Privacy Policy

1. Data Controller

The data controller responsible for your personal data is:

Zunrylexnrax
3315 State Highway 2, Mangatarata 3576, New Zealand
Phone: +64 7 867 3448
Email: partners@zunrylexnrax.world

2. Data We Collect

We collect personal data only when you voluntarily provide it or when it is automatically gathered through your use of the website.

2.1 Data you provide directly

• Your name and email address when submitting the contact form
• The content of messages you send us
• Your confirmation of consent to data processing via the contact form checkbox

2.2 Data collected automatically

• IP address and approximate geographic location
• Browser type, version, and operating system
• Pages visited, time spent on pages, and navigation path
• Referring website or search query
• Cookie preferences stored in your browser's localStorage

3. Legal Basis for Processing

3.1 European Economic Area (GDPR)

Where the General Data Protection Regulation (GDPR) applies, we process your personal data on the following legal bases:

• Consent (Article 6(1)(a)): When you submit the contact form and tick the consent checkbox, or when you accept optional cookies.
• Legitimate interests (Article 6(1)(f)): For website security, fraud prevention, and maintaining server logs.
• Legal obligation (Article 6(1)(c)): Where processing is required to comply with applicable law.

3.2 New Zealand (Privacy Act 2020)

If you are in New Zealand or your personal information is otherwise governed by New Zealand law, we collect, use, store, and disclose personal information in accordance with the Privacy Act 2020 and the Information Privacy Principles (IPPs). In particular, we only collect information that is reasonably necessary for our functions (IPP1), we take reasonable steps to protect it (IPP5), and we allow you to access and request correction of personal information we hold about you (IPPs 6 and 7), subject to the exceptions set out in that Act.

Optional analytics and marketing cookies are used only where you have given informed consent, consistent with the IPPs and our Cookie Policy.

4. How We Use Your Data

• To respond to enquiries submitted through the contact form
• To maintain and improve the functionality and content of the website
• To analyse aggregated, anonymised usage patterns for site improvement
• To comply with legal obligations

We do not use your data for automated decision-making or profiling.

5. Data Retention

Contact form submissions are retained for a maximum of 24 months from the date of receipt, after which they are permanently deleted unless a longer retention period is required by law.

Server and access logs are retained for a maximum of 12 months.

Cookie consent preferences stored in your browser's localStorage remain until you clear your browser data or withdraw consent.

6. Data Sharing

We do not sell, rent, or trade your personal data. Data may be shared with:

• Hosting providers: Our web hosting infrastructure processes data on our behalf under a data processing agreement.
• Legal authorities: Where required by applicable law or court order.

Any third-party processors are required to process data only on our instructions and in compliance with applicable data protection law.

Where we engage a processor outside New Zealand, we take reasonable steps under the Privacy Act 2020 to ensure that the overseas recipient is subject to comparable safeguards, or we rely on an authorised mechanism as permitted by law.

7. International Transfers

Where personal data is transferred outside the European Economic Area (EEA) or New Zealand, we ensure that appropriate safeguards are in place, including standard contractual clauses approved by relevant supervisory authorities.

8. Your Rights

Under GDPR and applicable New Zealand privacy law, you have the following rights:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your personal data where there is no lawful basis for continued processing.
• Right to restriction: Request that we limit the processing of your data in certain circumstances.
• Right to data portability: Receive your data in a structured, commonly used format.
• Right to object: Object to processing based on legitimate interests.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at partners@zunrylexnrax.world. Where the Privacy Act 2020 applies, we will respond to access and correction requests as soon as reasonably practicable and ordinarily within 20 working days, unless an extension is permitted by law and we notify you. Where the GDPR applies, we will respond within 30 days unless a different period applies under EU or UK law.

If we refuse a request in whole or in part, we will explain the reasons as required by applicable law and inform you of any review or complaint options available to you.

9. Cookies

We use cookies and similar technologies. For detailed information, please read our Cookie Policy.

10. Security Measures

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. The website is served exclusively over HTTPS. Access to personal data is restricted to authorised personnel only.

11. Children's Privacy

This website is not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it promptly.

Parents and guardians may request access to or correction of a child's personal information in accordance with the Privacy Act 2020 and our procedures above.

11a. Privacy Breaches (New Zealand)

If we become aware of a notifiable privacy breach (as defined in the Privacy Act 2020) that is likely to cause you serious harm, we will notify the Office of the Privacy Commissioner and affected individuals as soon as practicable in accordance with our legal obligations, unless an exception applies under that Act.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page reflects the most recent revision. For material changes, we will take reasonable steps to bring the update to your attention (for example, through a notice on the website). Where the law requires your consent for a new use of your information, we will obtain it before that use begins.

13. Supervisory Authority and Complaints

You have the right to lodge a complaint with a supervisory authority. In New Zealand, contact the Office of the Privacy Commissioner (Te Mana Mātāpono Matatapu): privacy.org.nz, or by post at PO Box 10-094, Wellington 6143, New Zealand. Telephone enquiries can be made through the contact details published on that website.

If you are located in the European Economic Area or the United Kingdom, you may contact your local data protection authority.

We encourage you to contact us first using the details in section 1 so we can try to resolve your concern directly.