Privacy Policy

Last Updated:

1. Introduction

Spryxellxit ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website spryxellxit.world and purchase our products, including PurePlant Harmony.

This policy complies with the New Zealand Privacy Act 2020 and its 13 Information Privacy Principles (IPPs), which govern how we collect, hold, use, and disclose your personal information. Where applicable, we also align with the General Data Protection Regulation (GDPR) for visitors from the European Economic Area.

2. Data Controller Information

The data controller responsible for your personal data is:

3. Information We Collect

3.1 Personal Data You Provide

We collect information that you voluntarily provide when you:

• Place an order on our website
• Create an account
• Subscribe to our newsletter
• Contact us with inquiries
• Participate in surveys or promotions

This information may include:

• Name (first and last)
• Email address
• Phone number (optional)
• Shipping and billing address
• Payment information (processed securely by third-party processors)
• Any messages or communications you send us

3.2 Automatically Collected Data

When you visit our website, we may automatically collect:

• IP address
• Browser type and version
• Operating system
• Device information
• Pages visited and time spent
• Referring website
• Cookies and similar technologies (see our Cookie Policy)

4. Purpose of Data Processing (IPP 10)

We collect and use personal information only for lawful purposes connected with our functions and necessary for those purposes, in accordance with the Privacy Act 2020. We process your personal data for the following purposes:

• Order Fulfillment: To process, ship, and deliver your orders
• Customer Service: To respond to your inquiries and provide support
• Communication: To send order confirmations, shipping updates, and important notices
• Marketing: To send promotional materials (only with your consent)
• Legal Compliance: To comply with legal obligations and regulations
• Website Improvement: To analyze usage patterns and improve our services
• Fraud Prevention: To detect, prevent, and address fraudulent activities

5. Legal Basis for Processing (GDPR)

We process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary to fulfill your orders
• Consent: For marketing communications and non-essential cookies
• Legitimate Interests: For fraud prevention, website security, and business analytics
• Legal Obligation: When required by law

6. Data Retention (IPP 9)

We do not keep your personal information longer than required for the purposes for which it may lawfully be used, in line with the Privacy Act 2020. We retain your personal data only for as long as necessary:

• Order Records: 7 years (for tax and legal compliance)
• Customer Account Data: Until account deletion request or 3 years of inactivity
• Marketing Preferences: Until you withdraw consent
• Website Analytics: 26 months
• Customer Service Records: 3 years after resolution

7. Data Sharing and Disclosure

We may share your data with:

• Service Providers: Payment processors, shipping companies, email services
• Legal Authorities: When required by law or court order
• Business Transfers: In the event of merger, acquisition, or sale

We do not sell your personal data to third parties.

8. International Data Transfers (IPP 12)

Under the Privacy Act 2020, we may only disclose personal information to an overseas recipient if that recipient is bound by privacy protections that are comparable to New Zealand's, or we believe the recipient is required to protect the information in a way that provides comparable safeguards. Your data may be transferred to countries outside New Zealand and the European Economic Area. We ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission where relevant.

9. Your Rights (IPPs 6, 7 and Privacy Act 2020)

Under the New Zealand Privacy Act 2020 you have the right to:

• Access (IPP 6): Request access to the personal information we hold about you. We will respond as soon as reasonably practicable and in any event within 20 working days of receiving your request, as required by the Privacy Act 2020.
• Correction (IPP 7): Request correction of any personal information that is inaccurate, incomplete, or misleading.

Where applicable (for example, for individuals in the European Economic Area), you may also have the right to rectification, erasure ("right to be forgotten"), restriction of processing, data portability, objection to processing, and to withdraw consent at any time.

To exercise these rights, please contact us at mailuse@spryxellxit.world. For access and correction requests under the Privacy Act 2020, we will respond within 20 working days.

10. Data Security (IPP 5)

We take reasonable security safeguards to protect your personal information against loss, unauthorised access, use, modification, or disclosure, as required by the Privacy Act 2020. We implement appropriate technical and organizational measures including:

• SSL/TLS encryption for data transmission
• Secure payment processing (PCI-DSS compliant)
• Regular security assessments
• Access controls and authentication
• Employee training on data protection

11. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal data from children.

12. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites.

13. Marketing Communications (Unsolicited Electronic Messages Act 2007)

We send commercial electronic messages (e.g. marketing emails) only where we have your consent (express, or inferred from an existing relationship where the message is relevant). We will include clear information about who authorised the message and a functional unsubscribe option in every marketing message. We do not treat silence or inaction as consent.

14. Complaints

If you believe we have not handled your personal information in accordance with the Privacy Act 2020, you may make a complaint to us first. If you are not satisfied with our response, you have the right to complain to:

• Office of the Privacy Commissioner (New Zealand): PO Box 10094, Wellington 6143; phone 0800 803 909; website privacy.org.nz
• Your local Data Protection Authority (for EU residents)

15. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated revision date. We encourage you to review this policy regularly.

16. Contact Us

For any questions or concerns about this Privacy Policy or our data practices, please contact us: