Terms & Policies

Yodha Wellness is operated by Aspire International Limited. Our business location is Rolleston, Canterbury, New Zealand.

For all privacy questions, access or correction requests, withdrawal of marketing consent, complaints or other privacy communications, contact optimaltheory.nz@gmail.com.

This Policy applies when you visit our Website, make an enquiry, create or use an account, book a consultation, purchase or participate in a program, complete an assessment or questionnaire, communicate with our team, upload information or otherwise use Yodha Wellness services.

Our Website is built using Base44 technology. Base44 and other technology providers may process information on our behalf in order to operate the Website and its features.

The personal information we collect depends on how you interact with us and the service you request. We aim to collect only information reasonably necessary for the relevant purpose.

Identity and contact information, such as name, email address, telephone number, age or date of birth where relevant, country or general location

Booking and account information, such as appointments, account details, program enrolment, login or authentication information and communication preferences

Transaction information, such as service purchased, amount, invoice, payment status and transaction date

Health and wellness information where relevant, such as health history, injuries, pain, physical limitations, exercise history, fitness level, nutrition information, allergies, intolerances, medication information relevant to safety, pregnancy or postpartum information, body measurements, health goals, lifestyle, sleep and recovery

Communications, documents, photographs, videos or information you choose to send us

Technical information, such as IP address, browser/device information, login activity, Website activity, security logs and diagnostic information

Some Yodha Wellness services may involve information about your health or physical wellbeing. We recognise that this information can be sensitive and requires appropriate care.

Where Yodha Wellness or an individual professional is acting as a health agency in relation to identifiable health information, the New Zealand Health Information Privacy Code 2020 may apply. Where it does, health information will be handled consistently with the applicable health information privacy rules.

Access to identifiable health information will be limited, where reasonably practicable, to people who require it for an authorised service, administrative, legal or safety purpose.

We generally collect information directly from you through Website forms, bookings, questionnaires, consultations, emails, account use, payment processes, assessments and ongoing coaching communications.

In limited circumstances, we may receive information from another person or organisation, for example a parent or guardian, referring professional, healthcare professional or other person you have authorised. Where New Zealand privacy law requires notice of indirect collection, including the Privacy Act 2020 principle 3A or corresponding health privacy rule 3A where applicable, we will take reasonable steps to provide that notice.

We may use personal information where reasonably necessary to provide and manage Yodha Wellness services and to meet our legal, professional, safety and operational obligations.

Respond to enquiries and communicate with you

Assess the suitability and safety of a fitness, nutrition or wellness service

Develop or provide personalised programs and recommendations

Manage appointments, accounts, payments, invoices and program administration

Monitor progress and provide coaching or practitioner support

Maintain appropriate client and professional records

Operate, secure, maintain and improve the Website and related systems

Prevent fraud, misuse, unauthorised access or security incidents

Respond to complaints and legal or regulatory obligations

Protect health, safety, legal rights and legitimate business interests

Send marketing where permitted by law and in accordance with your preferences

We may use your contact details to send necessary communications about your enquiry, booking, payment, appointment, program, account or service. Questions about these communications can be sent to optimaltheory.nz@gmail.com.

Where we send optional marketing, you may opt out using the unsubscribe method provided or by emailing optimaltheory.nz@gmail.com. Opting out of marketing will not stop necessary service or transactional communications.

Our Website is built using Base44. Under Base44's current Data Processing Addendum, the app owner determines the purpose and nature of processing of its users' personal data, while Base44 processes relevant app data on the app owner's behalf as a platform provider.

Base44 may use subprocessors and infrastructure providers to provide services such as hosting, data storage, server services, email transmission, analytics, media hosting, logging and AI-related functionality. The specific providers used by Base44 may change over time.

If we enable an integration with another third-party service, information may be shared with that provider only to the extent necessary for the enabled function and subject to the applicable agreement and privacy requirements.

Personal information may be stored or processed outside New Zealand or the country in which you are located.

Base44's current documentation states that the default app-data region is the United States. For eligible Elite or Enterprise workspaces, Base44 currently provides options for certain newly created apps to store app data in the EU or UK. Data-residency settings control storage location and do not necessarily mean that all processing occurs only in that region.

Base44 also states that some categories of data, such as uploaded media, Base44 account details and billing information, may remain stored in the United States regardless of selected app-data residency.

Where New Zealand Privacy Act requirements concerning disclosure outside New Zealand apply, we will take reasonable steps to use appropriate safeguards or another lawful basis for overseas disclosure.

We take reasonable steps appropriate to the nature of the information we hold to protect personal information against loss, misuse, unauthorised access, modification or disclosure.

Base44's current security documentation states that its platform maintains measures including encryption at rest and in transit, access controls, security monitoring, penetration testing and other technical and organisational controls. Base44 also states that it holds SOC 2 Type II and ISO 27001 certifications.

