Smryxellphodlarn

Privacy Policy

Last updated: March 2025

This Privacy Policy describes how Smryxellphodlarn ("we", "us", "our") collects, uses, stores and protects your personal data when you use our website https://smryxellphodlarn.world (the "Site") and our services. We are committed to complying with applicable data protection laws, including the New Zealand Privacy Act 2020 and, where applicable, the General Data Protection Regulation (GDPR) for individuals in the European Economic Area.

1. Data controller and contact details

The data controller responsible for your personal data is:

Smryxellphodlarn
68 Beach Road, Auckland CBD, Auckland 1010, New Zealand
Email: hello@smryxellphodlarn.world
Phone: +64 9 919 2320

If you have questions about this policy or your personal data, please contact us using the details above.

2. Personal data we collect

We may collect and process the following categories of personal data:

  • Identity and contact data: name, email address, telephone number (if provided), and delivery address when you place an order or contact us.
  • Transaction data: details of orders, payments and communications related to your purchases.
  • Technical and usage data: IP address, browser type and version, time zone, device information, pages visited and navigation paths, and other technology on the devices you use to access the Site.
  • Cookie and similar technologies data: information collected via cookies and similar technologies as described in our Cookie Policy.

3. Legal basis and purposes of processing

We process your personal data only where we have a lawful basis to do so.

3.1 Contract performance

We process your identity, contact and transaction data to perform our contract with you: to process and deliver orders, manage payments, and communicate with you about your order. This is necessary for the performance of the contract between you and us.

3.2 Legitimate interests

We may process technical and usage data for our legitimate interests in operating, securing and improving the Site, analysing how it is used, and detecting and preventing fraud or misuse. We ensure that these interests are balanced against your rights.

3.3 Consent

Where we rely on your consent (for example for optional marketing communications or non-essential cookies), you may withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

3.4 Legal obligation

We may process your data where necessary to comply with legal obligations (for example tax, accounting or regulatory requirements).

4. How we use your data

We use your personal data to:

  • Provide the Site and our services, including processing orders and delivering products.
  • Communicate with you about orders, enquiries and customer support.
  • Send service-related messages (e.g. order confirmation, shipping updates) where necessary for the contract.
  • Improve the Site, diagnose technical issues and ensure security.
  • Comply with legal and regulatory obligations.
  • Where you have consented, send marketing communications (you may opt out at any time).

5. Data retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected and to satisfy legal, accounting or reporting requirements.

  • Order and transaction data: typically retained for seven (7) years from the end of the financial year in which the transaction occurred, for tax and legal compliance.
  • Contact and enquiry data: retained for the duration of the enquiry and for a reasonable period thereafter (e.g. up to three (3) years) for follow-up and dispute resolution.
  • Technical and access logs: retained for a limited period (e.g. up to twelve (12) months) unless a longer period is required for security or legal purposes.
  • Marketing preferences: we retain evidence of your consent or opt-out for as long as we use the data for marketing and for a short period after you opt out.

After the retention period, we securely delete or anonymise your data so that it can no longer identify you.

6. Data security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, loss or destruction. These measures include:

  • Use of HTTPS and encryption in transit for data transmitted via the Site.
  • Access controls so that only authorised personnel can access personal data on a need-to-know basis.
  • Secure storage and handling of data, with regular review of our security practices.
  • Procedures to deal with suspected data breaches and to notify you and the relevant supervisory authority where we are legally required to do so.

While we take these steps, no method of transmission or storage over the internet is completely secure. We cannot guarantee absolute security of your data.

7. Your rights

Depending on your location, you may have the following rights in relation to your personal data:

  • Access: to request a copy of the personal data we hold about you.
  • Rectification: to request correction of inaccurate or incomplete data.
  • Erasure: to request deletion of your data in certain circumstances (e.g. where it is no longer necessary or you withdraw consent).
  • Restriction: to request that we restrict processing in certain situations.
  • Data portability: to receive your data in a structured, commonly used and machine-readable format and to transmit it to another controller where technically feasible.
  • Objection: to object to processing based on legitimate interests or for direct marketing.
  • Withdraw consent: where processing is based on consent, to withdraw consent at any time.

To exercise any of these rights, please contact us using the details in section 1. We will respond within the timeframes required by applicable law (e.g. one month under GDPR). You also have the right to lodge a complaint with a supervisory authority: in New Zealand, the Office of the Privacy Commissioner (www.privacy.org.nz); in the EEA, the data protection authority in your country of residence.

8. Sharing and disclosure of data

We may share your personal data with:

  • Service providers: payment processors, shipping and logistics providers, IT and hosting providers, and analytics providers, under contracts that require them to protect your data and use it only for the purposes we specify.
  • Legal and regulatory bodies: when required by law, court order or regulatory request.
  • Professional advisers: lawyers, auditors and insurers where necessary for our legitimate business purposes.

We do not sell your personal data. We do not transfer your data outside New Zealand or the EEA unless we have put in place appropriate safeguards (e.g. standard contractual clauses or adequacy decisions) as required by law.

9. Children

Our Site and services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us and we will take steps to delete it.

10. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top indicates when it was last revised. We encourage you to review this page periodically. Where changes are material, we may notify you by email or by a notice on the Site. Continued use of the Site after changes constitutes acceptance of the updated policy.

11. Contact

For any questions about this Privacy Policy or our handling of your personal data, please contact us at:

Smryxellphodlarn, 68 Beach Road, Auckland CBD, Auckland 1010, New Zealand. Email: hello@smryxellphodlarn.world, Phone: +64 9 919 2320.