top of page
Image by Pawel Czerwinski
Privacy Policy for A Lighter Way 

​

Last Updated: April 6, 2025

​

At A Lighter Way ("we," "us," or "our"), we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website, www.alighterway.com (the "Website"), or participate in our online weight loss program (the "Program"). The Program is a three-hour course delivered over three weeks, either individually or in a group via Zoom, focused on mindset transformation to address the root causes of weight retention.

 

We comply with applicable data protection laws, including the New Zealand Privacy Act 2020, the General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA), depending on your location. If you have any questions about this Privacy Policy, please contact us using the details in Section 11.

 

1. Information We Collect

 

We collect the following types of information:

a. Personal Information You Provide

  • Registration and Enrollment: When you sign up for the Program, we collect your name, email address, billing information (e.g., credit card details via our payment processor), and, if applicable, your phone number or mailing address.

  • Program Participation: During the Program, you may share personal details (e.g., experiences related to trauma or weight) with your mentor or group. We treat this information as confidential.

  • Communications: If you contact us (e.g., via email), we collect the information you provide.

b. Automatically Collected Information

  • Website Usage: We collect data about your interaction with the Website, such as your IP address, browser type, device information, pages visited, and time spent, using cookies and similar technologies (see Section 6).

  • Zoom Sessions: We may record group sessions for quality assurance or to provide access to participants who miss a session. Recordings will only include your image, voice, or name if you participate actively and consent to being recorded.

c. Information from Third Parties

  • We may receive data from third-party services we use, such as Zoom (e.g., attendance logs) or our payment processor (e.g., transaction confirmation).

 

2. How We Use Your Information

We use your information for the following purposes:

  • To Deliver the Program: To process your enrollment, send you Zoom links, and facilitate your participation.

  • To Improve Our Services: To analyze feedback, session recordings (if applicable), and Website usage to enhance the Program and user experience.

  • To Communicate: To send you confirmations, reminders, updates, and responses to your inquiries.

  • To Process Payments: To handle transactions securely via our payment processor.

  • To Comply with Legal Obligations: To meet requirements under applicable laws or respond to legal requests.

 

3. Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA), we process your personal data based on:

  • Contract: To fulfill our agreement with you when you enroll in the Program (e.g., delivering sessions).

  • Consent: Where you explicitly agree (e.g., to session recordings or marketing emails).

  • Legitimate Interests: For purposes like improving our services or ensuring Website security, where this does not override your rights.

  • Legal Obligation: To comply with applicable laws.

 

4. Sharing Your Information

We do not sell your personal information. We may share it with:

  • Service Providers: Third parties like Zoom (for session delivery), payment processors (e.g., Stripe or PayPal), and hosting providers, who process data on our behalf under strict confidentiality agreements.

  • Program Mentors: To facilitate your sessions, mentors may access your name and relevant details you share.

  • Legal Authorities: If required by law or to protect our rights, safety, or property.

  • Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity.

 

5. Your Rights

Depending on your location, you may have the following rights:

  • Access: Request a copy of the personal data we hold about you.

  • Correction: Ask us to correct inaccurate or incomplete data.

  • Deletion: Request that we delete your data, subject to legal exceptions (e.g., record-keeping obligations).

  • Restriction: Ask us to limit how we use your data.

  • Portability: Request your data in a machine-readable format (GDPR).

  • Objection: Object to processing based on legitimate interests or for direct marketing.

  • Withdraw Consent: Revoke consent where we rely on it (e.g., marketing emails).

  • CCPA Rights (California Residents): Request disclosure of data collected, sold, or shared, and opt out of any sale (though we do not sell data).

To exercise these rights, contact us at [Insert Contact Email]. We will respond within the timeframes required by law (e.g., 30 days under GDPR, 45 days under CCPA).

 

6. Cookies and Tracking Technologies

  • We use cookies and similar tools to enhance your Website experience, analyze usage, and deliver personalized content. These may include:

    • Essential Cookies: Necessary for the Website to function.

    • Analytics Cookies: To track usage patterns (e.g., via Google Analytics).

  • You can manage cookie preferences through your browser settings. Disabling cookies may affect Website functionality.

 

7. Data Security

  • We implement reasonable technical and organizational measures (e.g., encryption, access controls) to protect your data from unauthorized access, loss, or misuse. However, no online system is 100% secure, and we cannot guarantee absolute security.

 

8. Data Retention

  • We retain your personal information only as long as necessary:

    • Enrollment Data: For the duration of the Program and up to 5 years thereafter for administrative purposes, unless you request deletion sooner.

    • Session Recordings: For 6 months after the Program ends, unless you consent to longer retention or request earlier deletion.

    • Website Usage Data: For up to 2 years for analytics purposes.

  • We may keep data longer if required by law (e.g., tax records).

 

9. International Data Transfers

  • If you are outside New Zealand, your data may be transferred to and processed in New Zealand or other countries where our service providers operate (e.g., the USA for Zoom). We ensure such transfers comply with applicable laws, using safeguards like Standard Contractual Clauses (GDPR) where required.

 

10. Children’s Privacy

  • The Website and Program are not intended for individuals under 18. We do not knowingly collect data from minors. If we learn we have such data, we will delete it promptly.

 

11. Contact Us

  • For questions, requests, or complaints about this Privacy Policy or our data practices, please contact us at:

  • You may also lodge a complaint with your local data protection authority (e.g., the Office of the Privacy Commissioner in New Zealand, or your national authority under GDPR).

 

12. Changes to This Privacy Policy

  • We may update this Privacy Policy periodically. Changes will be posted on this page with a revised "Last Updated" date. Your continued use of the Website or Program after changes indicates your acceptance of the updated policy.

​

bottom of page