Privacy Policy
1. Controller details
This website is operated by Shexlyonchronil, located at 26 Hansen Road, Frankton, Queenstown 9300, New Zealand. Email: connect@shexlyonchronil.world. Phone: +64 274 426 161.
2. New Zealand law and other frameworks
We collect, use, store, and disclose personal information in accordance with the Privacy Act 2020 (New Zealand), including the Information Privacy Principles (IPPs). If you are in the European Economic Area, aspects of the EU General Data Protection Regulation (GDPR) may also apply; where both apply, we will meet the requirements that give you the stronger protection in the circumstances.
3. What data we collect
We may collect the following personal data:
- Name and email address when you submit the contact form
- Message content you voluntarily provide
- Technical data such as IP address, browser type, device type, and pages visited (via analytics cookies, if consented)
We do not knowingly collect personal information from people under 16 through this site without verifiable parental or guardian consent. If you believe we have collected such information, contact us and we will take reasonable steps to delete it.
We do not use solely automated decision-making that produces legal or similarly significant effects about you in relation to the data described in this policy.
4. Purposes and legal basis for processing
We process your personal data for the following purposes:
- Responding to your enquiries (legal basis: your consent and, where applicable, our legitimate interests in operating the site and communicating with visitors)
- Improving the website and understanding visitor behaviour (legal basis: your consent, where analytics or marketing cookies are accepted)
- Complying with legal obligations, including applicable New Zealand record-keeping and reporting requirements
5. Data retention
Contact form submissions are retained for up to 24 months from the date of receipt, after which they are securely deleted, unless a longer period is required by law. Technical log data is retained for up to 12 months. You may request deletion sooner where the law allows.
6. Overseas disclosure
Some of our service providers may process or store data outside New Zealand (for example, cloud hosting or analytics). Where we disclose personal information overseas, we take reasonable steps to ensure the recipient is subject to comparable safeguards, or we rely on an exception permitted by the Privacy Act 2020. You may contact us for more detail about the countries involved and the safeguards we use.
7. Data sharing
We do not sell or rent your personal data. We may share data with trusted service providers (such as hosting or analytics platforms) who process data on our behalf under contractual obligations consistent with the IPPs.
8. Privacy breaches
If we become aware of a notifiable privacy breach under the Privacy Act 2020 (serious harm to affected individuals is likely), we will notify the Office of the Privacy Commissioner and affected individuals as required by law. You may report a suspected breach to us using the contact details below.
9. Your rights
Under the Privacy Act 2020, you generally have the right to:
- Know whether we hold personal information about you and access that information, subject to the grounds for refusal in the Act
- Request correction of your personal information if you believe it is inaccurate
- Ask us to attach a statement of correction if we do not agree to change the information
If you are in the European Economic Area, GDPR may also give you rights such as erasure, restriction of processing, data portability, and the right to object in certain cases, and the right to lodge a complaint with an EU supervisory authority.
Where we rely on your consent (for example, for optional cookies or certain contact form processing), you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.
To exercise any of these rights, contact us at connect@shexlyonchronil.world.
10. Complaints
If you have a privacy concern, please contact us first so we can try to resolve it. You may also complain to the Office of the Privacy Commissioner (New Zealand): privacy.org.nz. If you are in the EEA, you may have the right to complain to your local data protection authority.
11. Security measures
We implement appropriate technical and organisational measures to protect your data, including HTTPS encryption, access controls, and regular security reviews. No method of transmission or storage is fully secure, and we cannot guarantee absolute security.
12. Cookies
We use cookies to operate this website and, with your consent, to analyse visitor behaviour. See our Cookie Policy for full details.
13. Third-party links
This website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.
14. Changes to this policy
We may update this policy from time to time. The "last updated" date at the top reflects the most recent revision. For material changes, we will take reasonable steps to bring the update to your attention (for example, a notice on the site). Continued use of the site after changes constitutes acceptance of the revised policy where the law allows.
15. Contact
For any privacy-related queries, please write to: connect@shexlyonchronil.world or by post to 26 Hansen Road, Frankton, Queenstown 9300, New Zealand.