Privacy policy

This policy is prepared with reference to the EU General Data Protection Regulation (GDPR), the UK GDPR where applicable, and broadly equivalent expectations under New Zealand privacy law. It does not limit any mandatory rights you have under local law.

Who is responsible

The data controller for personal data described here is Zarvaxenzythel, trading from 133 Darlington Road, Miramar, Wellington 6022, New Zealand. For privacy-specific correspondence use assist@zarvaxenzythel.world or telephone +64 4 891 0354 during advertised office hours.

If we appoint a representative in the European Economic Area for GDPR Article 27 purposes, we will publish their details on this page. Until then, contact details above serve cross-border enquiries.

Scope and audience

This policy applies to visitors to the website, people who submit the contact form, individuals who email us, and attendees at public sessions where we collect names or dietary access notes. It does not govern third-party platforms that we may link to; their policies apply when you leave our site.

Data we process

Depending on how you interact with us, categories may include:

• Identity and contact: name, email address, phone number if you provide it, organisation name if relevant.
• Message content: text you type into forms or email bodies, including attachments metadata (file names, size).
• Booking and attendance: session preferences, accessibility requirements you volunteer, and attendance records for capacity planning.
• Technical: IP address, approximate location derived by the hosting provider, browser type, operating system, referral URL, timestamps, and HTTP status codes from server logs.
• Cookies and storage: identifiers from optional analytics or marketing tools if consented; strictly necessary storage for cookie preferences and basic site operation.

We avoid collecting special categories of data unless you voluntarily include them in a message. If you do, we will process that content only to handle your enquiry and will not use it for unrelated profiling.

Purposes and legal bases

Under the GDPR framework, we rely on the following bases where relevant:

Cookies and similar technologies

We distinguish strictly necessary storage (for example remembering your cookie choices) from optional analytics and marketing categories. Full category descriptions sit in the cookies policy. Your browser may also store data independently of our servers.

Online advertising

If we run online advertising (including through search or display networks in New Zealand or other regions), we may receive aggregated or pseudonymised performance reports from those platforms. Tags on this site are intended to respect your cookie preferences. We do not use advertising to promote medical treatments or regulated health services, and we aim to keep landing pages consistent with the educational scope described in our terms of use.

How long we keep data

General retention guidelines:

• Contact threads: up to twenty-four months after the last message unless a dispute, warranty, or statutory retention rule requires longer.
• Server logs: raw logs typically roll within ninety days; aggregated security summaries may be kept longer in anonymised or pseudonymised form.
• Financial records: invoices and payment evidence for at least seven New Zealand tax years where applicable.
• Cookie preferences: stored in your browser until you clear site data or update choices.

When retention ends, we delete or irreversibly anonymise data where technically feasible.

Sharing and international transfers

We use email, hosting, and occasional productivity tools provided by vendors that may process data in New Zealand, Australia, the European Economic Area, the United Kingdom, or the United States. Where the GDPR applies, we implement appropriate safeguards such as standard contractual clauses or equivalent mechanisms.

We do not sell personal data and we do not authorise our processors to use your information for their own marketing unrelated to providing services to us.

Security measures

Measures include role-based access to mailboxes, transport encryption where supported by providers, unique credentials for studio accounts, vendor due diligence for subprocessors, and staff instructions to verify unexpected payment changes by a second channel. No system is perfectly secure; you should use strong passwords on your side and avoid transmitting unnecessary sensitive documents by email.

Your rights

Depending on your location, you may have rights to access, rectify, erase, restrict, object to certain processing, receive a portable copy of data you provided, and withdraw consent where processing is consent-based. You may also complain to a supervisory authority.

To exercise a right, email us with enough information to verify your identity and describe the request. We will respond within statutory timeframes. If we refuse a request, we will explain why and tell you how to escalate.

Children

The website is intended for adults and teenagers with guardian involvement. We do not knowingly collect data from young children for marketing. If you believe we have received information about a child without authority, contact us and we will delete it where the law permits.

Changes to this policy

We update this text when our practices or legal requirements change. The hero section shows the calendar date when you load the page; substantive edits may also be listed briefly at the top of the body until the next full revision cycle.

Contact

Zarvaxenzythel, 133 Darlington Road, Miramar, Wellington 6022, New Zealand. Email: assist@zarvaxenzythel.world. Phone: +64 4 891 0354.