This Privacy Policy describes in detail how Exceptionalmycom.world ("we", "us", "our") collects, uses, stores, discloses, and protects your personal data when you access our website, place orders, or interact with our services. We are committed to transparency and compliance with the General Data Protection Regulation (GDPR), the New Zealand Privacy Act 2020, and other applicable data protection laws worldwide.
1. Data Controller
Exceptionalmycom.world operates as the data controller for all personal data processed through our website and services. Our full contact details are:
Exceptionalmycom.world
1A/155 Queen Street, Auckland CBD, Auckland 1010, New Zealand
Email: office@exceptionalmycom.world
2. Data We Collect
We may collect the following categories of personal data:
- Identity data: Full name, title
- Contact data: Email address, postal address, telephone number
- Transaction data: Order details, payment information, delivery preferences
- Technical data: IP address, browser type and version, time zone, device information, operating system
- Usage data: Information about how you use our website, pages visited, time spent, click paths
- Communications data: Message content when you contact us, preferences for marketing communications
- Cookie data: As described in our Cookie Policy
We collect this data through direct interactions (forms, emails, phone), automated technologies (cookies, analytics), and third parties (payment processors, delivery services).
3. Purposes of Processing
We process your personal data for the following purposes:
- To process and fulfill your orders
- To respond to your inquiries and provide customer support
- To send order confirmations, shipping updates, and service communications
- To improve our website, products, and services
- To personalize your experience and deliver relevant content
- To send marketing communications where you have given consent
- To detect and prevent fraud, abuse, and security incidents
- To comply with legal obligations and enforce our terms
- To analyze website usage and trends for business improvement
4. Legal Basis
Under GDPR, we process your data based on:
- Consent: Where you have given clear consent (e.g., marketing emails, non-essential cookies)
- Contract: To perform our contract with you (order processing, delivery)
- Legitimate interests: To operate our business, improve services, prevent fraud (where not overridden by your rights)
- Legal obligation: To comply with laws (tax, consumer rights, regulatory requirements)
5. Data Retention
We retain personal data only for as long as necessary for the purposes stated in this policy:
- Order and transaction data: Up to 7 years for legal, tax, and accounting compliance
- Contact form and inquiry data: 2 years from last contact
- Marketing consent data: Until you withdraw consent or 3 years from last interaction
- Analytics and usage data: 26 months in aggregated form
- Cookie data: As specified in our Cookie Policy
After the retention period, we securely delete or anonymize your data.
6. Your Rights
You have the following rights regarding your personal data:
- Right of access: Request a copy of your personal data
- Right to rectification: Request correction of inaccurate data
- Right to erasure: Request deletion of your data ("right to be forgotten")
- Right to restrict processing: Request limitation of how we use your data
- Right to data portability: Receive your data in a structured, machine-readable format
- Right to object: Object to processing based on legitimate interests or for direct marketing
- Right to withdraw consent: Withdraw consent at any time where processing is based on consent
To exercise these rights, contact us at office@exceptionalmycom.world. We will respond within 30 days. You also have the right to lodge a complaint with a supervisory authority (e.g., the Office of the Privacy Commissioner in New Zealand or your local data protection authority).
7. Data Security
We implement appropriate technical and organizational measures to protect your personal data:
- Encryption in transit (HTTPS/TLS) and at rest where applicable
- Access controls and authentication
- Regular security assessments
- Staff training on data protection
- Secure storage and backup procedures
While we strive to protect your data, no method of transmission over the internet is 100% secure.
8. Data Sharing
We do not sell your personal data. We may share data with:
- Service providers: Payment processors, hosting providers, email services, analytics providers—all bound by data processing agreements
- Legal authorities: When required by law, court order, or to protect our rights
- Business transfers: In the event of a merger, acquisition, or sale of assets
9. International Transfers
If we transfer data outside the European Economic Area or New Zealand, we ensure appropriate safeguards such as Standard Contractual Clauses, adequacy decisions, or binding corporate rules.
10. Children's Privacy
Our website is not intended for individuals under 18. We do not knowingly collect data from children. If you believe we have collected data from a child, please contact us immediately.
11. Policy Changes
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.
12. Contact Us
For privacy inquiries, to exercise your rights, or for any questions about this policy:
Email: office@exceptionalmycom.world
Address: 1A/155 Queen Street, Auckland CBD, Auckland 1010, New Zealand