Privacy Policy

Last updated:

1. Introduction

Squablonxlo ("we", "us", or "our") operates the website https://squablonxlo.world (the "Website"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our Website and use our services, in accordance with the General Data Protection Regulation (GDPR), the New Zealand Privacy Act 2020, and other applicable data protection legislation.

By using our Website, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with this policy, please do not use our Website.

2. Data Controller

The data controller responsible for your personal data is:

  • Company: Squablonxlo
  • Address: 186-194 Victoria St W, Auckland CBD, Auckland 1010, New Zealand
  • Email: talk@squablonxlo.world
  • Website: https://squablonxlo.world

3. Personal Data We Collect

We may collect the following categories of personal data:

3.1 Information You Provide Directly

  • Contact Information: Full name, email address, and phone number (optional) when you submit our order form.
  • Communication Data: Messages or notes you include with your order or correspondence.
  • Consent Records: Records of your consent to our Privacy Policy and Terms of Use.

3.2 Information Collected Automatically

  • Technical Data: IP address, browser type and version, operating system, device type, screen resolution, and language preferences.
  • Usage Data: Pages visited, time spent on pages, referring website addresses, clickstream data, and navigation patterns.
  • Cookie Data: Information collected through cookies and similar technologies as described in our Cookie Policy.

4. Legal Basis for Processing (GDPR)

We process your personal data based on the following legal grounds:

  • Consent (Article 6(1)(a) GDPR): Where you have given explicit consent, such as when submitting the order form or accepting optional cookies.
  • Contractual Necessity (Article 6(1)(b) GDPR): Where processing is necessary for the performance of a contract or to take pre-contractual steps at your request.
  • Legitimate Interest (Article 6(1)(f) GDPR): Where we have a legitimate business interest, such as improving our Website and services, provided this does not override your fundamental rights and freedoms.
  • Legal Obligation (Article 6(1)(c) GDPR): Where we are required to process your data to comply with applicable laws and regulations.

5. How We Use Your Personal Data

We use your personal data for the following purposes:

  • To process and manage your orders and enquiries.
  • To communicate with you about your orders, including confirmations and updates.
  • To provide customer support and respond to your requests.
  • To improve and optimise our Website, content, and user experience.
  • To analyse Website usage through anonymised and aggregated data.
  • To comply with legal obligations and enforce our terms.
  • To detect, prevent, and address security issues and fraud.

6. Data Sharing and Disclosure

We do not sell, rent, or trade your personal data. We may share your data with:

  • Service Providers: Third-party processors who assist us with website hosting, payment processing, email delivery, and analytics, under contractual obligations to protect your data.
  • Legal Authorities: Where required by law, regulation, court order, or governmental request.
  • Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction, subject to the same privacy protections.

7. International Data Transfers

Your personal data may be transferred to and processed in countries outside of New Zealand or the European Economic Area (EEA). Where such transfers occur, we ensure appropriate safeguards are in place, including:

  • Standard Contractual Clauses (SCCs) approved by the European Commission.
  • Adequacy decisions by the European Commission or New Zealand Privacy Commissioner.
  • Other legally recognised transfer mechanisms.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy, unless a longer retention period is required or permitted by law. Specifically:

  • Order Data: Retained for up to 7 years for tax and legal compliance purposes.
  • Communication Data: Retained for up to 2 years after the last interaction.
  • Analytics Data: Aggregated and anonymised data may be retained indefinitely.
  • Cookie Consent Records: Retained for up to 12 months before re-consent is requested.

When personal data is no longer needed, it is securely deleted or anonymised.

9. Your Rights

Under the GDPR and the New Zealand Privacy Act 2020, you have the following rights:

  • Right of Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Request correction of inaccurate or incomplete data.
  • Right to Erasure: Request deletion of your personal data, subject to legal obligations.
  • Right to Restriction: Request restriction of processing in certain circumstances.
  • Right to Data Portability: Request your data in a structured, commonly used, machine-readable format.
  • Right to Object: Object to processing based on our legitimate interests.
  • Right to Withdraw Consent: Withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
  • Right to Lodge a Complaint: File a complaint with the Office of the Privacy Commissioner (New Zealand) or a supervisory authority in the EU/EEA.

To exercise any of these rights, contact us at: talk@squablonxlo.world

We will respond to your request within 30 days, in accordance with applicable law.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

  • HTTPS encryption for all data transmitted between your browser and our Website.
  • Regular security assessments and vulnerability monitoring.
  • Access controls limiting who can access personal data within our organisation.
  • Secure data storage with encryption at rest where appropriate.

While we strive to protect your data, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security but will notify you and the relevant authorities in the event of a data breach as required by law.

11. Cookies and Tracking Technologies

We use cookies and similar tracking technologies on our Website. For detailed information about the types of cookies we use, their purposes, and how to manage your cookie preferences, please refer to our Cookie Policy.

12. Third-Party Links

Our Website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to read the privacy policies of any third-party websites you visit.

13. Children's Privacy

Our Website and products are not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a minor without parental consent, we will take steps to delete that data promptly.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. The updated policy will be posted on this page with a revised "Last updated" date. We encourage you to review this page periodically for the latest information.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact us:

  • Email: talk@squablonxlo.world
  • Address: 186-194 Victoria St W, Auckland CBD, Auckland 1010, New Zealand