1. Introduction and Scope
Vlexironioizan ("we", "us", "our") is committed to protecting the privacy and personal data of all individuals who interact with our website at https://vlexironioizan.world (the "Website") and who purchase or enquire about our products.
This Privacy Policy explains what personal data we collect, why we collect it, how we use it, how long we retain it, who we share it with, and what rights you have in relation to your personal data. It applies to all personal data processed by us in connection with the Website and our business operations.
We process personal data in accordance with:
- The New Zealand Privacy Act 2020 and the Information Privacy Principles (IPPs) contained therein;
- The EU General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679), where applicable to individuals in the European Economic Area;
- The UK General Data Protection Regulation (UK GDPR), where applicable;
- Any other applicable data protection legislation.
By using our Website or submitting your personal data to us, you acknowledge that you have read and understood this Privacy Policy.
2. Data Controller Details
The data controller responsible for your personal data is:
- Business Name: Vlexironioizan
- Registered Address: 68 Beach Road, Auckland CBD, Auckland 1010, New Zealand
- Email: message@vlexironioizan.world
- Phone: +64 9 919 2320
- Website: https://vlexironioizan.world
For all privacy-related enquiries, data subject requests, or complaints, please contact us using the details above.
3. Personal Data We Collect
We collect personal data that you provide directly to us, as well as certain data collected automatically when you use our Website. The categories of personal data we may collect include:
3.1 Data You Provide Directly
- Identity data: Full name;
- Contact data: Email address, telephone number (optional), postal/delivery address;
- Order data: Product ordered, order notes, delivery instructions;
- Communication data: Messages, enquiries, and correspondence you send us via the contact form or email;
- Consent records: Records of your consent to our Terms of Service, Privacy Policy, and marketing communications.
3.2 Data Collected Automatically
- Technical data: IP address, browser type and version, operating system, device type, screen resolution;
- Usage data: Pages visited, time spent on pages, links clicked, referring URLs, exit pages;
- Cookie data: Data stored via cookies and similar technologies as described in our Cookie Policy.
3.3 Data We Do Not Collect
We do not knowingly collect special categories of personal data (such as health data, racial or ethnic origin, religious beliefs, or biometric data) unless you voluntarily provide such information in a message or enquiry. We do not collect payment card data directly — all payment processing is handled by third-party payment processors.
4. Purposes and Legal Bases for Processing
We process your personal data only where we have a valid legal basis to do so. The table below sets out our processing purposes and the corresponding legal bases:
| Purpose | Legal Basis | Details |
|---|---|---|
| Processing and fulfilling your order | Performance of a contract (Art. 6(1)(b) GDPR / NZ Privacy Act IPP 1) | We need your name, contact details, and delivery address to process and dispatch your order. |
| Communicating with you about your order | Performance of a contract | Sending order confirmations, dispatch notifications, and responding to order-related enquiries. |
| Responding to enquiries and support requests | Legitimate interests (Art. 6(1)(f) GDPR) / Performance of a contract | Responding to messages submitted via our contact form or email. |
| Sending marketing communications (newsletter) | Consent (Art. 6(1)(a) GDPR / NZ Privacy Act) | Only where you have explicitly subscribed. You may withdraw consent at any time. |
| Website analytics and improvement | Legitimate interests / Consent (for analytics cookies) | Understanding how visitors use our Website to improve content and user experience. |
| Legal compliance and record-keeping | Legal obligation (Art. 6(1)(c) GDPR) | Retaining transaction records as required by New Zealand tax and consumer law. |
| Fraud prevention and security | Legitimate interests | Protecting our Website and customers from fraudulent activity. |
5. How We Use Your Personal Data
We use your personal data for the following specific purposes:
- To receive, process, and fulfil your product orders, including contacting you to confirm order details and arrange delivery;
- To send you order confirmation and dispatch notifications, including tracking information;
- To respond to your enquiries, questions, and support requests in a timely manner;
- To send you marketing emails, newsletters, and promotional offers where you have subscribed and consented to receive these;
- To analyse Website usage patterns and improve the functionality, content, and user experience of our Website;
- To comply with our legal and regulatory obligations under New Zealand law and applicable international law;
- To maintain accurate business and transaction records;
- To detect, prevent, and investigate fraudulent activity, security incidents, and other harmful conduct;
- To enforce our Terms of Service and other agreements.
6. Data Retention Periods
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Order and transaction data | 7 years from the date of transaction | New Zealand tax law (Inland Revenue) requires retention of financial records for 7 years. |
| Customer account and contact data | 3 years after last interaction or order | Legitimate business interest in maintaining customer records and handling potential disputes. |
| Marketing consent and subscription data | Until consent is withdrawn, then deleted within 30 days | Consent-based processing; data deleted promptly upon unsubscribe request. |
| Contact form enquiries | 2 years from date of enquiry | Legitimate interest in maintaining a record of customer communications. |
| Website analytics data | Up to 26 months (aggregated/anonymised) | Standard analytics retention; data anonymised where possible. |
| Cookie consent records | 12 months from consent date | Compliance with cookie consent obligations. |
After the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identified individual.
