Policy
Privacy Policy for Assyrian Kebab (www.akh.co.nz)
Last Updated: 18 September 2024
1. Introduction
Welcome to www.akh.co.nz ("Assyrian Kebab", "we",
"our", or "us"). We are committed to
protecting your privacy and ensuring the security of your personal information
in compliance with the New Zealand Privacy Act 2020. This Privacy
Policy explains how we collect, use, share, and safeguard your personal data
when you interact with our website or use our services.
2. Identity and Contact Information
The entity responsible for the processing of your personal
data ("Controller") is:
Assyrian Kebab
Address: 119a Kapiti Road, Paraparaumu, Wellington, New Zealand
Public Phone: [+64 4 902 57 70]
Email: [info@akh.co.nz]
Data Protection Officer (DPO): If applicable,
contact information for our DPO can be found on our website.
3. Types of Data Collected and Purposes of Processing
We collect and process the following types of personal data
for various purposes:
3.1 Personal Information Provided by You
- Contact
Data: Name, address, phone number, email address.
- Order
Details: Delivery address, payment information (excluding payment
card details for security reasons).
- Account
Information: Username, passwords, and preferences.
3.2 Purposes of Processing
- To
Provide Services: To process orders, deliver products, and manage
user accounts.
- Marketing: With
your consent, we may use your contact details to send direct marketing
communications about similar products or services. You can opt out of
marketing communications at any time using the unsubscribe link provided.
- Compliance: To
comply with legal obligations and regulations.
- Security: To
protect our website, services, and users against fraudulent activities.
4. Legal Basis for Processing
We process your personal information based on the following
legal grounds under the New Zealand Privacy Act 2020:
- Consent: When
you provide explicit consent for specific processing activities, such as
direct marketing.
- Contractual
Necessity: To fulfill the contract when you place an order with
us.
- Legitimate
Interests: To enhance user experience, provide customer support,
and conduct marketing activities related to our products or services.
5. Sharing of Personal Data
We may share your data with the following categories of
recipients:
- Service
Providers: Delivery companies, payment processors, data storage
providers.
- Marketing
Partners: Third-party platforms used for sending notifications
(e.g., email, SMS).
- Legal
and Regulatory Authorities: When required to comply with legal
obligations.
Note: Any transfer of your data to recipients
outside New Zealand will be done with appropriate safeguards in place, as
required by the New Zealand Privacy Act 2020.
6. Data Storage and Retention
Your personal data will be stored for no longer than is
necessary to fulfill the purposes outlined in this Privacy Policy. Typically,
we retain data for one year unless a longer period is required by law (e.g.,
for tax, legal, or regulatory compliance). Data used for marketing purposes
will be kept until you opt out.
7. Cookies and Tracking Technologies
Our website uses cookies to improve user experience and
functionality. We use the following categories of cookies:
- Strictly
Necessary Cookies: Essential for website operation.
- Performance
Cookies: Collect anonymous data to help us understand website
usage and improve functionality.
- Functionality
Cookies: Remember your preferences to enhance your experience.
You can control cookies through your browser settings.
Disabling certain cookies may affect website functionality.
8. Your Rights Under the New Zealand Privacy Act
You have the following rights concerning your personal data:
- Access: Request
access to your personal data held by us.
- Correction: Correct
any inaccurate or incomplete information.
- Deletion: Request
deletion of personal data under specific circumstances.
- Withdrawal
of Consent: Withdraw your consent for processing activities
(e.g., marketing) at any time.
- Complaint: Lodge
a complaint with the Office of the Privacy Commissioner if
you believe your privacy rights have been violated.
To exercise these rights, please contact us using the
information provided in Section 2.
9. Data Transfers to Third Countries
In some cases, your personal data may be transferred to
service providers located in countries outside New Zealand (e.g., for email and
SMS notifications). When this occurs, we ensure that adequate safeguards are in
place to protect your data, such as:
- Adequacy
Decisions: Transferring data to countries with an adequate level
of data protection.
- Contractual
Obligations: Using contracts or standard data protection clauses
to protect your data.
10. Security Measures
We implement appropriate technical and organizational
measures to secure your personal data from unauthorized access, alteration,
disclosure, or destruction. These measures include encryption, secure servers,
and regular security audits.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to
reflect changes in our practices or legal requirements. We will notify
you of any changes by posting the updated Privacy Policy on our website.
You are encouraged to review this Privacy Policy periodically.
12. Contact Information
For questions or concerns about this Privacy Policy or your
personal data rights, please contact us:
- Email: info@akh.co.nz
- Mailing
Address:
Assyrian Kebab
119a Kapiti Road,
Paraparaumu, Wellington 0532
New Zealand