Last updated:
This Privacy Policy describes how Chomrinnax (“we”, “us”, “our”) collects, uses, stores and protects your personal data when you use our website https://chomrinnax.world/ and related services. We process data in accordance with the General Data Protection Regulation (GDPR), the New Zealand Privacy Act 2020 and other applicable laws.
Data controller
Data controller: Chomrinnax.
Address: 20 Lichfield Street, Christchurch Central City, Christchurch 8011, New Zealand.
Email (privacy): info@chomrinnax.world, contact@chomrinnax.world, support@chomrinnax.world, help@chomrinnax.world (at chomrinnax.world).
What data we collect
We may collect: name, email address, phone number (if provided), message content, IP address, browser type, device information, and cookie data. We collect this when you submit forms, contact us, or use our site (including via cookies where you have consented).
Purposes of processing
We use your data to: respond to enquiries and process orders; send necessary transactional communications; improve our website and services; comply with legal obligations; and, where you have consented, for analytics and marketing. We do not use your data for automated decision-making or profiling that has legal or similarly significant effects.
Legal basis (GDPR)
Processing is based on: performance of a contract (orders and enquiries); your consent (e.g. marketing, non-essential cookies); our legitimate interests (e.g. site security, analytics where lawful); and legal obligation where required.
Retention
We keep your data only as long as necessary for the purposes above: typically up to 3 years after the last contact for enquiries and orders, unless a longer period is required by law. Cookie data is retained as described in our Cookie Policy.
Security
We use technical and organisational measures to protect your data (e.g. HTTPS, access controls, secure storage). No transmission over the internet is fully secure; we strive to minimise risks.
Your rights
You have the right to: access your data; rectify inaccuracies; erase data in certain cases; restrict processing; data portability (where applicable); object to processing based on legitimate interests or for direct marketing; withdraw consent at any time; and lodge a complaint with a supervisory authority (e.g. in the EU your local data protection authority, or in New Zealand the Office of the Privacy Commissioner). To exercise these rights, contact us at the email addresses above.
Sharing and transfers
We may share data with service providers (e.g. hosting, email) who act on our instructions and are bound by confidentiality. If we transfer data outside the EEA or New Zealand, we ensure appropriate safeguards (e.g. standard contractual clauses or adequacy decisions).
Changes
We may update this policy from time to time. The “Last updated” date will be revised and we encourage you to review this page periodically.