PREKURE Privacy Statement

Last updated: 12 December 2025

Scope

This Organisation Privacy Statement describes how PREKURE collects, uses, discloses and protects personal information in connection with all of our activities and services. This includes our education programmes, coaching related activities, events, research activity and other interactions, whether they occur online, by phone or in person.

For information that is collected through our websites and online learning platforms, you should read this Organisation Privacy Statement together with the Website Privacy Statement.

In this statement, “Your Information” means all information provided by you or collected by us in connection with your use of our services, including your personal information (including payment information) and health information.

Each time you use our services you consent to the collection, use and disclosure of Your Information by PREKURE in accordance with this Organisation Privacy Statement and the Website Privacy Statement. PREKURE may amend these privacy statements from time to time.

How we collect Your Information

PREKURE collects information that you provide to us, including (but not limited to) when you:

• complete a form
• enrol and participate in a course or programme
• join a community group
• enter a promotion
• join our community
• contact us with questions, feedback or complaints
• otherwise communicate with us via any platform, in person, or by phone.

This information may include your name, address, email address, telephone number, gender, age, payment information, health information and any other relevant information you provide. This information helps us to understand your needs and enhance your experience. You can choose not to provide information, but this may mean you will not be able to engage in certain PREKURE related activities or receive some services.

We may also collect information about you from:

• persons or organisations who contact us with a concern, complaint or other notification that concerns you
• persons or organisations you have authorised to provide information to us
• professional bodies and regulators, where this is permitted by law and relevant to your relationship with PREKURE.

Additional details about information collected through our websites and online learning platforms are set out in the Website Privacy Statement.

How we use Your Information

We collect and may use Your Information for the following purposes:

• personally communicating with you, including responding to your questions and correspondence and providing you information about programmes or courses for which you have expressed interest
• providing services to you, including delivering our courses, programmes and events
• processing transactions and managing your enrolments and payments
• improving your user and learning experience
• assessing, investigating and managing complaints or concerns, and responding to any concerns or issues we have, or complaints that you have raised with us as a graduate or student of any of our courses
• dealing with requests and verifying your identity
• quality improvement activities and maintaining and improving our services
• administrative purposes, which may include audits, surveys and research
• providing, maintaining and improving our Sites and learning platforms, including helping PREKURE to detect and prevent fraud and improve network security
• improving our advertising and marketing efforts and facilitating promotions
• research activity, including programme evaluation and development
• complying with our legal obligations
• other purposes authorised by you or required or permitted by law.

If you are enrolled in one of our courses or programmes, we may also receive information about you from your instructors, other students and third parties and may use that information to assess and consider your ongoing suitability to complete the course and receive any relevant certificate or qualification.

If we believe that you may present a risk to yourself, to the public or to PREKURE’s reputation, or otherwise have concerns about your suitability to complete the course or programme, we may raise that with you and have one or more members of our team monitor or communicate with you on an ongoing basis. We may also communicate our concerns to third parties, including professional bodies and health sector regulators, where we believe that is necessary to protect you, the public or PREKURE.

Lifestyle education programmes and 21 day programmes

When you enrol in our 21 day online programmes or Lifestyle Education Programmes (LEPs) we will request that you voluntarily provide us with information about yourself. We understand that sharing your private, personal information can be daunting and we want to assure you that the security of your information is very important to us. Our data management procedures are compliant with the Privacy Act.

We will ask you some general questions about who you are, including your age, gender and ethnicity, as well as some more personal questions about your health and wellbeing. In the post programme questionnaire we will also ask you about your experience with the programme.

We collect this information to review our programmes to ensure they are working effectively and helping people live a happy, healthier life. Your involvement in this process is invaluable and allows us to improve our programmes to better meet the needs of our customers. Providing us with Your Information is voluntary and it is not compulsory in any way. If you have any questions about this please email research@prekure.com. You can continue through our online programmes and will not be penalised in any way if you do not provide us with all of the information requested. Your experience will in no way be affected by your choice to withhold your information.

Your Information will be added together with information provided by other participants into a database. In this database Your Information is de identified, which means that you are not personally identifiable. We use this de identified information to perform statistical and qualitative analysis to understand how effective the programme was and where we can improve. PREKURE’s research and development staff have access to your identifiable information. Other staff members within PREKURE only have access to the de identified database. All PREKURE staff who have access to Your Information are required to sign a confidentiality agreement.

PREKURE may from time to time share our de identified database with AUT researchers. This sharing is governed by a data sharing agreement that outlines the way in which these researchers are allowed to use the information provided to them by PREKURE. This includes handling the data safely and securely and refraining from attempting to re identify the data. You are welcome to retract your information at any time and can email us at research@prekure.com to inform us that you would like your information to be retracted and deleted from our database. As per our retention and disposal policy we can only guarantee that your original identifiable data will be deleted. Any aggregated data that has been published in academic journals or PREKURE reports cannot practicably be removed.

