information is no longer reasonably required, we may delete, securely destroy or anonymise it.

10. How we protect information

We use reasonable technical and organisational safeguards designed to protect personal information.

These may include:

• password protection and account security;
• access controls;
• reputable service providers;
• software and security updates;
• secure payment processors;
• limiting access to people who need the information; and
• appropriate backup and recovery practices.

No internet transmission, electronic communication or storage system can be guaranteed to be completely secure.

11. Privacy breaches

If a privacy breach occurs, we will take reasonable steps to contain it, assess the risks and reduce potential harm.

Where a breach has caused or is likely to cause serious harm, we will notify the New Zealand Privacy Commissioner and affected individuals as required by law.

The Privacy Commissioner recommends notification as soon as practicable and ideally within 72 hours of becoming aware of a notifiable breach.

12. Your rights

Under New Zealand privacy law, you may:

• request access to personal information we hold about you; and
• ask us to correct information that is inaccurate, incomplete or misleading.

We will respond within the timeframe required by applicable law. Under New Zealand law, this will ordinarily be within 20 working days, although lawful extensions and exceptions may apply.

Depending on where you live and which privacy laws apply, you may also have rights to:

• request deletion;
• restrict or object to certain processing;
• request a portable copy of information;
• withdraw consent; or
• complain to a local data-protection authority.

Some information may need to be retained despite a request for deletion, including where it is needed for legal, tax, accounting, safety or dispute-resolution purposes.

To make a request, email [email protected]. We may need to verify your identity before providing or changing information.

13. Privacy complaints

Please contact us first if you have a concern about how your information has been handled.

Email: [email protected]

We will consider the concern and aim to respond within a reasonable period.

If you are in New Zealand and remain dissatisfied, you may make a complaint to the Office of the Privacy Commissioner.

If another country’s privacy law applies, you may also have the right to complain to the relevant local data-protection authority.

14. Children

The website, services and digital products are intended only for adults aged 18 or over.

We do not knowingly collect personal information from anyone under 18.

If you believe that a person under 18 has provided personal information, contact us so we can investigate and take appropriate action.

15. Third-party websites

The website may contain links to external websites or services.

We are not responsible for the privacy practices, content or security of external services. Review their privacy policies before providing information.

16. Changes to this Policy

We may update this Privacy Policy from time to time.

The current version will be published on this page with an updated date.

Where required by law, or where a change materially affects how we use personal information, we may provide additional notice.

17. Contact

Questions, requests or complaints about privacy may be sent to: