Gracefulefaunaex

General informational website only — not medical, therapeutic, or professional advice.

+64 9 377 4700 Auckland, NZ
Legal

Privacy Policy

This document explains how Gracefulefaunaex collects, uses, stores, and protects personal data when you visit gracefulefaunaex.world or interact with our services.

Last updated:

1. Data Controller Information

The data controller responsible for your personal information is Gracefulefaunaex, operating the website gracefulefaunaex.world. Our registered business address is 253–261 Queen St, Auckland Central, Auckland 1010, New Zealand. You may contact us regarding privacy matters at admin@gracefulefaunaex.world or by telephone at +64 9 377 4700 during business hours (Monday to Friday, 9:00 AM to 5:00 PM NZST).

We are committed to processing personal data in accordance with the General Data Protection Regulation (GDPR) where applicable to individuals in the European Economic Area, the UK GDPR for UK residents, and the New Zealand Privacy Act 2020 for individuals located in New Zealand.

2. Scope of This Policy

This Privacy Policy applies to all personal data collected through our website, contact forms, cookie technologies, email correspondence, and any educational products or planning resources we provide. It does not apply to third-party websites linked from our pages, which maintain their own independent privacy practices.

By using our website or submitting personal data to us, you acknowledge that you have read and understood this policy. Where consent is required for specific processing activities, we will request it separately and clearly.

3. Categories of Personal Data We Collect

3.1 Information You Provide Directly

When you complete our contact form, we collect your name, email address, and message content. If you purchase educational products, we may additionally collect billing information necessary to process the transaction. When you subscribe to communications, we collect your email address and any preferences you indicate.

3.2 Information Collected Automatically

When you visit our website, we may automatically collect technical data including your IP address, browser type and version, operating system, referring URL, pages viewed, time spent on pages, and device identifiers. This data is collected through cookies and similar technologies as described in our Cookie Policy.

3.3 Information from Third Parties

We may receive limited data from analytics providers and payment processors when you interact with our services. Such data is processed only in accordance with our agreements with those providers and applicable law.

4. Legal Bases for Processing

Under the GDPR, we process personal data on the following legal bases:

  • Consent: Where you have given clear consent for us to process your personal data for a specific purpose, such as analytics cookies or marketing communications.
  • Contract: Where processing is necessary to fulfil a contract with you or to take steps at your request before entering into a contract, such as responding to product enquiries.
  • Legitimate Interests: Where processing is necessary for our legitimate interests, such as improving website functionality and security, provided those interests are not overridden by your rights.
  • Legal Obligation: Where processing is necessary to comply with applicable laws, regulations, or court orders.

5. Purposes of Data Processing

We use personal data for the following purposes:

  • Responding to enquiries submitted through our contact form or email
  • Providing access to educational products and planning resources you request
  • Processing payments and managing refund requests in accordance with our Refund Policy
  • Improving website content, usability, and technical performance
  • Detecting and preventing fraudulent activity or security threats
  • Complying with legal and regulatory obligations
  • Sending informational communications where you have opted in

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.

6. Data Retention Periods

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected:

  • Contact form submissions: Retained for 24 months from the date of submission, unless a longer period is required for ongoing correspondence.
  • Transaction records: Retained for 7 years to comply with New Zealand tax and accounting requirements.
  • Analytics data: Aggregated analytics data is retained for 26 months. Individual session data is anonymised after 14 months.
  • Marketing consent records: Retained for the duration of your subscription plus 12 months after withdrawal of consent.
  • Cookie consent preferences: Stored locally on your device until you clear browser data or withdraw consent.

When retention periods expire, data is securely deleted or irreversibly anonymised.

7. Data Sharing and Third Parties

We do not sell your personal data. We may share data with the following categories of recipients where necessary:

  • Hosting and infrastructure providers who maintain our website servers
  • Email service providers used to send responses to your enquiries
  • Payment processors for handling product purchases
  • Analytics providers, only where you have consented to analytics cookies
  • Professional advisers including lawyers and accountants when required
  • Law enforcement or regulatory authorities when legally compelled

All third-party processors are bound by data processing agreements requiring them to protect your data and process it only according to our instructions.

8. International Data Transfers

Some of our service providers may be located outside New Zealand or the European Economic Area. Where personal data is transferred internationally, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission, adequacy decisions, or equivalent protections under New Zealand law.

9. Security Measures

We implement technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

  • HTTPS encryption for all data transmitted between your browser and our servers
  • Access controls limiting personal data access to authorised personnel only
  • Regular security assessments of our website infrastructure
  • Secure storage of payment information through PCI-compliant payment processors
  • Employee training on data protection responsibilities

While we take reasonable precautions, no method of transmission over the internet is completely secure. We encourage you to use strong passwords and protect your own devices.

10. Your Rights Under GDPR and Applicable Law

Depending on your location, you may have the following rights regarding your personal data:

  • Right of Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Request correction of inaccurate or incomplete data.
  • Right to Erasure: Request deletion of your data where there is no compelling reason for continued processing.
  • Right to Restrict Processing: Request limitation of processing under certain circumstances.
  • Right to Data Portability: Receive your data in a structured, machine-readable format.
  • Right to Object: Object to processing based on legitimate interests or for direct marketing.
  • Right to Withdraw Consent: Withdraw consent at any time where processing is consent-based.
  • Right to Lodge a Complaint: File a complaint with your local data protection authority.

To exercise any of these rights, contact us at admin@gracefulefaunaex.world with the subject line "Privacy Rights Request." We will respond within 30 days, or inform you if an extension is required.

11. Children's Privacy

Our website and services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately and we will take steps to delete such information.

12. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. Material changes will be indicated by updating the date at the top of this page. We encourage you to review this policy regularly.

13. Contact Information

For privacy-related enquiries, contact:

Gracefulefaunaex
253–261 Queen St, Auckland Central, Auckland 1010, New Zealand
Email: admin@gracefulefaunaex.world
Phone: +64 9 377 4700