Privacy Policy

Last updated: 12 March 2025

1. Controller and contact details

The data controller responsible for the processing of your personal data in connection with this website is:

Fraxylonzymrax
6/45 Luckens Road, West Harbour, Auckland 0618, New Zealand
Email: admin@fraxylonzymrax.world
Phone: +64 9 416 1703

If you have questions about this Privacy Policy or about how we process your data, you may contact us at the above address or email.

2. Scope and applicability

This Privacy Policy applies to the website fraxylonzymrax.world (the "Website") and to all personal data that we collect, use, store, or otherwise process when you visit the Website, place an order, contact us, or interact with our services. We are committed to protecting your privacy and complying with applicable data protection laws, including the Privacy Act 2020 (New Zealand), the General Data Protection Regulation (GDPR) where it applies to our processing of data relating to individuals in the European Economic Area (EEA), and other relevant local and international standards.

3. Types of personal data we collect

We may collect and process the following categories of personal data:

• Identity and contact data: name, email address, postal address, telephone number, and any other contact or identification details you provide when placing an order, completing a form, or contacting us.
• Transaction and order data: order details, payment-related information (to the extent necessary for processing payments), delivery preferences, and communication history relating to your orders.
• Technical and usage data: IP address, browser type and version, device type, operating system, referring URLs, pages visited, time and date of access, and similar technical information collected automatically when you use the Website.
• Cookie and similar technologies data: information collected via cookies and similar technologies, as described in our Cookie Policy.
• Communication and correspondence: content of messages, enquiries, or complaints you send to us, and our responses.

We do not collect special categories of personal data (such as health data, ethnic origin, or political opinions) unless you voluntarily provide them and we have a lawful basis to process them, or where required by law.

4. Purposes and legal bases for processing

We process your personal data for the following purposes and on the following legal bases (where GDPR applies, we rely on the bases set out in Article 6 GDPR; under New Zealand law we ensure we have a lawful purpose and that collection and use are fair and necessary):

• Performance of a contract: to process and fulfil your orders, manage deliveries, handle returns, and provide customer support. Legal basis: contract performance (and, where relevant, steps at your request prior to entering into a contract).
• Legitimate interests: to operate, secure, and improve the Website; to analyse usage and improve our services; to communicate with you about your orders and enquiries; to defend or enforce our rights; and to prevent fraud. Legal basis: our legitimate interests, provided they are not overridden by your interests or fundamental rights.
• Consent: where we use cookies or similar technologies for analytics or marketing (where not strictly necessary), we do so on the basis of your consent where required by law. You may withdraw consent at any time via our cookie settings or by contacting us.
• Legal obligation: where we are required to retain or disclose data to comply with applicable laws, regulations, or court orders.

5. How we collect your data

We collect personal data:

• Directly from you when you fill in forms on the Website (e.g. order form, contact form), when you contact us by email or phone, or when you subscribe to communications.
• Automatically when you use the Website, through cookies, log files, and similar technologies (see our Cookie Policy).
• From third parties only where necessary (e.g. payment service providers, delivery partners) to fulfil orders or comply with law, and only to the extent permitted by law and this policy.

6. Data retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with legal, accounting, or reporting requirements. In particular:

• Order and transaction data: typically for the duration of the contractual relationship plus a period necessary for warranty, returns, tax, and legal obligations (e.g. up to 7 years where required by law).
• Contact and enquiry data: for as long as needed to handle your enquiry and for a reasonable period thereafter for follow-up and quality purposes (e.g. up to 3 years unless a longer period is required by law).
• Technical and cookie data: as specified in our Cookie Policy and in accordance with your choices.
• Marketing and consent-based processing: until you withdraw consent or object, or for the period specified at the time of collection.

After the retention period, we securely delete or anonymise your data so that it can no longer identify you.

7. Your rights

Depending on your location and applicable law, you may have the following rights in relation to your personal data:

• Access: to request a copy of the personal data we hold about you.
• Rectification: to request correction of inaccurate or incomplete data.
• Erasure: to request deletion of your data in certain circumstances (e.g. where it is no longer necessary, or you withdraw consent where consent was the basis).
• Restriction: to request that we restrict processing in certain situations (e.g. while we verify accuracy or where you have objected).
• Data portability: where processing is based on contract or consent and is carried out by automated means, to receive your data in a structured, commonly used, machine-readable format and, where technically feasible, to have it transmitted to another controller.
• Objection: to object to processing based on legitimate interests, including profiling, and to object to processing for direct marketing at any time.
• Withdraw consent: where processing is based on consent, to withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
• Complaint: to lodge a complaint with a supervisory authority. In New Zealand you may contact the Office of the Privacy Commissioner (privacy.org.nz). If you are in the EEA, you may lodge a complaint with the supervisory authority in your country of residence.

To exercise any of these rights, please contact us using the details in section 1. We will respond within the timeframes required by applicable law (e.g. one month under GDPR, or as required under the Privacy Act 2020). We may need to verify your identity before processing your request.

8. Data sharing and international transfers

We may share your personal data with:

• Service providers who assist us in operating the Website, processing payments, fulfilling orders, or providing IT or customer support, subject to strict confidentiality and data protection obligations.
• Delivery and logistics partners to fulfil orders.
• Legal or regulatory bodies when required by law or to protect our rights.

We do not sell your personal data to third parties. Where we transfer data to countries outside New Zealand or the EEA, we ensure appropriate safeguards are in place (e.g. standard contractual clauses, adequacy decisions, or other mechanisms recognised by applicable law) so that your data remains protected.

9. Security measures

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include: use of HTTPS and encryption where appropriate; secure storage and access controls; training of personnel; and regular review of our security practices. While we strive to protect your data, no method of transmission or storage over the internet is completely secure; we encourage you to use strong passwords and to contact us immediately if you suspect any unauthorised use of your data.

10. Children

Our Website and services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you become aware that a child has provided us with personal data without parental consent, please contact us and we will take steps to delete such data.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The "Last updated" date at the top will be revised when we make material changes. We encourage you to review this page periodically. Where required by law, we will seek your consent or notify you of significant changes before they take effect.

12. Additional information for EEA users

If you are located in the EEA, the data controller may be the same entity as above. We process your data in accordance with the GDPR. You have the rights set out in section 7, including the right to lodge a complaint with a supervisory authority in your member state. Where we rely on legitimate interests, you have the right to object; we will then cease processing unless we demonstrate compelling legitimate grounds that override your interests, or for the establishment, exercise, or defence of legal claims.

Return to homepage | Terms of Service | Cookie Policy