Privacy Policy

1. Introduction

Srizelonvormylox ("we," "our," or "us") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website srizelonvormylox.world and use our services.

This policy complies with the General Data Protection Regulation (GDPR), the New Zealand Privacy Act 2020, and other applicable data protection laws.

2. Data Controller

The data controller responsible for your personal data is:

Srizelonvormylox
25 Montrose Avenue
Culverden 7392
New Zealand
Email: contactuse@srizelonvormylox.world

3. Information We Collect

We collect information that you provide directly to us, including:

• Name and contact information (email address, phone number)
• Shipping and billing address
• Order information and purchase history
• Communications you send to us
• Information provided when filling out forms on our website

We also automatically collect certain information when you visit our website:

• IP address and device information
• Browser type and version
• Pages visited and time spent on pages
• Referring website or source
• Cookie data (see our Cookie Policy for details)

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary to fulfill your orders and provide our services
• Consent: Where you have given explicit consent for specific processing activities
• Legitimate Interests: For purposes such as improving our services, fraud prevention, and marketing (where permitted)
• Legal Obligations: To comply with applicable laws and regulations

5. How We Use Your Information

We use the information we collect for the following purposes:

• Processing and fulfilling your orders
• Communicating with you about your orders and inquiries
• Improving our website, products, and services
• Sending marketing communications (with your consent)
• Detecting and preventing fraud
• Complying with legal obligations
• Analyzing website usage and trends

6. Data Sharing and Disclosure

We may share your personal data with:

• Service Providers: Third parties who assist us with payment processing, shipping, email services, and analytics
• Legal Requirements: When required by law, court order, or government request
• Business Transfers: In connection with a merger, acquisition, or sale of assets

We do not sell your personal data to third parties for marketing purposes.

7. International Data Transfers

Your personal data may be transferred to and processed in countries outside your country of residence. When we transfer data internationally, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses approved by relevant authorities
• Adequacy decisions where applicable
• Other legally recognized transfer mechanisms

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Order Information: 7 years for tax and legal compliance
• Marketing Preferences: Until you withdraw consent
• Website Analytics: 26 months
• Customer Support Records: 3 years after last interaction

9. Your Rights

Under applicable data protection laws, you have the following rights:

• Right of Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Request limitation of processing
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Object to certain types of processing
• Right to Withdraw Consent: Withdraw consent at any time

To exercise any of these rights, please contact us using the details provided below. We will respond within a reasonable period in line with applicable legal requirements.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• SSL/TLS encryption for data transmission
• Secure data storage with access controls
• Regular security assessments and updates
• Employee training on data protection

While we strive to protect your personal data, no method of transmission or storage is completely secure. We cannot guarantee absolute security.

11. Children's Privacy

Our website and services are not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting the updated policy on our website with a new "Last Updated" date.

13. Complaints

If you are not satisfied with how we handle your personal information, you may lodge a complaint with us first so we can attempt to resolve it. You may also contact the Office of the Privacy Commissioner in New Zealand. EU residents may contact their local data protection authority where applicable.