Privacy Policy

Last updated:

1. Data Controller

2. What Personal Data We Collect

We collect personal information you choose to provide when you contact us, including:

• Full name
• Email address
• Message content

If you contact us by email or phone, we will receive the information included in your message. Our website contact form opens your email application with a prefilled message; it does not transmit your message to us directly from the website.

We may also collect technical data automatically through standard web server logs (for example, IP address, browser type, pages visited, and timestamps) depending on how our website is hosted.

3. Purpose and Legal Basis for Processing

We process your personal data for the following purposes:

• Responding to your enquiry — so we can communicate with you and answer your questions.
• Operating and improving our website — including basic security, troubleshooting, and performance.

Where the GDPR applies, our lawful basis may include consent and/or legitimate interests, depending on the context. In New Zealand, we handle personal information in line with the Privacy Act 2020 and the Information Privacy Principles.

4. Data Retention

If you contact us by email, we may retain correspondence for as long as reasonably necessary to respond to your enquiry, maintain business records, and meet legal or compliance obligations. Technical logs (where collected by our hosting) may be retained for limited periods for security and operational purposes.

5. Data Sharing and Third Parties

We do not sell your personal information. We may share personal information with service providers who help us operate our website and communications (for example, hosting and email providers), where this is necessary and subject to appropriate safeguards.

If personal information is stored or processed outside New Zealand, we will take steps to ensure it is protected in a way that is comparable to New Zealand privacy protections (for example, through contractual protections and provider controls).

6. Cookies

We use cookies as described in our Cookie Policy. Consent for non-essential cookies is collected separately via our cookie preference centre.

7. Your Rights

Under the New Zealand Privacy Act 2020 (and, where applicable, the GDPR), you may have rights to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your personal information in some circumstances
• Withdraw consent where we rely on consent (where applicable)

To exercise your rights, contact us at writetous@herbaliapureax.world. We may need to verify your identity before responding.

If you are not satisfied with our response, you can make a complaint to the Office of the Privacy Commissioner (New Zealand).

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Our website is served exclusively over HTTPS.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page indicates when it was last revised. We recommend reviewing it periodically.

10. Contact

For any questions about this Privacy Policy or our data practices, please contact us at: