Introduction
Chrexxonghfriz.world ("we," "our," or "us") operates the Maviro website and is committed to protecting your privacy. This comprehensive Privacy Policy explains in detail how we collect, use, disclose, store, and safeguard your information when you visit our website, place an order, or interact with our services. We comply with the General Data Protection Regulation (GDPR), the Privacy Act 2020 (New Zealand), the California Consumer Privacy Act (CCPA) where applicable, and other relevant data protection legislation.
Data Controller
Chrexxonghfriz.world
1A/155 Queen Street, Auckland CBD, Auckland 1010, New Zealand
Email: admin@chrexxonghfriz.world
For any privacy-related inquiries, data subject requests, or to exercise your rights, please contact us using the details above. We have appointed a data protection contact to handle such requests promptly.
Information We Collect
We may collect the following categories of personal data through various lawful means:
Identity Data
Your name, when voluntarily provided via our contact form, order form, or when creating an account. This information allows us to personalise our communications and process your requests correctly.
Contact Data
Email address, telephone number (optional), and postal address when provided for order fulfilment, inquiries, or newsletter subscription. We use this data exclusively for the purposes for which it was provided.
Technical Data
IP address, browser type and version, device information, operating system, referring URL, pages visited, and timestamps. This data helps us maintain security, diagnose technical issues, and improve user experience.
Usage Data
Pages visited, time spent on site, navigation paths, and interaction patterns. This data is collected only when you have consented to analytics cookies and helps us understand how visitors use our platform.
Marketing Data
Communication preferences, interests, and feedback. We collect this only with your explicit consent and use it to tailor our communications to your preferences.
Legal Basis for Processing (GDPR)
Under the GDPR, we process your personal data based on the following lawful grounds:
- Consent: When you voluntarily agree to cookies, marketing communications, or specific data processing activities. You may withdraw consent at any time.
- Contract: To fulfil orders, respond to inquiries, and provide services you have requested.
- Legitimate Interests: To improve our website, prevent fraud, ensure security, and conduct analytics. We always balance our interests against your rights.
- Legal Obligation: When we are required to process data to comply with applicable laws, such as tax or regulatory requirements.
Purposes of Processing
We use your data exclusively for the following purposes:
- Process and respond to your inquiries, orders, and support requests
- Send order confirmations, shipping updates, and delivery notifications
- Improve our website functionality, user experience, and content
- Comply with legal obligations and protect against fraud
- Send marketing communications only when you have given explicit consent
- Conduct anonymised analytics to understand usage patterns
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected:
- Order and inquiry data: Up to 7 years for accounting, tax compliance, and legal purposes
- Marketing data: Until you withdraw consent or object to processing
- Analytics data: Up to 26 months when analytics cookies are accepted
- Cookie preferences: Up to 12 months
- Technical logs: Up to 90 days for security purposes
Upon expiry of the retention period, your data is securely deleted or anonymised.
Your Rights
Under GDPR and applicable law, you have the following rights:
- Right of Access: Request a copy of your personal data we hold
- Right to Rectification: Correct inaccurate or incomplete data
- Right to Erasure: Request deletion of your data, subject to legal exceptions
- Right to Restriction: Limit how we process your data in certain circumstances
- Right to Data Portability: Receive your data in a structured, portable format
- Right to Object: Object to processing based on legitimate interests
- Right to Withdraw Consent: Withdraw consent at any time where processing is consent-based
- Right to Complain: Lodge a complaint with a supervisory authority in your jurisdiction
To exercise any of these rights, contact us at admin@chrexxonghfriz.world. We will respond within 30 days as required by law.
Data Sharing and Third Parties
We may share your data with trusted third parties only when necessary:
- Payment processors to securely complete transactions
- Shipping and logistics providers to deliver your orders
- Analytics providers (only with your cookie consent)
- Legal authorities when required by law or to protect our rights
All third parties are contractually bound to protect your data and use it only for the specified purposes. We do not sell, rent, or trade your personal data.
International Transfers
If we transfer your data outside the European Economic Area (EEA) or New Zealand, we ensure appropriate safeguards are in place. These may include adequacy decisions by the European Commission, Standard Contractual Clauses (SCCs), Binding Corporate Rules, or your explicit consent. We conduct transfer impact assessments where required.
Security Measures
We implement comprehensive technical and organisational measures to protect your data:
- HTTPS/TLS encryption for all data in transit
- Secure storage with role-based access controls
- Regular security audits, vulnerability assessments, and penetration testing
- Staff training on data protection and security best practices
- Incident response procedures for any potential data breach
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The updated version will be posted on this page with a revised "Last updated" date. We encourage you to review this policy periodically. Material changes will be communicated to you where required by law.
Contact Us
For privacy-related questions, to exercise your rights, or for any data protection inquiries:
Chrexxonghfriz.world
1A/155 Queen Street, Auckland CBD, Auckland 1010, New Zealand
Email: admin@chrexxonghfriz.world