Aggregated data (not your personally identifiable information) may also be shared with third parties.

Data collected by PREKURE trained Health Coaches

Students who graduate from PREKURE’s courses and continue on to provide coaching services do so entirely separate from PREKURE unless otherwise clearly communicated by PREKURE. These independent coaches may offer third party health coaching, fitness, nutrition and general health information for their clients.

PREKURE trained Health Coaches and their clients have separate contractual arrangements between them for coaching services and the coach is separately and solely responsible for ensuring they comply with the Privacy Act and relevant legislation. PREKURE does not have access to, collect, or store any information relating to services that may be provided by a PREKURE trained coach, except where there is a further relevant arrangement between PREKURE and that coach, for example where a coach is acting as an instructor in a PREKURE programme.

When we may share or disclose Your Information

We may share Your Information for the purposes set out in this Organisation Privacy Statement, including where:

• you have authorised us to do so or we have told you about the intended disclosure
• we are responding to any concerns or issues we have identified, or complaints that you or others have raised with us, including by providing relevant information about a graduate or student of any of our courses to a professional body, regulatory authority or other relevant body
• we believe it is necessary to prevent a serious risk to your or any person’s health or safety
• we are complying with our legal obligations (including responding to regulatory authorities such as the Health and Disability Commissioner, the Privacy Commissioner and any other bodies)
• required by your insurer or another organisation that has arranged and or paid for you to attend our courses and programmes
• required for other purposes authorised by you or required or permitted by law
• we believe that such action is necessary to protect the property or rights of PREKURE, relevant third parties, or the public at large.

We do not sell, trade or rent users’ personally identifiable information, and we do not disclose Your Information to any third party for their own marketing purposes.

From time to time, PREKURE may share some of Your Information with our business partners and service providers to operate and improve the Sites and learning platforms, to process payments, to transmit emails, to conduct promotions, to host and protect data, to manage advertising, and to host and protect data, to manage advertising, to power our Artificial Intelligence (AI) tools (including OpenAI, AWS, and Pinecone), and to offer technical and customer support. For example, if you choose to receive PREKURE marketing materials or other promotional items, PREKURE may provide Your Information to third parties entrusted with fulfilling those requests. You may opt out of receiving these and other emails from PREKURE at any time through the “unsubscribe” or “manage preferences” link included in such emails.

We also use third party communication tools such as Zoom and Google Meet for video sessions, webinars and sales calls. Your participation in those sessions may involve personal information being processed by those providers in accordance with their own privacy policies.

International transfers and storage

We use service providers to store and manage personal information on our behalf. In particular, personal information collected through our customer relationship management system is stored in HubSpot data centres located in Sydney, Australia.

Some of our other service providers may be located, or may store information, outside New Zealand. Where we transfer personal information outside New Zealand, we will ensure that it is protected by privacy safeguards that are comparable to those in the Privacy Act or otherwise in a way that complies with the Privacy Act.

Retention of Your Information

We retain Your Information only as long as necessary to serve the purposes for which we collect it or as required or permitted by law.

We are required by law to keep your health information for 10 years from the date it was last accessed.

If we have not accessed Your Information for 10 years it will be permanently deleted from all sources, including the original collection forms, from our database and from any locations where it has been backed up, unless we are required by law to retain it for longer. PREKURE cannot guarantee that your aggregated data will be deleted, as this is not practicable. Aggregated data refers to when we add your de identified information with those of other participants to identify general trends. This data is published in reports and academic journal articles and cannot feasibly be deleted. You will be emailed a copy of each of your questionnaires directly after submitting them to us.

How we protect Your Information

PREKURE employs appropriate technical and organisational safeguards to protect your information, including encrypted and certified web sockets, best practices for user management and security policy, and regular updates for known security issues.

When users submit personal information via the Sites, all information is protected both online and offline. However, due to the nature of the internet, PREKURE cannot guarantee or warrant the security of any information transmitted to us or through our Sites or learning platforms. Users submit information at their own risk. If a breach is discovered, PREKURE will meet its obligations under the Privacy Act.

PREKURE stores Your Information securely on our customer relationship management (CRM) system and other secure systems. We take reasonable steps to protect the information we hold about you from loss, misuse, unauthorised access, disclosure, alteration or destruction. However, there are some inherent risks associated with internet technologies that are outside our control.

Access to and correction of Your Information

Unless an exception under the Privacy Act applies, you have the right to request access to and correction of Your Information held by PREKURE.

If, at any time, you wish to obtain a copy of, update or correct Your Information, or would like to discuss anything in relation to Your Information, you can contact us at support@prekure.com.

We can only release Your Information directly to you and may ask you to prove your identity when making requests.

Please note that removing your information from our databases will preclude you from receiving any updates from PREKURE, including (but not limited to) free resources, new courses, and information and discounts for upcoming events and products.

If you have any questions or concerns you can contact us at any time and request to view our data management policies.