PRIVACY POLICY 

Last updated: 27 June 2026

Hathor Heka Ltd respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store and disclose personal information when you visit www.siahuheka.com, contact us, subscribe to our communications, purchase an offering, or participate in one of our courses, workshops, events, retreats or online communities.

This policy has been prepared in accordance with the New Zealand Privacy Act 2020 and its Information Privacy Principles. These principles govern how New Zealand businesses collect, use, store, share and protect personal information.  

1. Who we are

This website and its associated services are operated by:

Hathor Heka Ltd
Trading as Sia Hu Heka / Hathor Heka School
Auckland, New Zealand
Email: info@siahuheka.com

For the purposes of applicable privacy law, Hathor Heka Ltd is responsible for the personal information described in this policy.

2. Information we may collect

Depending on how you interact with us, we may collect:

• Your name, email address, phone number, country and contact details.
• Billing and transaction information.
• Information included in application, registration, enquiry or feedback forms.
• Information you voluntarily share about your intentions, experiences, accessibility requirements, dietary needs, wellbeing or participation needs.
• Your communications with us, including emails, messages and support enquiries.
• Information relating to your participation in courses, retreats, workshops, mentoring or community spaces.
• Photographs, video or audio recordings where you have been informed and, where appropriate, have provided consent.
• Website and technical information, such as your IP address, browser, device type, pages visited, referral source and website activity.
• Marketing preferences and information about how you engage with our emails.
• Any other information you voluntarily provide to us.

Please do not provide information about another person unless you have their permission to do so.

3. How we collect information

We may collect personal information:

• Directly from you when you complete a form, subscribe, apply, register, make a purchase or contact us.
• When you participate in one of our programmes, events, communities or online calls.
• Automatically through cookies, analytics and similar website technologies.
• Through payment, booking, course-hosting and communication platforms used to provide our services.
• From another person where they make an enquiry or booking on your behalf, recommend you, or provide your details with your knowledge or authorisation.
• From publicly available sources where reasonably necessary and legally permitted.

Where we receive personal information indirectly, we will take reasonable steps to ensure you are informed when required. New Zealand’s updated Privacy Act notification requirement for information collected from another source, known as IPP 3A, came into force on 1 May 2026.  

4. Why we collect and use your information

We may use your personal information to:

• Respond to enquiries and communicate with you.
• Review applications for courses, retreats, workshops and other offerings.
• Process registrations, purchases, invoices and payment plans.
• Provide access to online programmes, recordings, resources and community spaces.
• Deliver and administer events, retreats, mentorships and educational programmes.
• Understand and support your practical, dietary, accessibility or participation needs.
• Send important information about an offering you have purchased or joined.
• Send newsletters, announcements and promotional communications where you have subscribed or otherwise permitted us to do so.
• Improve our website, communications, offerings and participant experience.
• Maintain business, accounting, tax and legal records.
• Protect the safety, integrity and operation of our programmes and communities.
• Prevent fraud, misuse, security threats or unlawful activity.
• Meet our legal and regulatory obligations.
• Exercise or defend legal rights.

We will only use your information for the purpose for which it was collected, for a directly related purpose, with your authorisation, or where otherwise permitted or required by law.

5. Providing your information

You may choose not to provide personal information. However, some information is necessary for us to respond to you, process a booking, assess an application, accept payment or safely deliver an offering.

When a form requests information, required fields will generally be identified. If you do not provide required information, we may be unable to provide the relevant service or complete your registration.

6. Sensitive and wellbeing-related information

Some applications or participation forms may invite you to share information about your physical, emotional or psychological wellbeing, accessibility, dietary requirements or relevant personal circumstances.

We request this information only when reasonably necessary to:

• Assess whether an offering is appropriate for you.
• Support informed and responsible participation.
• Make reasonable practical or accessibility arrangements.
• Respond to health or safety concerns during an event or retreat.

We will treat this information with particular care and limit access to those who reasonably need it.

Our educational and spiritual offerings are not a replacement for medical care, psychological treatment, diagnosis or emergency services.

7. Payments

Payments may be processed through third-party payment providers such as Stripe, PayPal, bank transfer platforms or other secure payment services.

We do not generally receive or store your complete debit or credit card details. Payment providers process those details under their own privacy policies and security practices.

We may retain information about your purchase, payment status, invoices, refunds and transaction history for accounting, contractual, tax and administrative purposes.

8. Service providers and disclosure

We do not sell or rent your personal information.

We may share information with trusted third parties who help us operate our business and provide our services. Depending on the services you use, these may include:

• Website and course-hosting providers, including Kajabi.
• Payment providers, such as Stripe and PayPal.
• Accounting and invoicing systems, including Xero.
• Email and cloud-service providers, including Google.
• Video-conferencing providers, including Zoom.
• Booking, ticketing or scheduling platforms.
• Email marketing and communication providers.
• Website analytics and advertising providers.
• Professional advisers, accountants, contractors, facilitators and support-team members.
• Retreat venues, caterers or travel providers where information is reasonably necessary to fulfil your booking.
• Government, regulatory, law-enforcement or emergency authorities where disclosure is required or permitted by law.

These providers are given only the information reasonably necessary to perform their services.

9. International storage and transfers

Some of our digital service providers may store or process information outside New Zealand, including in Australia, the United States, Europe or other jurisdictions.