7. Sharing Your Personal Data
We do not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients where necessary:
7.1 Service Providers and Data Processors
We engage trusted third-party service providers who process personal data on our behalf, under written data processing agreements that require them to maintain appropriate security and confidentiality. These include:
- Logistics and delivery partners: To dispatch and deliver your order within New Zealand;
- Payment processors: To process payment transactions securely (e.g., Stripe, PayPal, Afterpay). We do not store payment card data;
- Email service providers: To send transactional and marketing emails;
- Website hosting providers: To host and maintain our Website infrastructure;
- Analytics providers: To analyse Website usage (subject to your cookie consent preferences).
7.2 Legal and Regulatory Authorities
We may disclose personal data to government authorities, law enforcement agencies, or courts where we are legally required to do so, or where disclosure is necessary to protect our legal rights, prevent fraud, or ensure the safety of individuals.
7.3 Business Transfers
In the event of a merger, acquisition, or sale of all or part of our business assets, personal data may be transferred to the acquiring entity as part of that transaction. We will notify you of any such change in accordance with applicable law.
8. International Data Transfers
Our primary operations are based in New Zealand. Some of our third-party service providers may be located outside New Zealand, including in the European Economic Area, the United Kingdom, or the United States. Where personal data is transferred outside New Zealand, we ensure that appropriate safeguards are in place, including:
- Transfers to countries recognised by New Zealand's Office of the Privacy Commissioner as providing adequate protection;
- Standard Contractual Clauses (SCCs) approved by the European Commission for transfers from the EEA;
- Other legally recognised transfer mechanisms under applicable data protection law.
9. Your Rights
Depending on your location and applicable law, you have the following rights in relation to your personal data:
9.1 Rights Under the New Zealand Privacy Act 2020
- Right of access: You have the right to request access to personal information we hold about you (IPP 6);
- Right of correction: You have the right to request correction of personal information that is inaccurate, out of date, incomplete, or misleading (IPP 7);
- Right to complain: You have the right to make a complaint to the Office of the Privacy Commissioner (OPC) at www.privacy.org.nz if you believe we have breached the Privacy Act.
9.2 Additional Rights Under GDPR (for EEA/UK Residents)
- Right to erasure ("right to be forgotten"): Request deletion of your personal data where there is no compelling reason for its continued processing;
- Right to restrict processing: Request that we restrict processing of your personal data in certain circumstances;
- Right to data portability: Receive your personal data in a structured, commonly used, machine-readable format;
- Right to object: Object to processing based on legitimate interests or for direct marketing purposes;
- Rights related to automated decision-making: Not to be subject to solely automated decisions that produce significant legal effects;
- Right to withdraw consent: Where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact us at message@vlexironioizan.world. We will respond to your request within 20 working days (as required by the NZ Privacy Act) or within one calendar month (as required by GDPR). We may need to verify your identity before processing your request.
10. Cookies and Tracking Technologies
Our Website uses cookies and similar tracking technologies. For full details of the cookies we use, their purposes, and how to manage your cookie preferences, please read our Cookie Policy.
You can manage your cookie preferences at any time using the cookie consent banner on our Website. Please note that disabling certain cookies may affect the functionality of our Website.
11. Security Measures
We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:
- HTTPS encryption for all data transmitted between your browser and our Website;
- SSL/TLS certificates to protect data in transit;
- Access controls limiting personal data access to authorised personnel only;
- Regular review of our security practices and procedures;
- Contractual obligations on third-party processors to maintain appropriate security standards;
- Secure deletion of personal data when no longer required.
While we take all reasonable steps to protect your personal data, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but are committed to promptly notifying affected individuals and relevant authorities in the event of a notifiable data breach, as required by the NZ Privacy Act 2020 and GDPR.
12. Children's Privacy
Our Website and products are intended for adults aged 18 years and over. We do not knowingly collect personal data from children under the age of 18. If we become aware that we have inadvertently collected personal data from a child, we will take steps to delete that data promptly. If you believe we have collected data from a child, please contact us immediately at message@vlexironioizan.world.
13. Third-Party Links
Our Website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites. We encourage you to read the privacy policies of any third-party websites you visit. This Privacy Policy applies solely to our Website and our data processing activities.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email or via a notice on our Website. We encourage you to review this Privacy Policy periodically.
Your continued use of our Website after any changes to this Privacy Policy constitutes your acceptance of the updated policy.
15. Contact and Complaints
If you have any questions, concerns, or complaints about this Privacy Policy or our data processing practices, please contact us:
- Email: message@vlexironioizan.world
- Phone: +64 9 919 2320
- Post: Vlexironioizan, 68 Beach Road, Auckland CBD, Auckland 1010, New Zealand
If you are not satisfied with our response, you have the right to lodge a complaint with:
- New Zealand: Office of the Privacy Commissioner (OPC) – www.privacy.org.nz, Phone: 0800 803 909;
- EEA residents: Your local data protection supervisory authority.