Policy

Privacy Policy for Assyrian Kebab (www.akh.co.nz)

Last Updated: 18 September 2024

1. Introduction

Welcome to www.akh.co.nz ("Assyrian Kebab", "we", "our", or "us"). We are committed to protecting your privacy and ensuring the security of your personal information in compliance with the New Zealand Privacy Act 2020. This Privacy Policy explains how we collect, use, share, and safeguard your personal data when you interact with our website or use our services.

2. Identity and Contact Information

The entity responsible for the processing of your personal data ("Controller") is:

Assyrian Kebab
Address: 119a Kapiti Road, Paraparaumu, Wellington, New Zealand
Public Phone: [+64 4 902 57 70]
Email: [info@akh.co.nz]

Data Protection Officer (DPO): If applicable, contact information for our DPO can be found on our website.

3. Types of Data Collected and Purposes of Processing

We collect and process the following types of personal data for various purposes:

3.1 Personal Information Provided by You

  • Contact Data: Name, address, phone number, email address.
  • Order Details: Delivery address, payment information (excluding payment card details for security reasons).
  • Account Information: Username, passwords, and preferences.

3.2 Purposes of Processing

  • To Provide Services: To process orders, deliver products, and manage user accounts.
  • Marketing: With your consent, we may use your contact details to send direct marketing communications about similar products or services. You can opt out of marketing communications at any time using the unsubscribe link provided.
  • Compliance: To comply with legal obligations and regulations.
  • Security: To protect our website, services, and users against fraudulent activities.

4. Legal Basis for Processing

We process your personal information based on the following legal grounds under the New Zealand Privacy Act 2020:

  • Consent: When you provide explicit consent for specific processing activities, such as direct marketing.
  • Contractual Necessity: To fulfill the contract when you place an order with us.
  • Legitimate Interests: To enhance user experience, provide customer support, and conduct marketing activities related to our products or services.

5. Sharing of Personal Data

We may share your data with the following categories of recipients:

  • Service Providers: Delivery companies, payment processors, data storage providers.
  • Marketing Partners: Third-party platforms used for sending notifications (e.g., email, SMS).
  • Legal and Regulatory Authorities: When required to comply with legal obligations.

Note: Any transfer of your data to recipients outside New Zealand will be done with appropriate safeguards in place, as required by the New Zealand Privacy Act 2020.

6. Data Storage and Retention

Your personal data will be stored for no longer than is necessary to fulfill the purposes outlined in this Privacy Policy. Typically, we retain data for one year unless a longer period is required by law (e.g., for tax, legal, or regulatory compliance). Data used for marketing purposes will be kept until you opt out.

7. Cookies and Tracking Technologies

Our website uses cookies to improve user experience and functionality. We use the following categories of cookies:

  • Strictly Necessary Cookies: Essential for website operation.
  • Performance Cookies: Collect anonymous data to help us understand website usage and improve functionality.
  • Functionality Cookies: Remember your preferences to enhance your experience.

You can control cookies through your browser settings. Disabling certain cookies may affect website functionality.

8. Your Rights Under the New Zealand Privacy Act

You have the following rights concerning your personal data:

  • Access: Request access to your personal data held by us.
  • Correction: Correct any inaccurate or incomplete information.
  • Deletion: Request deletion of personal data under specific circumstances.
  • Withdrawal of Consent: Withdraw your consent for processing activities (e.g., marketing) at any time.
  • Complaint: Lodge a complaint with the Office of the Privacy Commissioner if you believe your privacy rights have been violated.

To exercise these rights, please contact us using the information provided in Section 2.

9. Data Transfers to Third Countries

In some cases, your personal data may be transferred to service providers located in countries outside New Zealand (e.g., for email and SMS notifications). When this occurs, we ensure that adequate safeguards are in place to protect your data, such as:

  • Adequacy Decisions: Transferring data to countries with an adequate level of data protection.
  • Contractual Obligations: Using contracts or standard data protection clauses to protect your data.

10. Security Measures

We implement appropriate technical and organizational measures to secure your personal data from unauthorized access, alteration, disclosure, or destruction. These measures include encryption, secure servers, and regular security audits.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any changes by posting the updated Privacy Policy on our website. You are encouraged to review this Privacy Policy periodically.

12. Contact Information

For questions or concerns about this Privacy Policy or your personal data rights, please contact us:

  • Email: info@akh.co.nz
  • Mailing Address:
    Assyrian Kebab
    119a Kapiti Road,
    Paraparaumu, Wellington 0532
    New Zealand