Privacy Policy

1. Introduction

Khalryonxodralin ("we", "us", "our") is committed to protecting your personal information. This Privacy Policy explains what data we collect, why we collect it, how we use it and your rights under the New Zealand Privacy Act 2020 and, where applicable, the European Union General Data Protection Regulation (GDPR).

By using our website at khalryonxodralin.world, you acknowledge you have read and understood this policy.

2. Data We Collect

2.1 Information You Provide

• Full name
• Email address
• Phone number (optional)
• Delivery address or message content submitted via the order form
• Consent records (date, time and type of consent given)

2.2 Automatically Collected Data

• IP address (anonymised where possible)
• Browser type and version
• Pages visited and time spent on each page
• Referring URL
• Cookie identifiers (see our Cookie Policy)

3. How We Use Your Data

We process your personal information for the following purposes:

• Order fulfilment — to process and deliver your order, contact you with delivery information and handle returns or queries.
• Customer communications — to respond to enquiries submitted through our contact or order form.
• Legal compliance — to meet our obligations under New Zealand law, including the Consumer Guarantees Act 1993 and Privacy Act 2020.
• Site analytics — to understand how our website is used and improve our content (only with your consent).
• Marketing — to send you information about our products if you have explicitly consented.

4. Legal Basis for Processing

Under the GDPR, we rely on the following legal bases:

• Contract performance — processing your order requires using your name, contact details and address.
• Legal obligation — retaining records as required by law.
• Consent — for analytics and marketing cookies, and for optional marketing communications. You may withdraw consent at any time.
• Legitimate interests — site security and fraud prevention, provided these interests do not override your rights.

5. Data Retention

We retain your personal data for no longer than necessary:

• Order records: 7 years (New Zealand financial record requirements).
• Marketing consent records: until you withdraw consent, plus 12 months.
• Website analytics data: 26 months from collection.
• Cookie consent records: 13 months.

After these periods, data is securely deleted or anonymised.

6. Data Sharing and Third Parties

We do not sell your personal data. We may share data with:

• Delivery partners — for the purpose of fulfilling your order within New Zealand.
• Payment processors — operating under PCI-DSS standards. We do not store payment card details.
• Analytics providers — only with your consent, and under data processing agreements that restrict their use of your data.
• Legal authorities — when required by law or court order.

Any third party receiving your data is contractually required to keep it secure and to use it only for the specified purpose.

7. International Data Transfers

If any data is transferred outside New Zealand, we ensure adequate safeguards are in place, including standard contractual clauses approved by relevant data protection authorities, in line with both the NZ Privacy Act 2020 and GDPR requirements.

8. Your Rights

Under the NZ Privacy Act 2020 and GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Correction — request that inaccurate or incomplete data is corrected.
• Erasure — request deletion of your data (subject to legal retention obligations).
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests or for direct marketing.
• Restriction — request that we restrict processing in certain circumstances.
• Withdraw consent — at any time, where processing is based on consent.

To exercise any of these rights, please contact us using the details in the Data Controller section above. We will respond within 20 working days as required by the NZ Privacy Act 2020.

9. Cookies

We use cookies to operate the website and, with your consent, to collect analytics and marketing data. Please refer to our Cookie Policy for full details and instructions on how to manage your preferences.

10. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or disclosure. These include HTTPS encryption, access controls, and regular security reviews. While we take all reasonable steps, no online transmission is 100% secure.

11. Children

Our website and products are intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a child has submitted data to us, please contact us immediately and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will publish the updated policy on this page with a revised "last updated" date. Continued use of the website after a change constitutes acceptance of the updated policy.

13. Complaints

If you have a concern about how we handle your personal data, you may contact us directly. You also have the right to lodge a complaint with the Office of the Privacy Commissioner of New Zealand at privacy.org.nz.

If you are located in the European Economic Area, you may contact your local supervisory authority under GDPR.