Privacy Policy

Last updated: . This Privacy Policy describes how Chomrinnkhelxor collects, uses and protects your personal data. We comply with the GDPR and other applicable data protection laws.

Data controller

Data controller: Chomrinnkhelxor. Address: 3B Gorge Road, Queenstown 9300, New Zealand. You can contact us by email: info@chomrinnkhelxor.world, contact@chomrinnkhelxor.world, support@chomrinnkhelxor.world, or help@chomrinnkhelxor.world.

Data we collect

We may collect: name, email address, phone number, and message content when you submit the contact or order form. We may also collect technical data such as IP address and browser type when you use our website, and cookie data as described in our Cookie Policy.

Purposes of processing

We use your data to: respond to your enquiries and process orders; send administrative or transactional messages; improve our website and services; comply with legal obligations; and, where you have consented, send marketing communications.

Legal basis

Processing is based on: performance of a contract or pre-contractual steps (e.g. processing your order); your consent (e.g. marketing, non-essential cookies); our legitimate interests (e.g. website security, analytics where applicable); and legal obligation where required.

Retention

We keep your data only as long as necessary for the purposes above or as required by law. Contact and order data are typically retained for the duration of the business relationship and for a period thereafter for legal and accounting purposes. You may request erasure where the legal basis is consent or where we have no overriding legitimate interest.

Your rights (GDPR)

You have the right to: access your data; rectify inaccurate data; request erasure in certain cases; restrict processing; data portability where applicable; object to processing based on legitimate interests or for direct marketing; withdraw consent at any time; and lodge a complaint with a supervisory authority (e.g. in your country of residence). To exercise these rights, contact us using the details above.

Data sharing

We do not sell your data. We may share data with service providers (e.g. hosting, email) who act on our instructions and are bound by confidentiality and data protection obligations. We may disclose data if required by law or to protect our rights.

Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss or alteration. Our website is served over HTTPS. No method of transmission over the internet is 100% secure; we strive to use best practices appropriate to the data we hold.

International transfers

If we transfer data outside the European Economic Area, we ensure appropriate safeguards (e.g. adequacy decisions, standard contractual clauses) are in place as required by law.

Changes

We may update this policy from time to time. The current version is always on this page. We will indicate the last update date at the top. Continued use of the site after changes constitutes acceptance of the updated policy where permitted by law.