Privacy Policy

1. Who We Are

This privacy policy applies to the website operated by Zimravenexmlix ("we", "us", "our"), accessible at zimravenexmlix.ddd.

Our registered address is: 1002 Tirau Road, Lake Karapiro 3494, New Zealand.

For any privacy-related queries, contact us at: relations@zimravenexmlix.world

We are committed to protecting your personal data and processing it in accordance with the EU General Data Protection Regulation (GDPR), the New Zealand Privacy Act 2020, and other applicable legislation.

New Zealand (Privacy Act 2020)

If you are in New Zealand, the Privacy Act 2020 and its Information Privacy Principles (IPPs) govern how we collect, use, store, and disclose your personal information. We collect personal information only for lawful purposes connected to our business, and we take reasonable steps to keep it accurate, secure, and retained only as long as needed for those purposes.

Official guidance on the IPPs is published by the Office of the Privacy Commissioner at privacy.org.nz.

2. Data We Collect

We collect only the data necessary for the purposes described in this policy. The categories of data we may collect include:

2.1 Data You Provide Directly

• Full name and email address — submitted via our contact form
• Message content — the text of your enquiry or feedback
• Consent records — your GDPR consent checkbox timestamp and choice

2.2 Data Collected Automatically

• Browser type and version
• Operating system
• Pages visited and time spent on each page
• Referring URL (where you came from)
• IP address (anonymised where possible)
• Cookie data — subject to your cookie consent preferences

3. How We Use Your Data

We use your data only for the specific purposes for which it was collected:

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Legal Basis for Processing

Under GDPR, we rely on the following legal bases:

• Consent (Art. 6(1)(a)): Where you have given explicit consent, such as when submitting the contact form or accepting analytics cookies.
• Legitimate Interest (Art. 6(1)(f)): For basic website security, improving our content, and responding to enquiries you initiate.
• Legal Obligation (Art. 6(1)(c)): Where processing is required to comply with applicable laws.

You may withdraw consent at any time by contacting us or adjusting your cookie settings.

For visitors in New Zealand who are not covered by the GDPR, we assess collection and use of personal information under the Privacy Act 2020, including the requirements for lawful purpose, transparency, and security in the Information Privacy Principles.

5. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected:

• Contact form submissions: retained for up to 12 months after the enquiry is resolved, then deleted.
• Analytics data: retained for up to 26 months in anonymised or aggregated form.
• Cookie consent records: retained for up to 12 months.
• Security logs: retained for up to 90 days.

After the applicable retention period, data is securely deleted or anonymised.

6. Your Rights

Under GDPR and the New Zealand Privacy Act 2020, you have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data ("right to be forgotten").
• Right to Restrict Processing: Request that we limit how we use your data in certain circumstances.
• Right to Data Portability: Receive your data in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interest.
• Right to Withdraw Consent: Withdraw consent at any time without affecting prior processing.

To exercise any of these rights, contact us at relations@zimravenexmlix.world. We will respond within 30 days (or as soon as practicable, and in any case within 20 working days where the New Zealand Privacy Act 2020 applies to your request, unless we extend that period in accordance with the Act).

If you are in the European Economic Area, you may lodge a complaint with your national data protection supervisory authority.

If you are in New Zealand and believe we have interfered with your privacy, you may complain to the Office of the Privacy Commissioner: Making a complaint (privacy.org.nz).

7. Third-Party Services

Our website may load resources from third-party services. These services may collect data independently according to their own privacy policies:

• Font Awesome (Cloudflare CDN): Icon library loaded via CDN. May collect standard access logs. See Cloudflare's privacy policy for details.
• Google Fonts: Web font service. Google may log font requests including IP addresses. See Google's privacy policy for details.

We do not integrate social media tracking pixels, advertising networks, or third-party analytics platforms by default. Any future integration will be disclosed in this policy.

Overseas disclosure

Where a third-party provider processes data outside New Zealand (for example, CDN or font delivery infrastructure), we rely on you being informed through this policy and, where required, on safeguards such as your consent, the provider’s contractual commitments, or other measures permitted under the Privacy Act 2020.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• HTTPS encryption for all data transmitted between your browser and our server
• No storage of sensitive personal data on client-side storage beyond cookie consent records
• Regular review of access controls and data handling procedures

While we take reasonable precautions, no method of internet transmission is completely secure. We encourage you not to submit sensitive personal information beyond what is necessary for your enquiry.

9. Cookies

Our website uses cookies. For full details about the cookies we use, how they are managed, and your choices, please read our Cookie Policy.

You can manage your cookie preferences at any time via the Cookie Settings option in the cookie banner.

10. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or applicable law. The "Last updated" date at the top of this page indicates when the policy was most recently revised.

We encourage you to review this page periodically. Continued use of the website after any changes constitutes acceptance of the updated policy.

11. New Zealand Statutory Framework & Privacy Breaches

In addition to the rights summarised above, New Zealand law requires us to handle personal information fairly and in line with the IPPs. That includes, where applicable, notifying the Office of the Privacy Commissioner and affected individuals if a notifiable privacy breach is likely to cause serious harm, in accordance with Part 6 of the Privacy Act 2020.

We maintain reasonable processes to identify, assess, and respond to privacy incidents. If you become aware of a possible privacy issue involving this website, please contact us using the details in the Contact section so we can investigate promptly.

12. Children

This website is directed at a general audience and does not knowingly collect personal information from children for marketing purposes. If you are a parent or guardian and believe a child has submitted personal information to us through the contact form, please contact us and we will take reasonable steps to delete that information, subject to any legal obligation to retain it.

13. Contact

For any questions, requests, or concerns regarding this privacy policy or our data handling practices, please contact us:

• Website: zimravenexmlix.world
• Email: relations@zimravenexmlix.world
• Phone: +64 800 473 873
• Address: 1002 Tirau Road, Lake Karapiro 3494, New Zealand