Privacy Policy

Privacy Policy

ByLauren | www.bylauren.co | Last updated: March 2026

1. Introduction

ByLauren ("we", "us", "our") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store and share information about you when you use our website www.bylauren.co and its associated services.

We comply with the Privacy Act 2020 (New Zealand) and, where applicable, the requirements of overseas privacy laws including the Australian Privacy Act 1988 and the EU General Data Protection Regulation (GDPR).

2. What Information We Collect

2.1 Information You Provide

• Name and email address (when subscribing to our newsletter or creating an account)
• Billing and shipping address (when making a purchase)
• Payment information (processed securely via our payment provider — we do not store card details)
• Date of birth and location data (when ordering a Soul Codex or similar personalised service)
• Messages and enquiries submitted via our contact form
• Information shared during 1:1 sessions or mentorship

2.2 Information We Collect Automatically

• IP address and browser type
• Pages visited and time spent on the site
• Referral source (how you found us)
• Device and operating system information
• Cookie and tracking data (see our Cookies Policy)

3. How We Use Your Information

We use your personal information to:

• Process and fulfil your orders
• Deliver services you have booked or purchased
• Send transactional emails (order confirmations, tracking updates)
• Send marketing emails where you have given consent (you can unsubscribe at any time)
• Improve our website and offerings
• Comply with legal obligations
• Respond to your enquiries

4. Legal Basis for Processing (GDPR)

Where the GDPR applies, we process your data on the following legal bases:

• Contract performance: to fulfil your order or service agreement
• Legitimate interests: to improve our website and services
• Consent: for marketing emails (you may withdraw at any time)
• Legal obligation: where required by law

5. Sharing Your Information

We do not sell your personal information. We may share it with:

• Payment processors (e.g. Stripe) solely for payment processing
• Shipping carriers to fulfil delivery of physical goods
• Email marketing platforms (e.g. for newsletter delivery)
• Website hosting and technology service providers
• Law enforcement or regulatory authorities where required by law

All third-party providers are contractually required to handle your data securely and in accordance with applicable privacy laws.

6. International Data Transfers

As our service providers may be based outside New Zealand, your data may be transferred internationally. Where this occurs, we take steps to ensure an adequate level of protection is in place, consistent with the Privacy Act 2020.

7. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Order records are typically retained for 7 years for accounting purposes. Marketing consent records are kept until you unsubscribe.

8. Your Rights

Under New Zealand's Privacy Act 2020 and, where applicable, the GDPR, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information (subject to legal obligations)
• Object to or restrict certain types of processing
• Data portability (where applicable under GDPR)
• Withdraw consent for marketing at any time by clicking 'unsubscribe' in any email

To exercise any of these rights, please contact us via www.bylauren.co/contact.

9. Security

We take reasonable technical and organisational measures to protect your personal information from unauthorised access, loss or misuse. However, no internet transmission is completely secure and we cannot guarantee absolute security.

10. Children's Privacy

Our website is not directed at children under 16 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with their information, please contact us immediately.

11. Links to Third-Party Sites

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The current version will always be posted on our website with the date it was last updated.

13. Complaints

If you have a complaint about how we have handled your personal information, please contact us in the first instance. If you remain unsatisfied, you may lodge a complaint with the Office of the Privacy Commissioner (New Zealand): www.privacy.org.nz

14. Contact

For any privacy-related enquiries, please contact us via www.bylauren.co/contact.

ByLauren | Moksha – Embodied Wisdom for Modern Life | www.bylauren.co