1. Introduction and Scope
This Privacy Policy describes how Elegantcommodity.world collects, uses, stores, and protects your personal data when you visit our website, place orders, or interact with our services. We are committed to transparency and compliance with the General Data Protection Regulation (GDPR), the New Zealand Privacy Act 2020, and other applicable data protection laws worldwide.
By using our website, you acknowledge that you have read and understood this policy. We encourage you to review this document periodically, as we may update it to reflect changes in our practices or legal requirements.
2. Data Controller and Contact Information
The data controller responsible for your personal data is:
Elegantcommodity.world
a9/1 Wagener Place, Mount Albert, Auckland 1025, New Zealand
Email: office@elegantcommodity.world
For any questions regarding data protection, privacy requests, or to exercise your rights, please contact us using the details above. We aim to respond to all inquiries within 30 days.
3. Categories of Personal Data We Collect
We collect the following categories of personal data:
- Identity data: Name, title, and similar identifiers when you submit an order or contact form.
- Contact data: Email address, postal address, and telephone number when provided.
- Technical data: IP address, browser type and version, time zone, device information, and how you interact with our website.
- Usage data: Information about how you use our website, including pages visited and time spent.
- Communication data: Messages you send to us via contact forms or email.
We do not collect sensitive personal data (such as health information) unless you voluntarily provide it and we have a lawful basis to process it.
4. Purposes and Legal Basis for Processing
We process your personal data for the following purposes and legal bases:
- Order fulfilment: To process and deliver your orders. Legal basis: contract performance (Art. 6(1)(b) GDPR).
- Customer communication: To respond to inquiries and provide support. Legal basis: contract performance and legitimate interests.
- Website improvement: To analyze usage and improve our services. Legal basis: legitimate interests (Art. 6(1)(f) GDPR) or consent where required.
- Legal compliance: To comply with tax, accounting, and regulatory obligations. Legal basis: legal obligation (Art. 6(1)(c) GDPR).
- Marketing: To send promotional communications where you have given consent. Legal basis: consent (Art. 6(1)(a) GDPR).
5. Data Retention Periods
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:
- Order and transaction data: 7 years for legal, tax, and accounting requirements.
- Contact form and inquiry data: 2 years from last contact, or until you withdraw consent.
- Analytics data: 26 months, after which it is anonymized or deleted.
- Cookie data: As specified in our Cookie Policy.
- Marketing preferences: Until you unsubscribe or withdraw consent.
After the retention period expires, we securely delete or anonymize your data.
6. Your Rights Under GDPR and Other Laws
Depending on your location, you may have the following rights:
- Right of access: Request a copy of the personal data we hold about you.
- Right to rectification: Request correction of inaccurate or incomplete data.
- Right to erasure: Request deletion of your data in certain circumstances.
- Right to restrict processing: Request that we limit how we use your data.
- Right to data portability: Receive your data in a structured, machine-readable format.
- Right to object: Object to processing based on legitimate interests or for direct marketing.
- Right to withdraw consent: Withdraw consent at any time where processing is based on consent.
- Right to lodge a complaint: Lodge a complaint with a supervisory authority in your country.
To exercise any of these rights, contact us at office@elegantcommodity.world. We will respond within one month.
7. Data Security Measures
We implement appropriate technical and organizational measures to protect your personal data:
- HTTPS encryption for all data transmitted between your browser and our servers.
- Secure servers with access controls and regular security updates.
- Limited access to personal data on a need-to-know basis.
- Regular backups and disaster recovery procedures.
- Staff training on data protection and confidentiality.
We do not sell your personal data to third parties. In the event of a data breach that affects your rights, we will notify you and the relevant authorities as required by law.
8. International Data Transfers
Your data may be processed in New Zealand, the European Economic Area (EEA), and other jurisdictions where our service providers operate. When we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, or adequacy decisions.
9. Third-Party Services
We may use third-party services for payment processing, analytics, and hosting. These providers process data on our behalf and are bound by data processing agreements. We recommend reviewing their privacy policies for full transparency.
10. Contact and Updates
For privacy-related inquiries: office@elegantcommodity.world
We may update this Privacy Policy from time to time. The date of the last update is displayed at the top of this page.