Privacy Policy

This Privacy Policy explains how Rinsearestore ("we", "us", "our") collects, uses, stores, and protects your personal information when you visit https://rinsearestore.world or contact us. We are committed to protecting your privacy and complying with the New Zealand Privacy Act 2020 and, where applicable, the European Union General Data Protection Regulation (EU GDPR 2016/679).

1. Data Controller

The data controller responsible for your personal information is:

2. What Personal Data We Collect

We collect the following categories of personal data:

2.1 Data You Provide Directly

• Contact form submissions: Full name, email address, and message content, along with your recorded consent.

2.2 Data Collected Automatically

• Technical data: IP address, browser type and version, operating system, referring URL, pages visited, time and date of visit, and time spent on each page.
• Cookie data: Session identifiers and preference data. See our Cookie Policy for full details.

2.3 Data from Third-Party Services

• Google Fonts: When you visit our site, your browser may connect to Google's servers to load fonts. Google may record your IP address. This is subject to Google's Privacy Policy.

3. Purposes and Legal Bases for Processing

Purpose	Data Used	Legal Basis (GDPR)	NZ Privacy Act Basis
Responding to contact form enquiries	Name, email, message	Consent (Art. 6(1)(a))	Principle 1 — purpose of collection
Website security and fraud prevention	IP address, technical data	Legitimate interest (Art. 6(1)(f))	Principle 1, 10
Analytics and site improvement (if consented)	Cookie data, technical data	Consent (Art. 6(1)(a))	Principle 1
Legal compliance	Any relevant data	Legal obligation (Art. 6(1)(c))	Principle 10, 11

4. Data Retention

We retain your personal data only for as long as necessary for the purposes described in this policy or as required by law:

• Contact form data: Retained for up to 24 months from the date of submission, unless you request earlier deletion.
• Technical/log data: Retained for up to 12 months.
• Cookie consent records: Retained for up to 12 months from the date of consent.

After the applicable retention period, data is securely deleted or anonymised.

5. Data Sharing and Transfers

We do not sell, rent, or trade your personal data. We may share your data with trusted service providers who assist us in operating our website, subject to appropriate data processing agreements. Any such providers are required to handle your data in accordance with applicable privacy laws.

If your data is transferred outside New Zealand or the European Economic Area, we ensure appropriate safeguards are in place, including Standard Contractual Clauses or transfers to countries with an adequacy decision.

6. Your Rights

You have the following rights regarding your personal data. To exercise any of these rights, please contact us using the details in Section 1.

Under GDPR (EU/EEA residents)

• Right of access — request a copy of the personal data we hold about you.
• Right to rectification — request correction of inaccurate or incomplete data.
• Right to erasure — request deletion of your data in certain circumstances.
• Right to restriction — request that we limit how we use your data.
• Right to data portability — receive your data in a structured, machine-readable format.
• Right to object — object to processing based on legitimate interests.
• Right to withdraw consent — withdraw any consent at any time without affecting prior processing.
• Right to lodge a complaint — with your national data protection authority.

Under the NZ Privacy Act 2020

• Right to access — request access to personal information we hold about you.
• Right to correction — request correction of inaccurate personal information.
• Right to complain — to the Office of the Privacy Commissioner at www.privacy.org.nz.

We will respond to all valid requests within 30 days (or 20 working days under the NZ Privacy Act).

7. Cookies

We use cookies and similar technologies on our website. For full details on the types of cookies we use, their purposes, and how to manage your preferences, please see our Cookie Policy.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include secure data storage, access controls, and regular security reviews. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Children's Privacy

Our website is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us and we will delete it promptly.

10. External Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies before providing any personal information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page will reflect the most recent revision. Where changes are material, we will take reasonable steps to notify you. We encourage you to review this policy periodically.

12. Contact Us

For any questions, requests, or concerns regarding this Privacy Policy or your personal data, please contact us: