Privacy Policy

Last updated:

1. Introduction

Welcome to Ghipharedhit ("we," "our," or "us"). We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, retain, and safeguard your information when you visit our website at https://ghipharedhit.world (the "Website") or place an order for our products, including DaySpring Energy.

This policy is designed to comply with the General Data Protection Regulation (GDPR — EU Regulation 2016/679), the New Zealand Privacy Act 2020, and other applicable data protection legislation.

2. Data Controller

The data controller responsible for your personal data is:

  • Business Name: Ghipharedhit
  • Address: 350 Queen Street, Auckland 1010, New Zealand
  • Email: request@ghipharedhit.world
  • Website: https://ghipharedhit.world

3. Information We Collect

3.1 Information You Provide Directly

When you interact with our Website, you may voluntarily provide us with the following personal data:

  • Contact Information: Full name, email address, and phone number (optional) when placing an order through our order form.
  • Order Details: Messages and preferences submitted through the order form.
  • Consent Records: Your consent to our Privacy Policy and Terms of Use, including the date and time of consent.

3.2 Information Collected Automatically

When you visit our Website, we may automatically collect certain technical data, including:

  • Device Information: Browser type and version, operating system, device type.
  • Usage Data: Pages visited, time spent on pages, referring URL, and navigation paths.
  • IP Address: Your Internet Protocol address (which may be anonymised for analytics purposes).
  • Cookie Data: Data collected through cookies and similar technologies, as described in our Cookie Policy.

3.3 Information We Do Not Collect

We do not knowingly collect special categories of personal data (e.g., health data, biometric data, religious beliefs, political opinions, or data relating to criminal offences). We do not collect information from children under the age of 16.

4. How We Use Your Information

We process your personal data for the following lawful purposes:

  • Order Fulfilment (Contract Performance): To process and manage your orders, communicate with you about your order status, and deliver products.
  • Legal Compliance (Legal Obligation): To comply with applicable laws, regulations, and legal processes, including tax obligations and consumer protection laws.
  • Website Operation (Legitimate Interest): To maintain, improve, and secure the operation of our Website, including monitoring traffic, fixing bugs, and preventing fraudulent activity.
  • Communication (Consent): To respond to your enquiries and provide customer support, only where you have contacted us directly.
  • Analytics (Consent): To understand how visitors use our Website to improve the user experience, only if you have accepted analytics cookies.

5. Legal Basis for Processing

Under the GDPR, we rely on the following legal bases for processing your personal data:

  • Consent (Article 6(1)(a)): Where you have given explicit consent, such as accepting cookies or submitting the order form with the GDPR consent checkbox selected.
  • Performance of a Contract (Article 6(1)(b)): Where processing is necessary to fulfil an order or carry out pre-contractual steps at your request.
  • Legal Obligation (Article 6(1)(c)): Where processing is necessary to comply with a legal obligation to which we are subject.
  • Legitimate Interests (Article 6(1)(f)): Where processing is necessary for our legitimate interests (e.g., website security, fraud prevention) and does not override your data protection rights.

6. Data Sharing and Disclosure

We do not sell, rent, or trade your personal data. We may share your data with the following categories of recipients only when necessary:

  • Service Providers: Trusted third-party providers who assist with order processing, hosting, payment processing, shipping, and analytics. These providers are contractually obligated to protect your data and process it only on our instructions.
  • Legal Authorities: If required by law, regulation, legal process, or governmental request, we may disclose your data to relevant authorities.
  • Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal data may be transferred as part of the transaction, with appropriate safeguards in place.

7. International Data Transfers

Your personal data may be transferred to and processed in countries outside of New Zealand or the European Economic Area (EEA). Where such transfers occur, we ensure that appropriate safeguards are in place, including:

  • Standard Contractual Clauses (SCCs) approved by the European Commission.
  • Adequacy decisions by the European Commission or the New Zealand Privacy Commissioner.
  • Other legally recognised transfer mechanisms.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, and in compliance with our legal obligations:

  • Order Data: Retained for up to 7 years following the date of purchase for tax, accounting, and legal compliance purposes.
  • Contact Form Data: Retained for 2 years after your last interaction, unless a longer retention period is required by law.
  • Analytics Data: Aggregated and anonymised analytics data may be retained indefinitely. Identifiable data from analytics cookies is retained for up to 26 months.
  • Consent Records: Retained for the duration of your relationship with us and for a period of 3 years after the last interaction for compliance purposes.

When data is no longer needed, it is securely deleted or anonymised.

9. Your Rights

Under the GDPR and the New Zealand Privacy Act 2020, you have the following rights regarding your personal data:

  • Right of Access (Article 15): You have the right to request a copy of the personal data we hold about you.
  • Right to Rectification (Article 16): You have the right to request correction of inaccurate or incomplete personal data.
  • Right to Erasure (Article 17): You have the right to request deletion of your personal data, subject to legal retention requirements.
  • Right to Restriction of Processing (Article 18): You have the right to request that we restrict the processing of your personal data in certain circumstances.
  • Right to Data Portability (Article 20): You have the right to receive your personal data in a structured, commonly used, machine-readable format.
  • Right to Object (Article 21): You have the right to object to the processing of your personal data based on legitimate interests or for direct marketing purposes.
  • Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw consent at any time without affecting the lawfulness of prior processing.
  • Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority. For New Zealand residents, this is the Office of the Privacy Commissioner (https://privacy.org.nz). For EU/EEA residents, this is your local Data Protection Authority.

To exercise any of these rights, please contact us at request@ghipharedhit.world. We will respond to your request within 30 days.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

  • Encryption of data in transit using HTTPS/TLS protocols.
  • Access controls limiting data access to authorised personnel only.
  • Regular security reviews and assessments of our systems and processes.
  • Secure storage of data with trusted hosting providers that maintain industry-standard security certifications.

While we strive to use commercially acceptable means to protect your personal data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to continuously improving our security practices.

11. Cookies and Tracking Technologies

We use cookies and similar tracking technologies on our Website. For detailed information about the cookies we use, their purposes, and how to manage your preferences, please refer to our Cookie Policy.

12. Third-Party Links

Our Website may contain links to third-party websites or services that are not operated by us. We are not responsible for the privacy practices of these third parties and encourage you to review their privacy policies before providing any personal data.

13. Children's Privacy

Our Website and products are not directed to individuals under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have inadvertently received personal data from a child under 16, we will delete such data promptly.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. When we make significant changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

  • Email: request@ghipharedhit.world
  • Address: 350 Queen Street, Auckland 1010, New Zealand
  • Website: https://ghipharedhit.world