This Privacy Policy sets out how personal information is collected, used, stored, and protected by www.unguacare.com when you visit or make a purchase from our website. We are dedicated to maintaining the confidentiality of your personal data in accordance with applicable privacy legislation, including the General Data Protection Regulation (GDPR) for European residents and the New Zealand Privacy Act 2020.
- Data Controller
The data controller responsible for the collection and processing of your personal information on this website is:www.unguacare.com
Address: 102 Ellice Street, Mount Victoria, Wellington 6011, New Zealand
Contact Email: manicure@unguacare.com
Contact Telephone: +64 43856952
For any privacy-related queries, requests, or exercise of statutory data rights, please direct your communication to the contact email provided above.
- Personal Information Collected
When you interact with our website or place an order, we collect information necessary to fulfill your order and maintain commercial records. This information may include:
Contact & Identification Data: Name, billing address, delivery address, email address, and telephone number.
Transaction Data: Details regarding items ordered, order totals, and fulfillment status.
Technical & Usage Data: IP address, browser type, device identifiers, and session data collected via cookies necessary for proper website operation.
- Purpose and Legal Basis for Processing
We process your personal information based on the following legal grounds:
Fulfillment of Contract: To process orders, verify details, package and dispatch goods, and provide post-purchase customer support.
Compliance with Legal Obligations: To maintain financial records, retain transactional history, and fulfill statutory tax or reporting requirements under New Zealand and applicable international laws.
Legitimate Interests: To maintain website operational functionality, assess website administration, and manage commercial risk.
- Payment Processing and Third-Party Providers
To provide seamless payment options, payment transactions conducted on our website are executed through our third-party payment service provider, Stripe.
When completing a transaction:
Payment card data, billing information, and transaction authorization are processed directly by Stripe.
We do not collect, process, or store full credit or debit card details on our local servers.
Stripe acts as an independent or joint data controller with respect to payment data processing, adhering to high security standards and regulatory compliance (including PCI-DSS compliance). For more details regarding how your payment details are handled, please refer to the Stripe Privacy Policy.
- International Data Transfers
As our operations are located in New Zealand while catering to consumers in the European region, your personal data is transferred across borders. New Zealand has been officially recognized by the European Commission as providing an adequate level of data protection under European data privacy legislation. Transfers are conducted in accordance with statutory safeguards ensuring your privacy rights remain intact. - Data Retention Period
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or to meet statutory retention obligations under New Zealand and European laws:
Order & Transaction Records: Retained for up to 7 years from the transaction date to comply with financial, legal, statutory accounting, and tax record-keeping requirements.
Customer Support Inquiries: Retained for up to 24 months following the resolution of the inquiry to assist with future communications and statutory customer inquiries.
Technical Logs & Cookies: Retained only for the duration required to maintain operational session stability, typically up to 12 months.
Upon expiration of the relevant retention period, personal information is permanently erased or anonymised in a secure manner.
- Your Statutory Data Rights
Depending on your jurisdiction (such as the European Economic Area or New Zealand), you possess specific rights regarding your personal information:
Right of Access: The right to request copies of the personal data held about you.
Right to Rectification: The right to request correction of incomplete or inaccurate data.
Right to Erasure: The right to request deletion of your personal information, subject to legal obligations requiring statutory data retention.
Right to Restrict Processing: The right to request restriction of data processing under specific statutory circumstances.
Right to Data Portability: The right to receive your personal data in a structured, standard format.
Right to Object: The right to object to the processing of your personal data where processing is based on legitimate interest grounds.
To exercise any of these rights, please contact us at manicure@unguacare.com. We respond to all legitimate requests within standard statutory timeframes.
8. Updates to This Policy
We may update this Privacy Policy periodically to reflect changes in our legal responsibilities or operational procedures. The revised version will be published directly on www.unguacare.com with an updated effective date.