Privacy Policy
Last updated: 1 June 2026. This policy explains how we handle personal data in line with the General Data Protection Regulation (GDPR) and New Zealand privacy law.
1. Who we are
This website is operated by the data controller listed below. We are responsible for the personal data we process through this site.
VivghbeauteiLevel 5, 57 Willis Street, Wellington 6011, New Zealand
Phone: +64 4 473 8600
Email: online@vivghbeautei.world
2. What data we collect
- Contact data: the name, email address, and message you submit through our contact form.
- Consent data: a record of the cookie and privacy choices you make.
- Technical data: limited information such as browser type and pages visited, only where analytics cookies are enabled.
3. Why we process your data and legal bases
- To respond to enquiries sent through the contact form, based on your consent and our legitimate interest in replying to you.
- To remember your preferences, based on your consent for non-essential cookies and our legitimate interest in core site functionality.
- To improve our content through aggregated analytics, based on your consent.
4. Retention periods
- Contact form messages are kept for up to 24 months and then deleted.
- Consent records are kept for up to 12 months to demonstrate compliance.
- Analytics data is held in aggregated form for up to 14 months.
5. Your rights
Under the GDPR and applicable local law, you have the right to access, rectify, erase, restrict, or object to the processing of your personal data, the right to data portability, and the right to withdraw consent at any time. You also have the right to lodge a complaint with a supervisory authority.
- In the EU, contact your national data protection authority.
- In New Zealand, contact the Office of the Privacy Commissioner.
To exercise any right, email us using the contact details above and we will respond within one month.
6. Sharing your data
We do not sell your personal data. We may share it only with trusted service providers who help us operate the site, and only under written agreements that protect your data. We do not transfer data outside lawful frameworks without appropriate safeguards.
7. Security measures
We apply appropriate technical and organisational measures, including encrypted HTTPS connections, restricted access to data, and regular review of our processes, to protect personal data against loss, misuse, or unauthorised access.
8. Cookies
We use cookies as described in our Cookie Policy. You can adjust your choices at any time through the cookie settings panel.
9. Changes to this policy
We may update this policy from time to time. The latest version will always be available on this page with a revised update date.