1. Introduction
Ylexironxunrovar ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website ylexironxunrovar.world or purchase our products.
We comply with the General Data Protection Regulation (GDPR), the New Zealand Privacy Act 2020, and other applicable data protection laws.
Data Controller Information
The data controller responsible for your personal data is:
- Company Name: Ylexironxunrovar
- Address: 3B Hastings Street, Ohai 9635, New Zealand
- Email: request@ylexironxunrovar.world
2. Personal Data We Collect
We collect personal data that you voluntarily provide to us when you:
- Place an order through our website
- Subscribe to our newsletter
- Contact us with inquiries
- Browse our website
Types of Personal Data Collected
- Identity Data: Full name
- Contact Data: Email address, phone number (optional), delivery address
- Transaction Data: Details about payments and purchases
- Technical Data: IP address, browser type, device information, cookies
- Usage Data: Information about how you use our website
3. Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Consent: When you have given explicit consent for processing (e.g., marketing communications)
- Contract: When processing is necessary to fulfill our contractual obligations to you
- Legal Obligation: When we are required by law to process your data
- Legitimate Interests: When processing is necessary for our legitimate business interests, provided these do not override your rights
4. Purposes of Data Processing
We use your personal data for the following purposes:
- Processing and fulfilling your orders
- Communicating with you about your orders and inquiries
- Sending marketing communications (with your consent)
- Improving our website and services
- Complying with legal obligations
- Preventing fraud and ensuring security
- Advertising and measurement: we may use data (including in aggregated form) to deliver and measure the effectiveness of advertising, including via third-party ad platforms, in accordance with your cookie preferences
5. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:
- Order Data: 7 years (for tax and accounting purposes)
- Marketing Preferences: Until you withdraw consent
- Website Analytics: 26 months
- Customer Inquiries: 3 years from last contact
After the retention period, your data will be securely deleted or anonymized.
6. Your Rights Under the New Zealand Privacy Act 2020
If you are in New Zealand, the Privacy Act 2020 applies. You have the right to:
- Access (Principle 6): Request access to the personal information we hold about you
- Correction (Principle 7): Request correction of any inaccurate, incomplete, or misleading personal information
- Complaint: Lodge a complaint with the Office of the Privacy Commissioner if you believe your privacy has been interfered with
We will respond to access and correction requests as soon as practicable and in any event within 20 working days where the Privacy Act applies. To exercise these rights, please contact us using the details in section 13.
7. Your Rights Under GDPR (EEA/UK Users)
If you are in the European Economic Area or the United Kingdom, you may also have the following rights:
- Right of Access: Request a copy of your personal data
- Right to Rectification: Request correction of inaccurate data
- Right to Erasure: Request deletion of your data ("right to be forgotten")
- Right to Restrict Processing: Request limitation of data processing
- Right to Data Portability: Receive your data in a structured, machine-readable format
- Right to Object: Object to processing based on legitimate interests
- Right to Withdraw Consent: Withdraw consent at any time
We will respond to GDPR requests within 30 days. To exercise any of these rights, please contact us using the details in section 13.
Marketing Communications and the Unsolicited Electronic Messages Act 2007
We comply with the Unsolicited Electronic Messages Act 2007 (New Zealand). We only send commercial electronic messages (e.g. email, SMS) where we have your consent. Every marketing message includes a clear, functional unsubscribe facility. If you unsubscribe, we will cease sending you commercial messages within 5 working days. You may withdraw consent for marketing at any time by contacting us or using the unsubscribe link in our emails.
8. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including:
- SSL/TLS encryption for data transmission
- Secure server infrastructure
- Access controls and authentication
- Regular security assessments
- Staff training on data protection
9. Data Sharing and Transfers
We may share your personal data with:
- Service Providers: Payment processors, shipping companies, email service providers
- Legal Authorities: When required by law or to protect our rights
We do not sell your personal data to third parties. When transferring data outside the EEA/UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses.
10. Cookies
Our website uses cookies to enhance your experience. For detailed information about our cookie practices, please refer to our Cookie Policy.
11. Children's Privacy
Our website and products are not intended for individuals under 18 years of age. We do not knowingly collect personal data from children.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.
13. Contact Us
If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:
- Email: request@ylexironxunrovar.world
- Address: 3B Hastings Street, Ohai 9635, New Zealand
You also have the right to lodge a complaint with the Office of the Privacy Commissioner (New Zealand) or your local supervisory authority.