When disclosing personal information outside New Zealand, we take reasonable steps to use reputable providers and ensure the disclosure is consistent with applicable New Zealand privacy requirements. Principle 12 of the Privacy Act 2020 specifically governs disclosures of personal information outside New Zealand.  

Privacy and data-protection laws in another country may differ from those in New Zealand.

10. Email marketing

When you subscribe to our mailing list, download a resource, register your interest or otherwise consent to receive marketing, we may send you information about our teachings, events, courses and related offerings.

You may unsubscribe at any time by:

• Selecting the unsubscribe link in one of our marketing emails; or
• Contacting info@siahuheka.com.

Unsubscribing from marketing will not prevent us from sending essential administrative communications relating to a purchase, booking or programme in which you are participating.

11. Cookies and website analytics

Our website may use cookies and similar technologies. Cookies are small data files stored on your browser or device. They may be used to:

• Enable essential website functions.
• Remember your preferences.
• Understand website traffic and visitor behaviour.
• Improve website performance and user experience.
• Measure the effectiveness of communications and promotions.
• Deliver or measure relevant advertising, where applicable.

Some cookies may be placed by third-party services embedded in or connected to the website.

You can restrict or disable cookies through your browser settings. Disabling certain cookies may affect how the website functions. Cookies are commonly used to support website navigation, functionality and analytics.  

12. Online communities and group spaces

Some offerings may include access to group calls, Facebook groups, WhatsApp groups, online forums or other shared community spaces.

Information you voluntarily share in these spaces may be visible to other participants. Although we establish confidentiality agreements and community guidelines where appropriate, we cannot guarantee the conduct of every participant or prevent others from retaining or disclosing information shared with them.

Please exercise care and personal discernment when sharing sensitive information in a group environment.

13. Recordings, photographs and testimonials

Online calls, teachings or events may sometimes be recorded. When recording is planned, participants will be informed.

Recordings may be made available to participants enrolled in the relevant programme. We will take reasonable steps to avoid using identifiable personal sharing for public promotional purposes without appropriate permission.

We will seek consent before intentionally using an identifiable photograph, recording, written testimonial or personal story in public marketing, unless it was originally submitted by you for that stated purpose.

You may withdraw permission for future use by contacting us. Withdrawal will not necessarily apply retrospectively to materials already lawfully published, printed or distributed.

14. Security

We take reasonable technical and organisational measures to protect personal information from loss, misuse, unauthorised access, alteration or disclosure.

These measures may include password-protected systems, access controls, reputable service providers, secure payment processing and limiting access to people who need the information for legitimate business purposes.

No internet transmission or electronic storage system is completely secure. We therefore cannot guarantee absolute security.

If you believe your information has been compromised, contact us promptly at info@siahuheka.com.

15. How long we keep information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including to:

• Provide services and participant access.
• Maintain accurate business and financial records.
• Meet tax, accounting, insurance and legal requirements.
• Resolve disputes or respond to complaints.
• Protect our legitimate legal and business interests.

When information is no longer reasonably required, we may securely delete, destroy or anonymise it.

16. Your privacy rights

Under the New Zealand Privacy Act 2020, you may ask us to:

• Confirm whether we hold personal information about you.
• Provide access to the personal information we hold about you.
• Correct information that is inaccurate or incomplete.
• Attach a statement of correction if a requested correction is not made.

The Privacy Act gives individuals the right to request access to and correction of personal information held by an organisation.  

You may also:

• Withdraw consent where our use of information is based on your consent.
• Unsubscribe from marketing communications.
• Ask questions or raise concerns about how your information is handled.
• Request deletion of information, although we may need to retain some records for legal, contractual, accounting or legitimate business purposes.

To make a request, contact info@siahuheka.com. We may need to verify your identity before releasing or changing personal information.

17. European and United Kingdom visitors

If you are located in the European Economic Area or the United Kingdom, additional rights may apply under local data-protection laws. Depending on the circumstances, these may include rights relating to access, correction, deletion, restriction, objection, portability and withdrawal of consent.

The GDPR can apply to organisations outside the European Union when they offer goods or services to people located in the EU.  

Where applicable, we process personal information on one or more of the following grounds:

• Your consent.
• The performance of a contract with you.
• Compliance with a legal obligation.
• Our legitimate interests, provided those interests do not override your fundamental rights.
• Protection of vital interests in an emergency.

18. Children’s privacy

Our website and general offerings are not directed to children under 18 unless a particular offering expressly states otherwise.

We do not knowingly collect personal information from a child without appropriate involvement or authorisation from a parent or legal guardian where required.

19. External links

Our website may contain links to third-party websites, platforms or services. We are not responsible for the privacy, content or security practices of those third parties.

We encourage you to review the privacy policies of any external services you visit or use.

20. Privacy concerns and complaints

Please contact us first if you have a question, request or concern about your personal information:

Privacy Officer
Hathor Heka Ltd
Email: info@siahuheka.com

Every New Zealand business or organisation is required to have a privacy officer.  

We will take your concern seriously and aim to respond within a reasonable period.

You may also make a complaint to the Office of the Privacy Commissioner of New Zealand if you believe your privacy rights have been breached.

21. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes to our services, technologies, business practices or legal obligations.

The updated version will be published on this website with a revised “Last updated” date. Your continued use of the website following an update signifies your acknowledgement of the revised policy.