Privacy Policy

1. Introduction

Gloxarelghulae (“we”, “us”, or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website at https://gloxarelghulae.world (the “Site”). This policy applies in accordance with the New Zealand Privacy Act 2020, the General Data Protection Regulation (GDPR), and other applicable data protection legislation.

2. Data Controller

The data controller responsible for your personal data is:

Gloxarelghulae
58 Arcus Road, Te Horo 5582, New Zealand
Phone: +64 27 296 9578
Email: office@gloxarelghulae.world

3. Information We Collect

3.1 Information You Provide

We collect personal information that you voluntarily provide when using our contact form, including:

• Full name
• Email address
• Message content
• Your consent to processing (as indicated on the contact form)

3.2 Automatically Collected Information

When you visit our Site, we may automatically collect certain technical data, including:

• IP address (anonymised where possible)
• Browser type and version
• Operating system
• Referring website
• Pages visited and time spent
• Date and time of access

4. New Zealand Privacy Act 2020

We are an “agency” for the purposes of the Privacy Act 2020 (New Zealand). We handle personal information in line with the Information Privacy Principles (IPPs) set out in Schedule 1 of that Act, including:

• Purpose and collection: We collect personal information only for lawful purposes connected to our functions, and by lawful and fair means.
• Source and quality: Where reasonable, we collect personal information directly from you and take steps to ensure information is accurate, up to date, complete, relevant, and not misleading.
• Storage and security: We protect personal information with reasonable safeguards against loss, unauthorised access, use, modification, disclosure, or other misuse.
• Access and correction: You may request access to, and correction of, the personal information we hold about you (see section 7).
• Retention: We retain personal information only for as long as is required for the purposes for which it may lawfully be used.
• Disclosure overseas: If personal information is disclosed to an overseas person or entity, we comply with IPP 12 and ensure appropriate protections where required.

Nothing in this policy limits your rights under the Privacy Act 2020.

5. Purpose and Legal Basis for Processing

We process your personal data for the following purposes and on the following legal bases:

• Responding to inquiries: When you submit a contact form, we process your data to respond to your request. New Zealand: this is necessary for a purpose connected with our ordinary functions and directly related to the information’s source (IPP 1). Where GDPR applies: your consent (Article 6(1)(a) GDPR) and our legitimate interest in communicating with visitors (Article 6(1)(f) GDPR).
• Website functionality: Strictly necessary cookies are used to ensure the proper functioning of the Site. GDPR (where applicable): legitimate interest (Article 6(1)(f) GDPR).
• Analytics: If you consent, we may use analytics cookies to understand how visitors interact with our Site. Legal basis: your consent (Article 6(1)(a) GDPR) and, under New Zealand law, your informed agreement where cookies involve personal information.
• Marketing and advertising measurement: If you consent to marketing cookies, we may use them to measure or deliver relevant communications (for example, in connection with online advertising). We do not sell your personal information.
• Legal compliance: We may process data to comply with applicable legal obligations. Legal basis: legal obligation (Article 6(1)(c) GDPR) and compliance with New Zealand law.

Electronic messages (New Zealand): We do not add you to a marketing email or text list based solely on a general contact form submission unless you have clearly consented to receive commercial electronic messages in line with the Unsolicited Electronic Messages Act 2007. Routine replies to your inquiry are not “commercial electronic messages” under that Act.

6. Data Retention

We retain personal data collected through the contact form for a maximum of 12 months from the date of submission, unless a longer retention period is required by law or necessary for ongoing correspondence. After this period, data is securely deleted.

Cookie consent preferences are stored in your browser’s local storage and persist until you clear your browser data or update your preferences.

7. Data Sharing and Transfers

We do not sell, trade, or rent your personal information to third parties. We may share your data with:

• Service providers: Trusted third-party services that assist us in operating the Site (e.g., hosting providers), bound by contractual data protection obligations.
• Legal authorities: When required by law, regulation, or legal process.

If any data transfer occurs outside the European Economic Area (EEA) or New Zealand, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

8. Your Rights

8.1 New Zealand

Under the Privacy Act 2020 you may:

• Request access to personal information we hold about you (subject to the grounds for refusal in the Act).
• Request correction of personal information we hold about you if you believe it is inaccurate, incomplete, or misleading.
• Complain to the Office of the Privacy Commissioner if you believe we have interfered with your privacy (see section 12).

We will respond to access and correction requests as soon as reasonably practicable, and within 20 working days where that is reasonably achievable under the circumstances, unless the Act permits a different timeframe or an extension applies.

8.2 European Economic Area (where GDPR applies)

If the GDPR applies to our processing of your data, you may also have the following rights:

• Right of access: Request a copy of your personal data held by us.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your personal data (“right to be forgotten”), in certain cases.
• Right to restrict processing: Request limitation of how we process your data, in certain cases.
• Right to data portability: Receive your data in a structured, commonly used, machine-readable format, where applicable.
• Right to object: Object to processing based on legitimate interests, where applicable.
• Right to withdraw consent: Withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at office@gloxarelghulae.world. For GDPR-related requests we aim to respond within one month, or within the period required by applicable law.

9. Privacy Breaches (New Zealand)

If we become aware of a privacy breach that is likely to cause serious harm to affected individuals, we will comply with the notifiable privacy breach requirements in Subpart 6 of Part 6 of the Privacy Act 2020, including assessment, record-keeping, and (where required) notification to the Office of the Privacy Commissioner and affected individuals.

10. Automated Decision-Making

We do not use solely automated decision-making, including profiling, that produces legal or similarly significant effects on individuals in connection with this Site.

11. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include HTTPS encryption for all data transmitted between your browser and our servers, secure hosting environments, and regular security assessments.

12. Children’s Privacy

Our Site is not intended for individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

14. Complaints

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with:

• The Office of the Privacy Commissioner (New Zealand): www.privacy.org.nz
• Your local data protection authority within the EEA, if applicable.

15. Contact

For any questions or concerns about this Privacy Policy or our data practices, please contact us:

Gloxarelghulae
58 Arcus Road, Te Horo 5582, New Zealand
Email: office@gloxarelghulae.world
Phone: +64 27 296 9578