Privacy Policy

Last updated:

This Privacy Policy describes how Ryxanordscyx ("we", "us", or "our") collects, uses, and protects personal data obtained through the website ryxanordscyx.world. We are committed to handling your data transparently and in accordance with the New Zealand Privacy Act 2020, the General Data Protection Regulation (GDPR) where it applies to individuals in the European Economic Area (EEA), and other applicable data protection legislation.

If you live in New Zealand, the Privacy Act 2020 is your primary framework for how we handle your personal information. If you are in the EEA, GDPR provides additional rights and obligations as described below.

1. Data Controller

The data controller responsible for your personal information is:

2. New Zealand: Privacy Act 2020

We comply with the Information Privacy Principles (IPPs) set out in the Privacy Act 2020. In practice, this means we collect personal information only for lawful purposes connected to our business, we are open about what we collect and why, we keep information accurate and up to date where reasonable, we store it securely, and we give you a clear way to ask for access to or correction of your personal information.

If we become aware of a notifiable privacy breach that is likely to cause anyone serious harm, we will follow the requirements of the Privacy Act (including, where required, notifying the Office of the Privacy Commissioner and affected individuals).

General guidance on privacy rights in New Zealand is available from the Office of the Privacy Commissioner.

3. Data We Collect

We collect only the data necessary for the purposes described in this policy. This includes:

• Contact form data: Name, email address, and message content submitted via the contact form.
• Technical data: IP address, browser type, operating system, referring URL, pages visited, and time spent — collected automatically via server logs and analytics tools.
• Cookie data: Information stored in cookies as described in our Cookie Policy.

We do not collect sensitive personal data (such as information about physical or mental condition) and do not require account registration. We do not knowingly collect personal information from anyone under 18; our site is intended for adults only (see our Terms of Use).

4. Legal Basis for Processing

New Zealand: We collect and use personal information where it is necessary for a lawful purpose connected with our functions or activities (for example, responding to your message), where you have authorised us (for example, by ticking the consent box on the contact form), or as otherwise permitted under the Privacy Act 2020.

EEA (GDPR): Where GDPR applies, we rely on the following legal bases:

• Consent (Article 6(1)(a) GDPR): For optional analytics and marketing cookies, and for processing contact form submissions where you have given explicit consent via the privacy consent checkbox.
• Legitimate interests (Article 6(1)(f) GDPR): For security monitoring, fraud prevention, and improving the performance of this website.
• Legal obligation (Article 6(1)(c) GDPR): Where we are required to process data to comply with applicable law.

5. Purpose of Processing

We use your data for the following purposes:

• Responding to enquiries submitted through the contact form
• Improving and maintaining the performance and content of this website
• Monitoring and addressing technical or security issues
• Analysing aggregate visitor behaviour to improve user experience (analytics cookies, only with consent)

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected:

• Contact form submissions: Retained for up to 24 months from the date of submission, then securely deleted.
• Server logs and technical data: Retained for up to 12 months.
• Cookie data: Retained according to the durations specified in our Cookie Policy.

7. Data Sharing and Third Parties

We do not sell, rent, or trade your personal data. We may share data with trusted third-party service providers solely to operate the website (for example, hosting providers and, where you consent, analytics or advertising platforms). Page assets such as fonts or icons may be delivered through a content delivery network; those providers may receive standard technical information (for example, IP address) as part of delivering the asset. Any service providers that process personal data on our behalf are required to do so only under our instructions and in compliance with applicable data protection law.

We may also disclose data where required by law, court order, or regulatory authority.

8. International Data Transfers

Where personal data is transferred outside the European Economic Area or New Zealand, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission or equivalent mechanisms.

9. Your Rights

New Zealand: You may request access to the personal information we hold about you, and ask us to correct it if you think it is wrong, in line with IPPs 6 and 7 of the Privacy Act 2020. If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner.

EEA (GDPR): Where GDPR applies, you have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your data where there is no longer a lawful basis for processing.
• Right to restrict processing: Request that we limit how we use your data in certain circumstances.
• Right to data portability: Receive your data in a structured, machine-readable format where applicable.
• Right to object: Object to processing based on legitimate interests.
• Right to withdraw consent: Withdraw consent at any time where processing is based on consent, without affecting prior processing.

To exercise access or correction rights, or any GDPR rights that apply to you, contact us at supportcenter@ryxanordscyx.world. We will respond as soon as reasonably practicable and, unless your request is complex, within 20 working days (or any shorter period required by applicable law).

You also have the right to lodge a complaint with a supervisory authority. In New Zealand, this is the Office of the Privacy Commissioner. In the EU, contact the relevant national data protection authority.

We do not use solely automated decision-making that produces legal effects or similarly significant effects concerning you.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include HTTPS encryption, access controls, and regular security reviews. However, no transmission over the internet can be guaranteed to be entirely secure.

11. Cookies

We use cookies and similar technologies on this website. For full details, including how to manage your preferences, please see our Cookie Policy.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When changes are made, the "Last updated" date at the top of this page will be revised. We encourage you to review this page periodically.

13. Contact