Privacy Policy

1. Introduction

Zomralexchor ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website zomralexchor.world and purchase our products.

This policy is designed to align with the New Zealand Privacy Act 2020 (including the Information Privacy Principles), the General Data Protection Regulation (GDPR) where applicable, and other relevant data protection laws. By using our website, you acknowledge the data practices described in this policy.

2. Information We Collect

2.1 Personal Data You Provide

We collect information that you voluntarily provide to us when you:

• Place an order through our website
• Contact us via email or contact forms
• Subscribe to our communications
• Create an account on our website

This information may include:

• Full name
• Email address
• Phone number (optional)
• Shipping and billing address
• Payment information (processed securely by third-party payment processors)
• Order details and preferences
• Communication history with us

2.2 Automatically Collected Data

When you visit our website, we may automatically collect certain information, including:

• IP address
• Browser type and version
• Operating system
• Device information
• Pages visited and time spent on pages
• Referring website addresses
• Cookies and similar tracking technologies (see our Cookie Policy)

3. Legal Basis for Processing

For individuals in jurisdictions that require a lawful basis (including the EEA/UK), we process personal data on the following grounds under GDPR:

4. How We Use Your Information

We use your personal data for the following purposes:

• To process and fulfill your orders, including shipping and delivery
• To communicate with you about your orders, inquiries, and requests
• To provide customer support and respond to your questions
• To send transactional emails such as order confirmations and shipping updates
• To improve our website, products, and services
• To analyze website usage and trends
• To detect and prevent fraud or abuse
• To comply with legal obligations and protect our rights
• With your consent, to send marketing communications about our products

5. Data Sharing and Disclosure

We do not sell your personal data to third parties. We may share your information with:

5.1 Service Providers

We work with trusted third-party service providers who assist us in operating our business:

• Payment processors for secure transaction handling
• Shipping and logistics companies for order delivery
• Email service providers for communications
• Analytics providers for website improvement
• Cloud hosting providers for data storage

These providers are contractually bound to protect your data and use it only for the specified purposes.

5.2 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal data may be transferred. We will provide notice before your data is transferred and becomes subject to a different privacy policy.

6. International Data Transfers

Your information may be transferred to and processed in countries other than New Zealand. When we transfer data internationally, we ensure appropriate safeguards are in place, including:

• Standard contractual clauses approved by relevant authorities
• Adequacy decisions for countries with sufficient data protection laws
• Other legally approved transfer mechanisms

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy:

After the retention period, data is securely deleted or anonymized.

8. Your Privacy Rights

8.1 New Zealand Privacy Act Rights

If you are in New Zealand, you may request access to personal information we hold about you and request correction of that information under the Privacy Act 2020. If we do not make a requested correction, you may ask us to attach a statement of correction to your record.

If you have concerns about how we handle your personal information, please contact us first. You may also contact the New Zealand Office of the Privacy Commissioner at privacy.org.nz.

8.2 GDPR and Similar Jurisdiction Rights

If you are located in the European Economic Area (EEA), United Kingdom, or similar jurisdictions, you have the following rights regarding your personal data:

• Right of Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can request correction of inaccurate or incomplete data.
• Right to Erasure: You can request deletion of your personal data under certain circumstances.
• Right to Restriction: You can request restriction of processing in certain situations.
• Right to Data Portability: You can request your data in a structured, machine-readable format.
• Right to Object: You can object to processing based on legitimate interests or for marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time.
• Right to Lodge a Complaint: You can file a complaint with your local data protection authority.

To exercise privacy rights, please contact us at writetous@zomralexchor.world. We may request information needed to verify your identity before processing your request. We aim to respond within a reasonable timeframe required by applicable law.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit using SSL/TLS technology
• Secure data storage with access controls
• Regular security assessments and updates
• Employee training on data protection practices
• Incident response procedures for potential data breaches

While we take reasonable precautions, no method of transmission over the internet is completely secure. We cannot guarantee absolute security.

10. Marketing Communications

Where required by law, we send marketing communications only with your consent. You can opt out at any time by using the unsubscribe link in marketing messages or by contacting us directly. Transactional messages related to purchases or service communications may still be sent where necessary.

11. Children's Privacy

Our website and products are not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete that information.

12. Third-Party Links

Our website may contain links to third-party websites. This Privacy Policy does not apply to those external sites. We encourage you to review the privacy policies of any third-party sites you visit.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post the updated policy on this page with a revised "Last updated" date. We encourage you to review this policy periodically.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

We will make every effort to resolve your concerns in a timely and satisfactory manner.