Choglannxulau

Privacy Policy

Last updated:

This Privacy Policy explains how Choglannxulau ("we", "us", or "our") collects, uses, stores, and protects personal data when you use this website. We are committed to processing your data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR), the New Zealand Privacy Act 2020, and all applicable data protection legislation.

1. Data Controller

The data controller responsible for your personal data is:

Choglannxulau
88 Jervois Road, Ponsonby, Auckland 1011, New Zealand
Phone: +64 9 869 4430
Email: correspondence@choglannxulau.world

2. Data We Collect

We may collect and process the following categories of personal data:

Information you provide directly

  • Your name and email address when you submit the contact form
  • The content of messages you send to us
  • Your consent record from the contact form (GDPR checkbox)

Information collected automatically

  • Technical data including your IP address, browser type, and operating system
  • Pages visited, time spent on pages, and referral sources
  • Cookie identifiers and session data (see our Cookie Policy)

3. Legal Basis for Processing

We process your personal data on the following legal grounds:

  • Consent (Article 6(1)(a) GDPR): Where you have given explicit consent, such as when submitting the contact form or accepting non-essential cookies.
  • Legitimate Interests (Article 6(1)(f) GDPR): For basic website operation, security monitoring, and improving our platform, where these interests are not overridden by your rights.
  • Legal Obligation (Article 6(1)(c) GDPR): Where processing is required to comply with applicable laws.

4. Purposes of Processing

We use your personal data for the following purposes:

  • To respond to enquiries submitted through the contact form
  • To operate and maintain the website
  • To improve website content and layout
  • To comply with legal obligations
  • To protect against fraudulent or unauthorised activity
  • Where you have consented to analytics or marketing cookies, to measure traffic, improve our content, and understand the effectiveness of our advertising campaigns (we do not load optional analytics or advertising scripts unless and until you consent and we implement such tools)

We do not send commercial electronic messages (such as marketing newsletters) unless we have consent or another lawful basis under the Unsolicited Electronic Messages Act 2007 (New Zealand) and any other applicable rules. Routine replies to messages you send us are treated as transactional communications.

5. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected:

  • Contact form submissions: up to 24 months from the date of enquiry, unless a longer period is required
  • Analytics data: up to 26 months in aggregated or anonymised form
  • Cookie consent records: up to 12 months
  • Server logs: up to 90 days for security purposes

6. Data Sharing and Third Parties

We do not sell or rent your personal data to third parties. We may share data with trusted service providers who assist in operating our platform, including hosting providers and, where you have given the relevant consent, analytics or advertising partners. All third-party processors are bound by appropriate contractual protections and are required to maintain suitable security measures.

Where you have consented to relevant cookie categories, online advertising or measurement partners (for example, Google) may receive or process limited technical or usage data to deliver or measure advertising. Those partners act as independent controllers or processors according to their terms and privacy notices.

We may disclose personal data where required by law, court order, or to protect the rights and safety of our users or the public.

Where we transfer personal information outside New Zealand, we take reasonable steps under the Privacy Act 2020 to ensure that the overseas recipient is required to protect the information in a way that, overall, provides comparable safeguards to those in the Act (or we rely on another permitted basis). Where we transfer data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place where required, such as Standard Contractual Clauses approved by the European Commission.

7. Your Rights

Under the GDPR and NZ Privacy Act 2020, you have the following rights regarding your personal data:

  • Right of access: You may request a copy of the personal data we hold about you.
  • Right to rectification: You may ask us to correct inaccurate or incomplete data.
  • Right to erasure: You may request the deletion of your personal data where there is no lawful reason to retain it.
  • Right to restrict processing: You may request that we limit how we process your data in certain circumstances.
  • Right to data portability: You may request your data in a structured, commonly used, machine-readable format.
  • Right to object: You may object to processing based on legitimate interests at any time.
  • Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting prior lawful processing.

If you are in New Zealand, we also handle personal information in accordance with the Privacy Act 2020 and the Information Privacy Principles (IPPs). In particular, you may request access to personal information we hold about you (IPP 6) and request correction of that information if you believe it is inaccurate (IPP 7), subject to the exceptions in the Act. You may make a complaint to the Office of the Privacy Commissioner if you consider we have interfered with your privacy.

To exercise any of these rights, please contact us at correspondence@choglannxulau.world. We will respond within 30 days. We may need to verify your identity before actioning your request.

8. Cookies

Our website uses cookies to operate and improve the platform. For detailed information on the types of cookies we use and how to manage your preferences, please read our Cookie Policy.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These include encrypted data transmission (HTTPS), access controls, and regular security reviews. No method of transmission over the internet is entirely secure, and we cannot guarantee absolute security.

10. Notifiable Privacy Breaches (New Zealand)

Where the Privacy Act 2020 applies, we maintain processes to assess whether a privacy breach is notifiable (for example, where the breach has caused, or is likely to cause, serious harm to an affected individual). Where we are required to notify affected individuals and the Office of the Privacy Commissioner, we will do so in accordance with the Act. If you believe you may be affected by a breach involving us, please contact us using the details below.

11. Automated Decision-Making

We do not make decisions that produce legal or similarly significant effects concerning you based solely on automated processing of your personal data. If that changes in the future, we will update this Privacy Policy and, where required, provide further information and an opportunity to request human review.

12. Children's Data

This website is not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you become aware that a child has submitted personal data to us, please contact us and we will delete it promptly.

13. Supervisory Authority

If you are located in the European Union and believe we are not handling your data in accordance with GDPR, you have the right to lodge a complaint with your local data protection supervisory authority. In New Zealand, you may contact the Office of the Privacy Commissioner at www.privacy.org.nz.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The date at the top of this page indicates when the policy was last revised. We encourage you to review this page periodically.

15. Contact Us

For any questions or concerns regarding this Privacy Policy or how we handle your data, please contact us:

Choglannxulau
88 Jervois Road, Ponsonby, Auckland 1011, New Zealand
correspondence@choglannxulau.world
+64 9 869 4430