Flow On the Road

Creativity Co.

Privacy Policy

Introduction

Ailene Cuthbertson trading as Flow On The Road Creativity Co. (we, us, our) complies with the New Zealand Privacy Act 2020 (the Act) when dealing with personal information. Personal information is information about an identifiable individual (a natural person).

This policy sets out how we will collect, use, disclose and protect your personal information.

This policy does not limit or exclude any of your rights under the Act. If you wish to seek further information on the Act, see www.privacy.org.nz.

Changes to this policy

We may change this policy by uploading a revised policy onto the website. The change will apply from the date that we upload the revised policy.

This policy was last updated on 5 August 2025.

Privacy officer

Our designated privacy officer is Ailene Cuthbertson. For privacy-related enquiries, contact: ailene@flowontheroad.com

Who do we collection your personal information from

We collect personal information about you from:

  • You, when you provide that personal information to us, including:
    • Via our website and related services
    • Through registration or subscription processes
    • Through contact with us (email or contact forms)
    • When you purchase or use our services and products
  • Third parties where you have authorised this or the information is publicly available

If possible, we will collect personal information from you directly.

What information we collect and how we use it

The types of personal information we may collect include:

  • Course activity: Information relating to your use of a course, such as answered questions, overall engagements, stats, and activity logs
  • Contact information: Name and email address
  • Payment information: Processed securely through our payment provider (we do not store credit card details)
  • Communication records: Email address, contact form submissions, and other correspondence
  • Purchase history: Records of courses purchased and order details
  • Newsletter preferences and engagement: Email address and engagement data (such as emails opened, links clicked, and referral activity) if you subscribe to our newsletter
  • Referral program information: Referral links, reward preferences, and referral tracking data (if you participate in our newsletter referral program)

How we use your personal information

We will use your personal information:

  • To provide services and products to you, including delivering online courses
  • To communicate with you about your orders and respond to your enquiries
  • To maintain business records and comply with legal obligations
  • To send you our newsletter (only if you have separately subscribed via our newsletter service)
  • To improve the services and products that we provide to you
  • To conduct research and statistical analysis (on an anonymised basis)
  • To protect and/or enforce our legal rights and interests, including defending any claim
  • For any other purpose authorised by you or the Act

Disclosing your personal information

We may disclose your personal information to:

Service providers that support our business operations:

  • Payment processing: Secure payment providers (currently Stripe)
  • Course services: Third-party course platform (currently MemberVault)
  • Workflow automation: Cloud-based automation services that may process contact form submissions
  • Customer management: Cloud-based system for storing contact and order information
  • Transactional email services: Cloud-based system for sending automated emails such as contact form submissions and customer service communications
  • Newsletter services: Third-party newsletter platform (currently Kit)
  • Referral program management: Third-party service for managing newsletter referral rewards (currently SparkLoop)

Other parties:

  • Any other person authorised by you
  • Any person who can require us to supply your personal information (e.g. a regulatory authority)
  • Any other person authorised by the Act or another law (e.g. a law enforcement agency)

A business that supports our services and products may be located outside New Zealand. This may mean your personal information is held and processed outside New Zealand.

Children’s privacy

We do not knowingly collect personal information from children under 18 years of age without parental consent. If we become aware that we have collected such information, we will take steps to delete it promptly.

Protecting your personal information

We will take reasonable steps to keep your personal information safe from loss, unauthorised activity, or other misuse.

Accessing and correcting your personal information

Subject to certain grounds for refusal set out in the Act, you have the right to access your readily retrievable personal information that we hold and to request a correction to your personal information. Before you exercise this right, we will need evidence to confirm that you are the individual to whom the personal information relates.

In respect of a request for correction, if we think the correction is reasonable and we are reasonably able to change the personal information, we will make the correction. If we do not make the correction, we will take reasonable steps to note on the personal information that you requested the correction.

Course account updating: If you wish to update the information in your course profile, you can manage this directly through your MemberVault account.

Newsletter unsubscribing: If you wish to opt out of our newsletter, you can click the unsubscribe link at the bottom of every newsletter email we send, or manage your subscription directly through Kit.

Exercising your rights: If you want to exercise any of the above rights, email us at ailene@flowontheroad.com.

Your email should provide evidence of who you are and set out the details of your request (e.g. the personal information, or the correction, that you are requesting).

We may charge you our reasonable costs of providing to you copies of your personal information or correcting that information.

GDPR Rights (EU Residents)

If you are in the EU, you have additional rights:

  • Object: Stop processing based on legitimate interests (including marketing)
  • Restrict: Pause processing while we resolve disputes
  • Portability: Receive your data in machine-readable format
  • Supervisory authority: Lodge complaints with your local data protection authority

Legal basis for processing:

  • Course delivery: Contract performance
  • Customer service: Contract performance
  • Business records: Legal obligation
  • Newsletter: Consent
  • Service improvement: Legitimate interest

Internet use

While we take reasonable steps to maintain secure internet connections, if you provide us with personal information over the internet, the provision of that information is at your own risk.

If you follow a link on our website to another site, the owner of that site will have its own privacy policy relating to your personal information. We suggest you review that site’s privacy policy before you provide personal information.

Cookies

Our website is a static website and does not use cookies or similar tracking technologies directly. However, we do use embedded content from third-party services that may use their own tracking technologies.

Embedded content from other websites

Pages on this site may include embedded content, including but not limited to newsletter subscription forms from Kit. Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

Kit subscription forms: Kit may use cookies, collect data about you, and track your interaction with the subscription form. This data collection is governed by Kit’s privacy policy, not ours

You can choose not to interact with embedded content to avoid any data collection by these third-party services.

Contacting us

If you have any questions about this privacy policy, our privacy practices, or if you would like to request access to, or correction of, your personal information, you can contact us at: