Privacy Policy

Geographic audience and topic

This website is operated from New Zealand. We primarily serve customers who request delivery to New Zealand addresses. Visitors from the European Economic Area, the United Kingdom, and other regions may still use the site; where GDPR or equivalent rules apply, we describe your rights below. The site presents Ivoraq as a food supplement. We do not use personal data to target individuals based on health conditions, and we do not sell personal data.

Purpose and scope

This policy explains how we process personal data when you browse this website, submit forms, purchase Ivoraq products, or contact us. We apply the UK and EU General Data Protection Regulation (GDPR) where it applies to our activities, the New Zealand Privacy Act 2020 where relevant, and other applicable laws.

Advertising and online measurement

If you allow analytics or marketing cookies, we may measure visits and campaign performance in aggregated or pseudonymous form. Measurement is used to understand traffic and to align our landing pages with the factual product information shown here. We do not use ad platforms to make therapeutic claims about Ivoraq or to imply that a supplement can replace medical care. You can withdraw consent for optional cookies at any time via the cookie banner.

Categories of data we collect

• Identity and contact data: name, email address, phone number if provided, delivery address when you order.
• Transaction data: order references, payment status from our payment partners (we do not store full card numbers on our servers).
• Technical data: IP address, browser type, device identifiers, and cookie data as described in the Cookie Policy.
• Communication content: messages you send through forms or email.

Legal bases under GDPR

We rely on contract performance for order fulfilment, legitimate interests for fraud prevention and website security, consent where we ask for optional marketing or non-essential cookies, and legal obligation where we must retain accounting records.

Purposes of processing

• Processing enquiries and delivering products you purchase.
• Customer support, returns, and dispute resolution.
• Improving site performance and measuring aggregated traffic when you consent to analytics.
• Complying with tax, consumer, and regulatory requirements.

Recipients and transfers

We use hosting providers, payment processors, carriers, and email delivery services that may process data in New Zealand, the European Economic Area, or other countries with appropriate safeguards such as standard contractual clauses where required.

Retention

Order and accounting records are kept for at least seven years where tax law requires. Marketing consents and cookie logs are kept until you withdraw consent or for a maximum of twenty-four months of inactivity unless a longer period is justified for security logs. Contact form copies are deleted within twenty-four months after the ticket is closed unless a dispute requires longer retention.

Security measures

We use HTTPS transport encryption, access controls for staff accounts, separation of production data from test environments, and vendor reviews for subprocessors. No system is completely risk-free; we notify supervisory authorities and data subjects when a breach poses a high risk to individuals, as required by law.

Your rights

Depending on your location, you may have the right to access, rectify, erase, restrict processing, object, and port your data, and to withdraw consent at any time without affecting prior lawful processing. You may lodge a complaint with a supervisory authority. To exercise rights, email any address listed in the site footer as plain text.

Automated decisions

We do not make solely automated decisions that produce legal or similarly significant effects concerning you.

Children

This shop is directed at adults. We do not knowingly collect data from children without parental authority.

Updates

We will post changes on this page and adjust the last updated date. Material changes to how we use personal data will be communicated where the law requires.