Privacy Policy

How we collect, use, and protect your personal information

Last updated:

1. Data Controller

The data controller responsible for your personal data is:

Zexmorinwrozelon
104 The Drive, Epsom, Auckland 1023, New Zealand
Phone: +64 9 638 6769
Email: team@zexmorinwrozelon.world

For users in New Zealand, the primary law governing your personal information is the Privacy Act 2020 and its Information Privacy Principles (IPPs), set out in Schedule 1 of that Act. Where the EU General Data Protection Regulation (GDPR) applies to our processing (for example, visitors in the EEA), we also comply with those requirements. This policy describes both frameworks in one place.

2. Information We Collect

We collect and process the following types of personal data:

2.1 Information You Provide

  • Contact form data: name, email address, and message content when you submit our contact form.
  • Consent records: your cookie and data processing preferences.

2.2 Automatically Collected Information

  • Technical data: IP address, browser type and version, operating system, referring URL, pages visited, date and time of access.
  • Cookie data: information collected through cookies and similar technologies (see our Cookie Policy).

3. Purpose and Legal Basis

We process your personal data for the following purposes:

  • Responding to enquiries (Art. 6(1)(b) GDPR): processing your contact form submissions to respond to your questions or messages.
  • Legitimate interests (Art. 6(1)(f) GDPR): ensuring the security and proper functioning of our website, analysing website usage to improve content.
  • Consent (Art. 6(1)(a) GDPR): placing analytics and marketing cookies where you have given your explicit consent.
  • Legal obligation (Art. 6(1)(c) GDPR): complying with applicable laws and regulations.

Under the New Zealand Privacy Act 2020, we collect personal information only for lawful purposes connected to our functions (IPP 1), from you where practicable (IPP 2), and in ways that are lawful, fair, and not unreasonably intrusive (IPP 4). We take reasonable steps to ensure information is accurate, up to date, complete, relevant, and not misleading (IPP 8), and to protect it against loss, unauthorised access, and other misuse (IPP 5).

We use the contact form only to respond to your message. We do not use it to send marketing or promotional email unless you have given separate, clear consent (consistent with the Unsolicited Electronic Messages Act 2007).

4. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

  • Contact form data: retained for up to 12 months after your enquiry is resolved, unless a longer retention period is required by law.
  • Cookie consent records: retained for 12 months from the date of consent.
  • Technical logs: retained for up to 90 days for security and troubleshooting purposes.

5. Your Rights

Under the GDPR and the New Zealand Privacy Act 2020, you have the following rights:

  • Right of access: request a copy of the personal data we hold about you.
  • Right to rectification: request correction of inaccurate or incomplete data.
  • Right to erasure: request deletion of your personal data where there is no compelling reason for continued processing.
  • Right to restriction: request restriction of processing in certain circumstances.
  • Right to data portability: receive your data in a structured, commonly used, machine-readable format.
  • Right to object: object to processing based on legitimate interests.
  • Right to withdraw consent: withdraw consent at any time without affecting the lawfulness of prior processing.

In New Zealand, you may also request correction of personal information we hold (IPP 7) and, in certain circumstances, ask us to attach a statement of correction. You may ask whether we hold personal information about you and, if so, request access (IPP 6), subject to the exceptions permitted by the Privacy Act 2020.

To exercise any of these rights, contact us at team@zexmorinwrozelon.world. We will respond within 30 days.

6. Data Sharing and Transfers

We do not sell your personal data. We may share your data with:

  • Service providers: trusted third parties who assist in operating our website and providing services, bound by contractual data protection obligations.
  • Legal authorities: when required by law, regulation, or legal process.

If your data is transferred outside the European Economic Area (EEA) or New Zealand, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

Before disclosing personal information to someone overseas (including cloud or analytics providers), we take steps required by the Privacy Act 2020, including reasonable belief that the receiving entity is subject to privacy safeguards comparable to New Zealand law, or your informed consent where appropriate (IPP 12).

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

  • HTTPS encryption for all data transmissions.
  • Access controls limiting data access to authorised personnel.
  • Regular security assessments and updates.
  • Secure storage with appropriate backup procedures.

7a. Notifiable privacy breaches

If we become aware of a privacy breach that we believe has caused serious harm to you (or is likely to do so), we will notify the Office of the Privacy Commissioner and affected individuals as soon as practicable where required by the Privacy Act 2020. You may contact us if you have concerns about a possible breach.

8. Cookies

Our website uses cookies. For detailed information about the cookies we use, their purposes, and how to manage them, please refer to our Cookie Policy.

9. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to read the privacy policies of any third-party websites you visit.

10. Children's Privacy

Our website is not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

12. Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with:

  • The Office of the Privacy Commissioner (New Zealand): https://www.privacy.org.nz/ — including the complaints process described on that site.
  • Your local data protection authority within the EEA, if applicable.

We encourage you to contact us first so we can try to resolve your concern.

13. Contact Us

For any questions regarding this Privacy Policy or your personal data, contact us at:

Zexmorinwrozelon
104 The Drive, Epsom, Auckland 1023, New Zealand
Email: team@zexmorinwrozelon.world
Phone: +64 9 638 6769