Base44 makes platform security controls available, but Yodha Wellness remains responsible for appropriate app configuration, permissions, access settings, user roles, integrations and the way we use the platform.

No online system can be guaranteed to be completely secure. You should protect your account credentials and contact us promptly at optimaltheory.nz@gmail.com if you suspect unauthorised access relating to your Yodha Wellness account.

We do not sell identifiable client health information. Personal information may be shared only where reasonably necessary for an authorised purpose, with an appropriate legal basis, or where required or permitted by law.

The Yodha Wellness team member or professional providing your service

Authorised administrative or support personnel who need access for their role

Base44 and relevant technology, hosting, communications, analytics, media or security providers

Payment or invoicing providers where used

Professional advisers such as accountants, insurers or legal advisers where reasonably necessary

Healthcare or referring professionals where you have authorised disclosure or another lawful basis applies

Regulators, courts, law enforcement or other authorities where disclosure is lawfully required or permitted

Base44 supports AI-related platform functionality and identifies AI service providers within its current subprocessor directory. Whether a particular Yodha Wellness feature uses AI will depend on the functions enabled in our app.

We will not intentionally use sensitive or identifiable health information in an AI-enabled feature for an unrelated purpose. Where additional consent, notice, contractual safeguards or privacy assessment is required for a particular AI use, we will take appropriate steps before using that function.

If a third-party payment processor is used, card or banking information may be processed directly by that provider rather than stored by Yodha Wellness. We may retain transaction records such as amount, date, invoice, service purchased and payment status for administration, accounting and legal purposes.

The Website and its technology providers may use cookies, session technologies, logs and similar tools for functionality, authentication, security, preferences, diagnostics, performance and analytics.

Where consent is legally required for non-essential cookies or similar tracking, we will use an appropriate consent mechanism.

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected and for applicable legal, professional, accounting, dispute-resolution, safety or record-keeping requirements.

Health information may need to be retained for a period required by applicable professional or legal obligations.

When information is no longer required, we will take reasonable steps to delete, destroy or anonymise it, subject to lawful retention requirements and technical backup cycles.

Base44's current DPA provides that account data can be deleted following a request or termination, subject to legal retention requirements and temporary backup retention.

Depending on the law that applies to you, you may have rights to request access to personal information, request correction of inaccurate information, object to or restrict certain processing, withdraw consent where processing depends on consent, request deletion where available, and complain about how information has been handled.

To make a privacy request, email optimaltheory.nz@gmail.com. Please provide enough detail for us to understand the request. We may need to verify your identity before releasing sensitive or health information.

Where a client is under 18, we may require involvement or consent from a parent or legal guardian and may collect limited information necessary to provide the service safely and appropriately.

We will take particular care with the collection, disclosure and public use of information relating to children and young people.

Participating in a Yodha Wellness service does not automatically give us permission to publicly use your image, testimonial, progress photographs, video, health information or transformation results.

We will seek appropriate permission before intentionally publishing identifiable client content for marketing or promotional purposes.

If we become aware of a privacy or security incident involving personal information, we will investigate and take reasonable steps to contain and address it.

Where notification to affected individuals or a regulator is required by applicable law, we will make the required notification.

For personal information handled in New Zealand, the Privacy Act 2020 may apply. It governs matters including collection, notification, security, access, correction, retention, use and disclosure of personal information.

The Privacy Amendment Act 2025 introduced a new indirect-collection notification obligation, IPP 3A, which took effect on 1 May 2026.

Where we are acting as a health agency in relation to identifiable health information, the Health Information Privacy Code 2020 may replace the general Privacy Act principles with health-specific rules for that information.

Where Sri Lankan data-protection law applies to our processing, we will take reasonable steps to comply with applicable obligations under Sri Lanka's Personal Data Protection Act No. 9 of 2022, as amended, and relevant regulatory requirements.

The Data Protection Authority of Sri Lanka states that major operative parts of the PDPA commenced on 18 March 2025. Applicable requirements may continue to develop through amendments, regulations and directions.

If you have a privacy concern or complaint, please contact us first at optimaltheory.nz@gmail.com so we can investigate and respond.

You may also have the right to complain to the regulator applicable to you. In New Zealand this may include the Office of the Privacy Commissioner. In Sri Lanka this may include the Data Protection Authority of Sri Lanka.

We may update this Policy where our services, technology, providers, data practices or legal obligations change. The current version will be published on the Website with its effective date.

Where a material change significantly affects how sensitive information is handled, we will take additional notification or consent steps where required by law.

Privacy and general contact email: optimaltheory.nz@gmail.com

Legal business name: Aspire International Limited

Trading name: Yodha Wellness

Business location: Rolleston, Canterbury, New Zealand

Website: https://optimaltheory.info/