1. Data Controller
Khexylonkhimeo, 262 Queen Street, Auckland CBD, Auckland 1010, New Zealand. Contact: info@khexylonkhimeo.world.
2. Data We Collect
We may collect: name, email address, phone number, delivery address, order details, IP address, and cookie data. We collect data when you place an order, contact us, or use our website.
3. Purposes of Processing
- Processing and fulfilling orders
- Customer support and communication
- Improving our website and services
- Legal compliance
- Analytics (with your consent)
4. Legal Basis
Processing is based on: contract performance (orders), legitimate interests (website operation), and consent where required (e.g. marketing).
5. Data Retention
Order data is retained for up to 7 years for legal and accounting purposes. Marketing data is retained until you withdraw consent. Cookie data is retained according to our Cookie Policy.
6. Your Rights
Under GDPR and NZ Privacy Act you have the right to: access your data, rectify inaccuracies, erasure (where applicable), restrict processing, data portability, object to processing, and withdraw consent. Contact us to exercise these rights.
7. Data Security
We implement appropriate technical and organisational measures to protect your data against unauthorised access, alteration, disclosure or destruction.
8. Third Parties
We may share data with payment processors, delivery services, and analytics providers as necessary. These parties are bound by data protection obligations.
9. International Transfers
If data is transferred outside New Zealand or the EEA, we ensure adequate safeguards are in place.
10. Contact
For privacy enquiries: info@khexylonkhimeo.world. You may also lodge a complaint with the Office of the Privacy Commissioner (New Zealand) or your local data protection authority.