Privacy policy

Last updated: 22 October 2026

DefineHER is an online training, nutrition and coaching service provided by bodyco. This policy explains how bodyco. collects, holds, uses and shares personal information through DefineHER’s website, free 5-Day Kickstart, membership and coaching app.

Who is responsible

bodyco. collects and holds your information, including information stored by providers on our behalf. Contact Aimee Sutorius at bodyco. for privacy questions, requests or complaints:

bodyco.
75/7 Tunnel Grove, Gracefield, Lower Hutt 5010, New Zealand
Email: [email protected]

What we collect and why

• Kickstart and enquiries: your name, email and information you choose to include in a message, so we can deliver the Kickstart, answer questions and send the related guidance and follow-up information about DefineHER.
• Membership and coaching: contact and account details, goals, training logs, check-ins, nutrition and progress information, and relevant health or injury information you provide. These help your coach plan appropriate training, review progress and give personal weekly feedback. Measurements and progress photos are used for coaching when you choose to provide them.
• Payments: subscription status, transaction records and payment references to administer your membership. Card payments are handled through the checkout’s payment provider; please do not email card details.
• Website and service records: technical information such as IP address, browser/device information and service activity may be recorded by the website and app providers to operate, secure and troubleshoot the service.

Your choices

Giving information is voluntary. We need an email address to deliver the Kickstart, and account and payment details to provide a paid membership. If you withhold information necessary for coaching safely, we may be unable to provide a suitable programme until we discuss it with you. You do not have to provide public testimonials or marketing photos.

We collect information directly from you wherever practicable. Payment and app providers also supply records connected with your membership, such as payment status and activity you log. We use these for the purposes described here.

Email and marketing

Signing up for Kickstart requests the guide and its related email sequence, including follow-up information about the next step into DefineHER. We explain this at signup. You can unsubscribe using the link in an email or contact us. Unsubscribing from marketing does not cancel a paid membership; essential billing, service and account messages may still be sent. We will ask separately before using your identifiable photos, story or testimonial in marketing.

Who receives information

Information is available to your coach and people who need it to administer or support the service. Providers include My PT Hub for the coaching app and membership administration, Friender/HighLevel for website forms, contact records and emails, and Stripe where it processes your checkout payment. Platform administrators and technical support providers may have access needed to support these systems. These providers receive the information needed for their functions; their own privacy notices explain any processing they undertake independently.

We do not sell your personal information. We may share it when you authorise us, where required or permitted by law, or where necessary to address a serious threat to health or safety. We will not publish your coaching information without your permission.

Overseas processing

Our cloud and payment providers may store or process information outside New Zealand. bodyco. remains responsible for information processed on our behalf. We require appropriate protections for that processing. If information is disclosed overseas for a recipient’s own use, we must have a lawful basis and meet applicable New Zealand privacy requirements, including comparable safeguards or another permitted basis.

Cookies and embedded services

The website and embedded signup forms use browser and technical functions to operate the service. Our providers may use cookies or similar storage for functionality, security and service activity. You can control cookies through your browser, although blocking them may affect signup or access. Embedded content, including video services when linked, may process technical information under the provider’s privacy notice. This policy does not authorise undisclosed advertising uses of your coaching information.

Advertising cookies and Meta

Our public homepage and GLP-1 marketing pages offer optional Meta advertising cookies. They stay off until you choose Accept. If you accept, Meta receives browser/device identifiers and basic visit information to help measure advertising. Meta may connect this information with your Facebook or Instagram activity and process it overseas under its Privacy Policy.

This website tracker does not send coaching records, check-in answers, medication details, food logs, contact-form entries or payment details. Automatic advanced matching and automatic detailed page/product collection are disabled. Meta’s restricted core setup is enabled. The tracker is not installed by us in the coaching app, checkout or Start Here page, and website visits are not recorded as purchases.

You can reject advertising cookies and still use the website. Use Cookie preferences on a marketing page to change your choice at any time. Your choice is stored in this browser for up to 180 days. Rejecting stops future tracking through this website tracker and removes its accessible Meta cookies; it does not recall information already received by Meta. A supported Global Privacy Control signal also keeps this tracker off.

Keeping information safe and only as long as needed

We take reasonable steps to protect information against loss, unauthorised access, misuse and disclosure, and limit access to people who need it. Please use the coaching app for sensitive check-in information and keep your login details private.

We retain information only while it is needed for the purpose collected, ongoing service, legitimate record-keeping or legal obligations. We review information no longer needed and delete or anonymise it where appropriate. Billing records may need to be retained for accounting and legal purposes. Unsubscribing stops marketing, but does not automatically erase records that we still need. You can ask about retention or request deletion; we will explain any records we must retain.

If a privacy breach causes or is likely to cause serious harm, we will notify the Privacy Commissioner and affected people as required by law.

Access, correction and complaints

You can ask for access to personal information we hold about you or ask us to correct it. Contact DefineHER using the details above. We may check your identity before releasing information. We will respond as soon as reasonably practicable, normally within 20 working days; if a lawful extension is needed, we will explain why. If we do not make a requested correction, you can ask us to attach a statement of the correction you sought.

Please contact us first if you have a privacy concern. You can also contact the Office of the Privacy Commissioner.

Changes

We will update this policy when our practices change and make the current version available here. Materially different uses of your information will be explained before they begin, with consent sought where required.