Privacy Statement
IFS Aotearoa NZ Community (“IFS Aotearoa”, “we”, “us”) runs this website and its directory of Internal Family Systems practitioners. This statement explains what personal information we collect, what we do with it, what is shown publicly and what isn’t, where it is stored, and how you can see, change or delete it. We follow the Privacy Act 2020.
Information practitioners give us
When you register for a listing, we ask for your name and an email address. You then fill in your profile, which can include:
- your name, profession and a photo
- your biography, qualifications, memberships and IFS level
- where you practise, and whether you offer online sessions or work online only
- a phone number, a contact email address and a website
- whether you are accepting new clients.
We use this information to publish your listing in the directory, to check it before it goes live, and to contact you about your listing and account. We don’t sell it, use it for marketing, or share it with anyone except the service providers listed below.
What is public
Once we approve your listing, anyone can see it on this website. A listing shows:
- your name, profession, photo, biography, qualifications and IFS level
- your suburb or town and region, and a map pin placed at the centre of that suburb or town
- your website, whether you are accepting new clients and whether you offer online sessions
- your phone number and contact email address, but only if you choose to show them.
If you work online only, your listing has no map pin.
What is never public
- Your sign-in email address. The address you use to sign in is private and separate from the contact email on your listing. It never appears on the website.
- A phone number or email address you have chosen to hide. Hidden details are never shown on the website and are never included in anything the website sends to visitors.
- Your street address. We only ever show your suburb or town. Map pins are never placed at a street address.
Only you and the IFS Aotearoa team who manage the directory can see these details.
Visitors to the website
You don’t need to give us any personal information to browse the website or search the directory.
- Contact form. When you send us a message, we receive your name, email address and message by email so we can reply. Messages are not stored on the website. Our email provider, Postmark, keeps copies of the emails it sends for a limited time.
- Google Analytics. We use Google Analytics to understand how the website is used: which pages are visited, roughly where visitors are (city or country) and what kind of device and browser they use. Google sets cookies to do this. It doesn’t tell us who you are. You can opt out with the Google Analytics opt-out browser add-on.
- Spam protection. The contact and registration forms use Cloudflare Turnstile to check that a person, not an automated program, is filling them in.
Cookies
Apart from the Google Analytics cookies above, the website only sets cookies when a practitioner signs in: they keep you signed in and let the website show “My account” at the top of each page. Your browser also remembers your initials and photo for that link. They are removed when you sign out.
Where your information is stored
We use these service providers to run the website. They store or process information on our behalf, and only for that purpose:
- Supabase stores the practitioner directory, sign-in accounts and photos in its data centre in Sydney, Australia.
- Cloudflare hosts the website and delivers it from its worldwide network, and provides the spam protection on our forms.
- Postmark sends the website’s emails, such as sign-in links, listing updates and contact form messages. It is based in the United States.
- Google provides Google Analytics, which processes data in the United States.
How we protect it
We don’t use passwords. Practitioners sign in with a single-use link sent to their email address. Information is encrypted on its way between your browser and the website. Each practitioner can only see and change their own listing, and only the IFS Aotearoa team who manage the directory can see listings that are not public.
How long we keep it
- Your listing and account are kept for as long as you are listed, or until you ask us to delete them.
- We keep a record of changes made to each listing. When a listing is deleted, the details in that record are removed too, leaving only when changes were made and by whom.
- To protect sign-in from misuse, we keep a scrambled (hashed) form of the email address and internet address used to request a sign-in link, not the addresses themselves. These records are deleted after two days.
- Contact form messages are kept in our email inbox for as long as we need them to deal with your enquiry.
Updating or deleting your listing
You can sign in at any time to update your listing. Changes to your biography, photo, contact details and availability appear on your listing within a few minutes; a change to your IFS level is checked by us first. You can also choose whether to show your phone number and contact email address, and change your sign-in email address.
To take your listing down, or to have your listing, photo and account deleted completely, contact us. We will let you know once it’s done.
Your rights
Under the Privacy Act 2020 you can ask for a copy of the personal information we hold about you, and ask us to correct it. Contact our privacy officer (below) and we will respond within 20 working days. If you are not happy with how we have handled your information, please tell us first so we can put it right. You can also complain to the Office of the Privacy Commissioner.
Contact us
Our privacy officer is Richard Fox. For any question about privacy or your information, email him at [email protected], or use our contact form.
Changes to this statement
We will update this statement if the way we handle personal information changes. It was last updated on 8 October 2026.