Privacy Policy
Effective date:
This policy explains what personal information is processed, why it is processed, how long it is retained, and how users may exercise legal rights under GDPR and applicable international rules.
Controller details
Owner: Shoraxiliaxepox
Address: 160 Broadway, Newmarket, Auckland 1023, New Zealand
Phone: +64 9 520 6634
Email: online@shoraxiliaxepox.world
New Zealand Business Number (NZBN): [To be added if applicable]
Data categories
We may process contact form data (name, email, message), cookie preference records, technical request metadata, and security logs required to maintain website reliability.
Purpose and legal basis
Processing supports response delivery, platform security, service analytics where consent exists, and compliance obligations. Legal bases may include consent, legitimate interest, and legal duty depending on context.
Data retention periods
Contact communication records are retained for up to 12 months, security logs for up to 180 days unless an incident requires longer analysis, and cookie preferences for up to 6 months before refresh.
International transfers
Where external processors are used across jurisdictions, transfer safeguards are applied through recognized legal mechanisms and contractual controls.
User rights
Users may request access, rectification, erasure, objection, restriction, portability, and consent withdrawal for optional processing categories. Requests can be submitted via the contact details listed above. Under New Zealand Privacy Act 2020, individuals have the right to access and correct their personal information.
Security measures
Controls include transport encryption, role-based access restrictions, periodic access review, system hardening practices, and monitored update routines.
Complaints and regulatory contact
If a privacy concern cannot be resolved directly, users may contact the Office of the Privacy Commissioner in New Zealand at www.privacy.org.nz or other relevant supervisory authority in their jurisdiction.