Privacy Policy

Last updated: June 17, 2025

1. Introduction

Affalascon ("we," "our," or "us") is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website affalascon.com or use our services.

This Privacy Policy complies with the New Zealand Privacy Act 2020 and other applicable privacy laws. By using our website or services, you consent to the practices described in this Privacy Policy.

2. Information We Collect

2.1 Information You Provide to Us

We may collect information that you voluntarily provide to us, including:

• Contact information (name, email address, phone number, postal address)
• Information submitted through contact forms or newsletter subscriptions
• Communication preferences
• Any other information you choose to provide when contacting us

2.2 Information Automatically Collected

When you visit our website, we may automatically collect certain information, including:

• IP address and geographic location
• Browser type and version
• Device information (operating system, device type)
• Pages visited and time spent on our website
• Referring website or search terms used to find our site
• Cookies and similar tracking technologies

2.3 Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your browsing experience. For detailed information about our use of cookies, please refer to our Cookie Policy.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To provide and maintain our services
• To respond to your inquiries and provide customer support
• To send newsletters and marketing communications (with your consent)
• To improve our website and services
• To analyse website usage and performance
• To comply with legal obligations
• To protect against fraud and ensure website security

4. Legal Basis for Processing

Under New Zealand privacy law, we process your personal information based on the following legal grounds:

• Consent: Where you have given clear consent for us to process your personal information for specific purposes
• Legitimate interests: Where processing is necessary for our legitimate business interests
• Legal obligation: Where processing is necessary to comply with legal requirements
• Performance of contract: Where processing is necessary to fulfil services you have requested

5. How We Share Your Information

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following limited circumstances:

5.1 Service Providers

We may share information with trusted third-party service providers who assist us in operating our website and providing services, such as:

• Email marketing platforms
• Website hosting and maintenance
• Analytics services
• Customer support tools

5.2 Legal Requirements

We may disclose your information if required by law or in response to:

• Legal processes or court orders
• Requests from law enforcement agencies
• Protection of our rights, property, or safety
• Investigation of fraud or other illegal activities

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the business transaction.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal information against:

• Unauthorised access or disclosure
• Accidental loss or destruction
• Alteration or misuse
• Other forms of unlawful processing

Security measures include encryption, secure servers, access controls, and regular security assessments. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Specific retention periods include:

• Contact inquiries: 2 years from last contact
• Newsletter subscriptions: Until you unsubscribe or request deletion
• Website analytics data: 2 years
• Legal and compliance records: As required by applicable laws

8. Your Rights

Under New Zealand privacy law, you have the following rights regarding your personal information:

8.1 Right of Access

You can request access to the personal information we hold about you.

8.2 Right of Correction

You can request correction of inaccurate or incomplete personal information.

8.3 Right of Deletion

You can request deletion of your personal information in certain circumstances.

8.4 Right to Object

You can object to the processing of your personal information for direct marketing purposes.

8.5 Right to Withdraw Consent

Where processing is based on consent, you can withdraw your consent at any time.

8.6 Exercising Your Rights

To exercise any of these rights, please contact us using the details provided in Section 12. We will respond to your request within 20 working days as required by New Zealand law.

9. International Data Transfers

Your information may be transferred to and processed in countries other than New Zealand. When we transfer information internationally, we ensure appropriate safeguards are in place to protect your personal information in accordance with New Zealand privacy law.

10. Third-Party Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to read the privacy policies of any third-party websites you visit.

11. Children's Privacy

Our services are not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information promptly.

12. Contact Information

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:

13. Privacy Officer

Our Privacy Officer is responsible for ensuring compliance with privacy laws and handling privacy-related inquiries. You can contact our Privacy Officer at the above contact details.

14. Complaints

If you believe we have breached your privacy rights, you can make a complaint to us first. If you are not satisfied with our response, you may lodge a complaint with the New Zealand Privacy Commissioner:

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by:

• Posting the updated Privacy Policy on our website
• Updating the "Last updated" date at the top of this policy
• Sending an email notification for significant changes (if you have subscribed to our communications)

Your continued use of our website or services after any changes indicates your acceptance of the updated Privacy Policy.

16. Governing Law

This Privacy Policy is governed by New Zealand law, including the Privacy Act 2020. Any disputes arising from this Privacy Policy will be subject to the jurisdiction of New Zealand courts.