Privacy Policy
This notice explains how Chroxxenoz (“we”, “us”) collects and uses personal data when you visit our website or contact us about Velnor food supplements and related orders.
1. Data controller
The controller under the EU General Data Protection Regulation (GDPR) and the UK GDPR is:
Chroxxenoz
4E Otonga Road, Springfield, Rotorua 3015, New Zealand
Email identifiers published on this website: info@chroxxenoz.world, contact@chroxxenoz.world, support@chroxxenoz.world, help@chroxxenoz.world (represented as plain text in the website footer).
2. Scope and children
The site is aimed at adults. We do not knowingly collect data from anyone under 16 years of age. If you believe a minor has submitted data, contact us so we can delete it where appropriate.
3. Categories of personal data
Depending on how you interact with us, we may process: identity and contact details (name, email, optional phone), message content, technical data from your device (IP address, browser type, approximate location derived from IP), and cookie-related records described in the Cookie Policy.
4. Purposes and legal bases (GDPR Articles 6–7)
| Purpose | Legal basis |
|---|---|
| Responding to enquiries and processing orders you initiate | Performance of a contract or steps prior to a contract (Art. 6(1)(b)); occasionally legitimate interests in operating a retail channel (Art. 6(1)(f)) balanced against your rights |
| Website security, fraud prevention, server logs | Legitimate interests (Art. 6(1)(f)) and, where required, legal obligations (Art. 6(1)(c)) |
| Non-essential analytics or marketing technologies | Consent where required (Art. 6(1)(a)); see cookie tool on each page |
| Compliance with accounting, tax, or regulatory requests | Legal obligation (Art. 6(1)(c)) |
5. Retention
We keep data only as long as necessary for the purposes above, including statutory retention periods in New Zealand or other applicable jurisdictions.
| Data type | Typical retention |
|---|---|
| Customer enquiry and order records | Up to 7 years where needed for tax and commercial claims, unless a shorter period applies by law |
| Server and security logs | Usually between 30 and 180 days, unless extended for investigations |
| Marketing analytics where consent-based | Until you withdraw consent or after 24 months of inactivity, whichever comes first |
6. Recipients and processors
We may share limited data with hosting providers, payment processors, email delivery services, or professional advisers bound by written confidentiality and data-processing terms that reflect GDPR Article 28 where applicable.
7. International transfers
Our operations are based in New Zealand. If data is processed in the European Economic Area, United Kingdom, or other regions, we rely on adequacy decisions or standard contractual clauses as updated from time to time.
8. Security measures
We apply administrative, technical, and organisational measures such as access control, TLS on the public website, separation of production environments where feasible, and staff instructions on confidentiality. No online transmission is completely risk-free.
9. Your rights
Subject to applicable law, you may have the right to access, rectify, erase, restrict processing, object, data portability, and to withdraw consent for consent-based processing. You may lodge a complaint with your local supervisory authority. To exercise rights, email us using any identifier listed in the footer.
10. Automated decisions
We do not rely on solely automated decision-making that produces legal or similarly significant effects for you.
11. New Zealand operations, food supplements, and advertising context
Personal data is processed in connection with enquiries and orders handled from our Rotorua-area address in New Zealand, including shipments coordinated domestically or to overseas addresses you provide. The online catalogue discusses Velnor solely as a food supplement. We do not use this Privacy Policy page to claim therapeutic benefits. For paid traffic that may link to this domain (including programmes such as Google Ads where applicable), we aim to keep landing content factual, avoid disease-treatment messaging, avoid guaranteed outcomes, and avoid pressuring vulnerable health decisions. Optional marketing or analytics cookies, if you enable them through the cookie banner, are used for aggregate reporting and campaign measurement rather than to infer special-category health data from free-text forms you voluntarily send.
12. Updates
We may revise this policy to reflect legal or operational changes. The “Last updated” date at the top is maintained automatically in your browser when scripts run.