Kheflaxxjloxox

Privacy Policy

Last updated:

1. Introduction

Kheflaxxjloxox ("we", "our", "us"), located at 131 Ponsonby Road, Ponsonby, Auckland 1011, New Zealand, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website at https://kheflaxxjloxox.world (the "Website") and purchase our products.

This policy complies with the New Zealand Privacy Act 2020, the General Data Protection Regulation (GDPR) (EU) 2016/679, and other applicable data protection laws. By accessing or using our Website, you acknowledge that you have read and understood this Privacy Policy.

2. Data Controller

The data controller responsible for your personal data is:

  • Business Name: Kheflaxxjloxox
  • Address: 131 Ponsonby Road, Ponsonby, Auckland 1011, New Zealand
  • Email: call-us@kheflaxxjloxox.world
  • Website: https://kheflaxxjloxox.world

3. Information We Collect

3.1 Personal Information You Provide

We may collect the following personal information when you interact with our Website:

  • Contact Information: full name, email address, phone number (optional)
  • Order Information: messages, special requests, and order preferences
  • Consent Records: records of your consent to data processing and cookie preferences

3.2 Information Collected Automatically

When you visit our Website, we may automatically collect certain information:

  • Technical Data: IP address, browser type and version, operating system, device information
  • Usage Data: pages visited, time spent on pages, referral source, navigation paths
  • Cookie Data: information collected through cookies and similar technologies (see our Cookie Policy)

4. Legal Basis for Processing (GDPR)

We process your personal data on the following legal bases under Article 6 of the GDPR:

  • Consent (Article 6(1)(a)): When you submit an order form or accept optional cookies, you provide explicit consent to the processing of your data for those specific purposes.
  • Contractual Necessity (Article 6(1)(b)): Processing necessary for the performance of a contract or to take steps at your request prior to entering into a contract (e.g., processing your product order).
  • Legitimate Interests (Article 6(1)(f)): Processing necessary for our legitimate interests, such as improving our Website and services, provided that your rights and freedoms do not override those interests.
  • Legal Obligation (Article 6(1)(c)): Processing necessary to comply with legal obligations to which we are subject.

5. How We Use Your Information

We use the information we collect for the following purposes:

  • To process and fulfil your orders and enquiries
  • To communicate with you about your order status
  • To respond to your messages and support requests
  • To improve and optimise our Website and user experience
  • To comply with legal and regulatory requirements
  • To detect and prevent fraud or security incidents
  • To analyse Website usage through anonymised analytics (with your consent)

6. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties. We may share your data only in the following circumstances:

  • Service Providers: Trusted third-party service providers who assist us in operating our Website, processing orders, or delivering services, and who are contractually bound to protect your data.
  • Legal Requirements: When required by law, regulation, legal process, or governmental request.
  • Business Transfers: In connection with a merger, acquisition, or sale of assets, your data may be transferred as part of the transaction, subject to equivalent data protection standards.
  • With Your Consent: In any other case, we will share your data only with your explicit consent.

7. International Data Transfers

Your personal data may be transferred to, and processed in, countries outside of your country of residence, including countries outside the European Economic Area (EEA) or New Zealand. When such transfers occur, we ensure that appropriate safeguards are in place, including:

  • Standard Contractual Clauses approved by the European Commission
  • Adequacy decisions where applicable
  • Binding corporate rules or other legally recognised transfer mechanisms

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

  • Order Data: Retained for up to 7 years after the transaction to comply with tax and accounting obligations.
  • Contact Enquiries: Retained for up to 2 years after the last communication, unless a longer period is required for legal purposes.
  • Cookie Consent Records: Retained for up to 12 months, after which you will be asked to renew your preferences.
  • Analytics Data: Anonymised analytics data may be retained indefinitely as it does not constitute personal data.

When data is no longer needed, it is securely deleted or anonymised.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

  • HTTPS encryption for all data transmitted via our Website
  • Access controls limiting data access to authorised personnel only
  • Regular security assessments and updates
  • Secure data storage with appropriate backup procedures

While we take reasonable steps to protect your data, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

10. Your Rights

Under the GDPR and the New Zealand Privacy Act 2020, you have the following rights:

  • Right of Access: You have the right to request a copy of the personal data we hold about you.
  • Right to Rectification: You may request correction of inaccurate or incomplete personal data.
  • Right to Erasure: You may request deletion of your personal data where there is no compelling reason for continued processing.
  • Right to Restrict Processing: You may request that we restrict the processing of your data under certain circumstances.
  • Right to Data Portability: You have the right to receive your data in a structured, commonly used, and machine-readable format.
  • Right to Object: You may object to the processing of your personal data based on legitimate interests or for direct marketing purposes.
  • Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of prior processing.
  • Right to Lodge a Complaint: You have the right to lodge a complaint with the Office of the Privacy Commissioner (New Zealand) or the relevant supervisory authority in your jurisdiction.

To exercise any of these rights, please contact us at: call-us@kheflaxxjloxox.world

We will respond to your request within 20 working days (as required under New Zealand law) or within one month (as required under GDPR).

11. Children's Privacy

Our Website and products are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected data from a minor, please contact us immediately, and we will take steps to delete such information.

12. Third-Party Links

Our Website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites. We encourage you to review the privacy policies of any third-party sites you visit.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

  • Business Name: Kheflaxxjloxox
  • Address: 131 Ponsonby Road, Ponsonby, Auckland 1011, New Zealand
  • Email: call-us@kheflaxxjloxox.world
  • Website: https://kheflaxxjloxox.world

15. Supervisory Authorities

If you are not satisfied with our response to your privacy concern, you may contact: