1. Who We Are
This Privacy Policy applies to Lovelybonesur ("we", "us", "our"), the operator of the website lovelybonesur.world.
Data Controller:
Lovelybonesur
40 Mercer Street, Wellington 6011, New Zealand
Phone: 0800 101 996
Email: managers@lovelybonesur.world
We are committed to protecting your personal information and respecting your privacy in accordance with the New Zealand Privacy Act 2020 and, for users located in the European Economic Area, the General Data Protection Regulation (GDPR) (EU) 2016/679.
2. Data We Collect
We collect the following categories of personal data:
2.1 Data You Provide Directly
- Contact form submissions: full name, email address, and message content
- Consent records: a record of your GDPR consent checkbox selection and timestamp
2.2 Data Collected Automatically
- Log data: IP address, browser type, operating system, referring URL, pages visited, and timestamps
- Cookie data: cookie consent preferences stored in localStorage; optional analytics and marketing cookies if accepted
We do not collect sensitive personal data (such as health, financial, or biometric data) and do not ask for it.
3. How We Use Your Data
We use your personal data for the following purposes:
- To respond to enquiries submitted via the contact form
- To maintain records of consent for compliance purposes
- To analyse website traffic and improve user experience (if analytics cookies are accepted)
- To comply with legal obligations
- To protect the security and integrity of our website
We do not use your data for automated decision-making or profiling.
4. Legal Basis for Processing
For users in the European Economic Area, our legal bases for processing personal data are:
- Consent (Art. 6(1)(a) GDPR): Processing of contact form data where you have provided explicit consent
- Legitimate interests (Art. 6(1)(f) GDPR): Processing server log data to maintain security and prevent abuse
- Legal obligation (Art. 6(1)(c) GDPR): Where processing is required to comply with applicable law
For users in New Zealand, processing is governed by the New Zealand Privacy Act 2020 and its Information Privacy Principles (IPPs).
5. Data Retention
- Contact form data: Retained for 24 months from the date of submission, then securely deleted
- Consent records: Retained for 36 months for compliance purposes
- Server log data: Retained for 90 days, then automatically purged
- Cookie preference data: Stored locally in your browser until you clear it or withdraw consent
Where retention is required by law (e.g. tax or accounting obligations), data will be kept for the legally required period.
6. Sharing Your Data
We do not sell, rent, or trade your personal data. We may share data with:
- Hosting and infrastructure providers: Our web host processes server log data on our behalf under a data processing agreement
- Analytics providers: Only if you have accepted analytics cookies; all data is aggregated and anonymised where possible
- Legal authorities: If required by law, court order, or to protect our legal rights
All third-party processors are contractually required to process your data only on our instructions and in accordance with applicable data protection law.
7. International Transfers
We are based in New Zealand, which has been recognised by the European Commission as providing an adequate level of data protection for certain types of transfers. Where data is transferred to countries without an adequacy decision, we implement appropriate safeguards including Standard Contractual Clauses (SCCs) as approved by the European Commission.
If you have questions about international data transfers, please contact us using the details in Section 13.
8. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
8.1 Rights Under GDPR (EEA Users)
- Right of access – to obtain a copy of your personal data
- Right to rectification – to correct inaccurate or incomplete data
- Right to erasure – to request deletion of your data ("right to be forgotten")
- Right to restriction – to limit how we process your data
- Right to data portability – to receive your data in a structured, machine-readable format
- Right to object – to processing based on legitimate interests
- Right to withdraw consent – at any time, without affecting the lawfulness of prior processing
8.2 Rights Under the NZ Privacy Act 2020
- The right to access personal information we hold about you (IPP 6)
- The right to request correction of inaccurate data (IPP 7)
- The right to complain to the Office of the Privacy Commissioner
To exercise any of your rights, contact us at managers@lovelybonesur.world. We will respond within 30 days.
EEA users also have the right to lodge a complaint with their local data protection authority. A list of supervisory authorities is available at edpb.europa.eu.
9. Security
We implement reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These include HTTPS encryption for all data in transit, restricted access controls, and regular security reviews.
No method of transmission over the internet is completely secure. If you believe your data has been compromised, please contact us immediately.
10. Cookies
We use cookies and similar technologies on this website. For full details of what cookies we use, their purpose, and how to manage them, please read our Cookie Policy.
11. Children's Privacy
Our website is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us and we will delete it promptly.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised effective date. We encourage you to review this policy periodically. Continued use of the website after changes constitutes acceptance of the updated policy.
13. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:
Lovelybonesur
40 Mercer Street, Wellington 6011, New Zealand
Phone: 0800 101 996
Email: managers@lovelybonesur.world