Privacy Policy

Last updated: 1 May 2025  |  Effective date: 1 May 2025

1. Introduction

Gorgeousaosweepi ("we", "us", "our") is committed to protecting your personal information. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and what rights you have in relation to it.

This policy applies to all users of our website at gorgeousaosweepi.world and complies with the New Zealand Privacy Act 2020 and, where applicable, the European Union General Data Protection Regulation (GDPR) 2016/679.

2. Data We Collect

2.1 Information You Provide Directly

When you use our contact form, we collect:

• Your full name
• Your email address
• The content of your message
• A record of your GDPR consent including timestamp

2.2 Information Collected Automatically

When you visit our website, we may automatically collect:

• IP address (anonymised where possible)
• Browser type and version
• Operating system
• Pages visited and time spent on each page
• Referring website or source
• Device type (desktop, tablet, mobile)
• Cookie identifiers (see our Cookie Policy)

2.3 Information We Do Not Collect

We do not collect sensitive personal data such as health information, financial details, racial or ethnic origin, religious beliefs, or biometric data.

3. Purposes and Legal Bases for Processing

We process your personal data for the following purposes:

• Responding to enquiries — Legal basis: Legitimate interest (Article 6(1)(f) GDPR) / necessary to take steps at your request prior to entering a contract. Retention: up to 24 months from the date of last correspondence.
• Website analytics — Legal basis: Consent (Article 6(1)(a) GDPR) when you accept analytics cookies. Retention: aggregated data retained for up to 14 months; raw session data up to 6 months.
• Marketing communications — Legal basis: Consent (Article 6(1)(a) GDPR). Retention: until you withdraw consent.
• Legal obligations and dispute resolution — Legal basis: Legal obligation (Article 6(1)(c) GDPR). Retention: as required by applicable law.
• Improving website functionality and security — Legal basis: Legitimate interest. Retention: server logs retained for up to 30 days.

4. Cookies

We use cookies and similar tracking technologies on our website. For full details of the cookies we use, their purposes, and how to manage them, please read our Cookie Policy.

5. Data Sharing and Third Parties

We do not sell, rent or trade your personal data. We may share data with the following categories of third parties:

• Hosting and infrastructure providers — to deliver and maintain our website
• Analytics service providers — only if you have consented to analytics cookies
• Email service providers — to facilitate responses to your enquiries
• Legal and regulatory authorities — where required by law, court order or to protect the rights and safety of ourselves or others

All third parties are required to handle your data securely and in accordance with applicable data protection laws. Where providers are located outside New Zealand or the European Economic Area, we ensure appropriate safeguards are in place.

6. International Data Transfers

Our website is operated from New Zealand. If you are located in the European Union or European Economic Area, your data may be transferred to and processed in New Zealand, which has been recognised by the European Commission as providing an adequate level of data protection. Any further international transfers will be subject to appropriate safeguards such as Standard Contractual Clauses.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures include:

• HTTPS encryption for all data transmitted via our website
• Access controls limiting who can view personal data
• Regular review of our data handling practices
• Secure deletion of data when retention periods expire

No method of transmission over the internet is completely secure. While we take reasonable steps to protect your data, we cannot guarantee absolute security.

8. Your Rights

Depending on your location and applicable law, you may have the following rights regarding your personal data:

• Right of access — to request a copy of the personal data we hold about you
• Right to rectification — to request correction of inaccurate or incomplete data
• Right to erasure — to request deletion of your personal data in certain circumstances
• Right to restriction of processing — to request that we limit how we use your data
• Right to data portability — to receive your data in a structured, machine-readable format
• Right to object — to object to processing based on legitimate interests or for direct marketing
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing
• Right not to be subject to automated decision-making — we do not engage in automated decision-making or profiling that produces legal or similarly significant effects

To exercise any of these rights, please contact us at team@gorgeousaosweepi.world. We will respond within 30 days. We may ask you to verify your identity before fulfilling your request.

9. Complaints

If you are located in New Zealand and have a concern about how we handle your personal information, you may contact the Office of the Privacy Commissioner at privacy.org.nz.

If you are located in the European Union, you have the right to lodge a complaint with your local supervisory authority. A list of EU data protection authorities is available at the European Data Protection Board website.

10. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this policy, or as required by law. Specific retention periods are:

• Contact form submissions: up to 24 months from last correspondence
• Analytics data: up to 14 months
• Server access logs: up to 30 days
• Consent records: up to 3 years from the date of consent

11. Children's Privacy

Our website is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately so we can delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our website after changes are posted constitutes acceptance of the updated policy.

13. Contact Us

For any questions, concerns or requests regarding this Privacy Policy or your personal data, please contact us:

Gorgeousaosweepi
133 Molesworth Street, Thorndon, Wellington 6011, New Zealand
0800 855 066
team@gorgeousaosweepi.world