Privacy Policy

1. Data Controller

This website is operated by:

2. Information We Collect

2.1 Information You Provide

When you contact us through our website, we collect:

• Name
• Email address
• Message content
• Any other information you choose to provide

2.2 Automatically Collected Information

We may collect technical information through cookies and similar technologies:

• IP address
• Browser type and version
• Device information
• Pages visited and time spent on pages
• Referring website addresses

3. Purpose of Data Processing

We process your personal data for the following purposes:

• Communication: To respond to your inquiries and provide information
• Website Functionality: To ensure proper operation of our website
• Analytics: To understand how visitors use our website (only with your consent)
• Legal Compliance: To comply with applicable laws and regulations

4. Legal Basis for Processing

We process your personal data based on:

• Consent: You have given explicit consent for specific processing activities
• Legitimate Interest: Processing is necessary for our legitimate business interests
• Legal Obligation: Processing is required to comply with legal requirements

5. Data Retention

We retain your personal data only for as long as necessary:

• Contact Form Data: Retained for 2 years from the date of submission or until you request deletion
• Cookie Data: Retained according to cookie-specific retention periods (see Cookie Policy)
• Legal Requirements: Some data may be retained longer if required by law

6. Data Sharing and Disclosure

We do not sell your personal data. We may share your information with:

• Service Providers: Third-party vendors who assist in operating our website
• Legal Authorities: When required by law or to protect our legal rights

All third-party service providers are contractually obligated to protect your data and use it only for specified purposes.

7. International Data Transfers

Your data may be transferred to and processed in countries outside New Zealand. When we transfer data internationally, we ensure appropriate safeguards are in place.

8. Your Rights

You have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Request limitation of how we process your data
• Right to Data Portability: Receive your data in a structured, commonly used format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, contact us at online@xephylaroaizur.world.

9. Security Measures

We implement appropriate technical and organizational measures to protect your personal data:

• HTTPS encryption for all data transmission
• Secure server infrastructure
• Access controls and authentication
• Regular security assessments

While we strive to protect your data, no method of transmission over the internet is completely secure.

10. Cookies

Our website uses cookies to enhance functionality and user experience. For detailed information about cookies we use, please see our Cookie Policy.

11. Children's Privacy

Our website is not directed to individuals under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated revision date.

13. Contact

For questions about this Privacy Policy or to exercise your rights, contact us:

Email: online@xephylaroaizur.world
Phone: +64 4 496 2000

You also have the right to lodge a complaint with the New Zealand Privacy Commissioner.