Svryxellvorbio

Privacy Policy

Last updated:

1. Introduction

This Privacy Policy describes how Svryxellvorbio ("we", "us", or "our") collects, uses, stores, and protects your personal data when you visit our website at https://svryxellvorbio.world (the "Website") or use our services. We are committed to protecting your privacy and handling your personal data in compliance with the General Data Protection Regulation (GDPR — EU Regulation 2016/679), the New Zealand Privacy Act 2020, and any other applicable data protection laws.

2. Data Controller

The data controller responsible for the processing of your personal data is:

Svryxellvorbio
277 Broadway, Newmarket, Auckland 1023, New Zealand
Email: managers@svryxellvorbio.world

3. Personal Data We Collect

We may collect the following categories of personal data:

3.1 Data You Provide Directly

  • Contact information: name, email address, and phone number (optional) when you submit our order form.
  • Message content: any text you enter in the message field of our order form.
  • Consent records: your consent to data processing and acceptance of our policies.

3.2 Data Collected Automatically

  • Technical data: IP address, browser type and version, operating system, device type, screen resolution, and language preferences.
  • Usage data: pages visited, time spent on pages, referral source, click patterns, and navigation paths.
  • Cookie data: information collected through cookies and similar technologies as described in our Cookie Policy.

4. Purposes and Legal Basis for Processing

We process your personal data for the following purposes and on the following legal bases:

  • Order processing: To process and fulfil your orders, communicate regarding your order status, and provide customer support. Legal basis: performance of a contract (Article 6(1)(b) GDPR).
  • Communication: To respond to your enquiries and provide requested information. Legal basis: legitimate interest (Article 6(1)(f) GDPR).
  • Website functionality: To ensure the proper functioning of our Website, including session management and security. Legal basis: legitimate interest (Article 6(1)(f) GDPR).
  • Analytics: To analyse website usage and improve our services and user experience (only with your consent). Legal basis: consent (Article 6(1)(a) GDPR).
  • Marketing: To send promotional communications (only with your explicit consent). Legal basis: consent (Article 6(1)(a) GDPR).
  • Legal compliance: To comply with legal obligations, including tax, accounting, and regulatory requirements. Legal basis: legal obligation (Article 6(1)(c) GDPR).

5. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law:

  • Order data: retained for up to 7 years from the date of your last transaction to comply with tax and accounting obligations under New Zealand law.
  • Communication records: retained for up to 2 years from the date of last communication.
  • Analytics data: anonymised and retained for up to 26 months.
  • Marketing consent records: retained for as long as the consent is valid, plus 3 years after withdrawal for record-keeping purposes.
  • Cookie data: retention periods vary by type. See our Cookie Policy for details.

6. Data Sharing and Third Parties

We do not sell your personal data. We may share your data with the following categories of third parties:

  • Service providers: hosting, payment processing, email delivery, and analytics providers who process data on our behalf under data processing agreements.
  • Legal authorities: when required by law, regulation, or legal process.
  • Business transfers: in the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction, subject to the same privacy protections.

All third parties are required to process your data in accordance with applicable data protection laws and our instructions.

7. International Data Transfers

Your personal data may be transferred to and processed in countries outside of New Zealand and the European Economic Area (EEA). In such cases, we ensure that appropriate safeguards are in place, including:

  • Standard Contractual Clauses (SCCs) approved by the European Commission.
  • Adequacy decisions by the European Commission or the New Zealand Privacy Commissioner.
  • Other legally recognised transfer mechanisms.

8. Your Rights

Under the GDPR and the New Zealand Privacy Act 2020, you have the following rights regarding your personal data:

  • Right of access: You have the right to request a copy of the personal data we hold about you.
  • Right to rectification: You have the right to request correction of inaccurate or incomplete personal data.
  • Right to erasure: You have the right to request deletion of your personal data where there is no compelling reason for its continued processing.
  • Right to restriction of processing: You have the right to request that we restrict the processing of your personal data in certain circumstances.
  • Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
  • Right to object: You have the right to object to processing based on legitimate interests or for direct marketing purposes.
  • Right to withdraw consent: Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of prior processing.
  • Right to lodge a complaint: You have the right to lodge a complaint with a supervisory authority (in New Zealand: the Office of the Privacy Commissioner; in the EU: your local Data Protection Authority).

To exercise any of these rights, please contact us at: managers@svryxellvorbio.world

We will respond to your request within 20 working days (under New Zealand law) or one month (under GDPR), whichever is shorter.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

  • Encryption of data in transit using TLS/SSL protocols.
  • Secure storage of personal data on protected servers.
  • Access controls limiting data access to authorised personnel only.
  • Regular security assessments and updates to our security practices.
  • Staff training on data protection and information security.

While we take all reasonable precautions, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security of your data.

10. Children's Privacy

Our Website and services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe that we have inadvertently collected data from a child under 16, please contact us immediately, and we will take steps to delete such data.

11. Links to Third-Party Websites

Our Website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites. We encourage you to read the privacy policies of any third-party websites you visit.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or other factors. The updated version will be posted on this page with a revised "Last updated" date. We encourage you to review this Privacy Policy periodically. Continued use of the Website after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us:

Svryxellvorbio
277 Broadway, Newmarket, Auckland 1023, New Zealand
Email: managers@svryxellvorbio.world