Privacy Policy

Effective date: 1 February 2026

This policy explains how The Middle Space Ltd, trading as Hiria Cameron (“we”, “us” or “our”), collects, uses, stores and shares personal information. We handle personal information in accordance with the New Zealand Privacy Act 2020.

1.Who we are

Legal entity

The Middle Space Ltd

Trading name

Hiria Cameron

Privacy Officer

Hiria Cameron

Contact

Hiria.Cameron@themiddlespace.co.nz

2.Information we may collect

Depending on how you interact with us, we may collect:

•your name, contact details and billing information;

•programme applications, registrations and scheduling information;

•goals, reflections, beliefs and other information you choose to share during coaching;

•call notes, action points and shared programme records;

•emails, messages, voice notes and other communications;

•feedback, testimonials and survey responses;

•website, device and general usage information; and

•information required for legal, tax, accounting or business administration purposes.

Please avoid sending highly sensitive information that is not reasonably necessary for your coaching or ourservices.

3.How we collect information

•directly from you;

•through our website, forms, email and social media pages;

•during coaching calls and programme activities;

•through Stripe and other payment providers;

•through scheduling, video-call, file-storage and communication platforms;

•from someone you have authorised; or

•from publicly available sources where lawful and relevant.

4. Why we use your information

• respond to enquiries and assess programme suitability;

• enrol and support you;

• personalise coaching and programme delivery;

• schedule calls and communicate with you;

• process payments and maintain financial records;

• create and maintain programme records, including your Belief and Evidence Record;

• provide resources, accountability and agreed support;

• improve our services and request feedback;

• send programme or marketing communications where permitted;

• manage concerns, security issues or disputes; and

• meet legal, tax, accounting and regulatory obligations.

We aim to collect only information that is reasonably necessary for these purposes.

5. Coaching information

Coaching may involve personal stories, goals, family or relationship context, cultural perspectives, spiritual beliefs, wellbeing concerns and other information you voluntarily share. We use this information to provide the coaching service and maintain appropriate records.

You decide what you disclose. You may ask why information is being requested or decline to provide it, although this may affect our ability to provide some parts of the service.

6. Payments

Payments are processed by Stripe or another payment provider identified at checkout. The provider handles payment-card and transaction information under its own privacy terms. We generally receive information such as your name, contact details, payment status, payment method type and transaction history, rather than your full card number.

7. Service providers and overseas processing

We may use trusted providers for payment processing, email and messaging, appointment scheduling, video calls, online forms, cloud storage, accounting, website hosting, document creation and programme administration.

Some providers may store or process information outside New Zealand. Where personal information is disclosed overseas, we will take reasonable steps to ensure it is protected consistently with New Zealand privacy requirements or otherwise rely on a lawful basis for disclosure.

8. When we may share information

We do not sell your personal information. We may share it:

• with service providers supporting our business;

• with professional advisers who are subject to confidentiality obligations;

• where you have authorised the disclosure;

• where disclosure is reasonably necessary to deliver a service you requested;

• to prevent or respond to a serious safety concern;

• to investigate fraud, misuse or unlawful conduct; or

• where required or permitted by law.

We will not use your identity, story, photograph or results in marketing without your permission.

9. Storage and security

We take reasonable safeguards to protect personal information from loss, unauthorised access, misuse, alteration or disclosure. Safeguards may include password-protected accounts, multi-factor authentication where available, restricted access, secure cloud services, device security and careful management of physical records.

No online system is completely risk-free. We will respond promptly to suspected privacy or security incidents. Where a privacy breach is likely to cause serious harm, we will notify affected people and the Office of the Privacy Commissioner as required by law.

10. How long we retain information

We retain information only for as long as it is reasonably required to provide services, maintain appropriate coaching and business records, resolve concerns, meet legal, tax and accounting obligations, or protect legitimate legal interests. When information is no longer required, we may securely delete, destroy or anonymise it.

11. Marketing communications

We may send updates about programmes, resources or events where you have requested them, consented, or we are otherwise legally permitted to contact you. You may unsubscribe at any time. Administrative communications about a service you purchased are not marketing and may still be sent where needed to provide that service.

12. Cookies and website information

Our website may use cookies or similar technologies to operate website functions, understand general use, maintain security, remember preferences and assess marketing performance. You can restrict cookies through your browser settings, although some functions may be affected.

13. Access and correction

You may ask us to confirm whether we hold personal information about you, provide access to that information, or correct information you believe is inaccurate. Contact the Privacy Officer at Hiria.Cameron@themiddlespace.co.nz. We may need to verify your identity before responding. In limited circumstances, the law may permit or require us to withhold information, and we will explain this where required.

14. Privacy concerns

Please contact us first if you believe we have not handled your information appropriately. We will review your concern and respond as reasonably practicable. You may also make a complaint to the New Zealand Office of the Privacy Commissioner.

15. Changes to this policy

We may update this policy when our services, systems or privacy obligations change. The latest version will be published with its effective date.

16. Contact

Privacy Officer: Hiria Cameron Email: Hiria.Cameron@themiddlespace.co.nz

Business: The Middle Space Ltd, trading as Hiria Cameron

Practical note: This policy is a plain-language operational document and is not a substitute for individual legal advice.