Privacy Policy

Last updated: 18 March 2025

This Privacy Policy describes how Frozenonphar (“we”, “us”, “our”) collects, uses, stores, and protects your personal data when you use our website https://frozenonphar.world and related services, including the AndroVascor product. We process personal data in accordance with the New Zealand Privacy Act 2020, the General Data Protection Regulation (GDPR) where applicable to users in the European Economic Area (EEA), and other applicable data protection laws.

1. Data controller

Business name: Frozenonphar

Address: 1A/155 Queen Street, Auckland CBD, Auckland 1010, New Zealand

Email: team@frozenonphar.world

Phone: +64 9 941 4911

For questions about this policy or your personal data, please contact us using the details above.

2. Personal data we collect

We may collect the following categories of personal data:

• Identity and contact data: name, email address, phone number (if provided), and delivery address when you place an order or contact us.
• Transaction data: order details, payment-related information (processed by secure third-party payment providers; we do not store full card numbers).
• Technical and usage data: IP address, browser type and version, device type, time zone, pages visited, and how you use our website. This may include cookies and similar technologies as described in our Cookie Policy.
• Communication data: content of messages you send us (e.g. via contact form or email) and records of our correspondence.
• Consent records: records of your consent to processing (e.g. marketing, cookies) where required by law.

3. Legal basis and purposes of processing

We process your personal data only where we have a lawful basis:

• Contract: to perform our contract with you (e.g. processing orders, delivering products, responding to enquiries).
• Legal obligation: to comply with legal and regulatory obligations (e.g. tax, consumer law, retention requirements).
• Legitimate interests: to operate and improve our website, prevent fraud, ensure security, and defend our rights, where such interests are not overridden by your rights.
• Consent: where we rely on consent (e.g. non-essential cookies, marketing communications), you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

Purposes include: order fulfilment and shipping; customer support; website operation and analytics; security and fraud prevention; compliance with law; and, where you have agreed, marketing and personalised content.

4. How long we keep your data

We retain personal data only for as long as necessary for the purposes set out in this policy or as required by law:

• Order and customer data: typically up to seven (7) years after the last transaction for accounting, tax, and legal compliance (e.g. consumer guarantees in New Zealand).
• Contact form and correspondence: for the duration of the enquiry and a reasonable period thereafter (e.g. two years) unless longer retention is required by law.
• Marketing and consent records: until you withdraw consent or object, plus a short period to record the withdrawal.
• Technical and access logs: typically up to twelve (12) months unless needed for security or legal purposes.
• Cookie-related data: as specified in our Cookie Policy.

After the retention period, we securely delete or anonymise your data so it no longer identifies you.

5. Your rights

Depending on your location, you may have the following rights:

• Access: request a copy of the personal data we hold about you.
• Rectification: request correction of inaccurate or incomplete data.
• Erasure: request deletion of your data in certain circumstances (e.g. where processing was based on consent and you withdraw it, or where data is no longer necessary).
• Restriction: request that we limit how we use your data in certain situations.
• Data portability: receive your data in a structured, machine-readable format where the processing is based on contract or consent and is carried out by automated means.
• Object: object to processing based on legitimate interests or to processing for direct marketing.
• Withdraw consent: where processing is based on consent, withdraw it at any time.
• Complaint: lodge a complaint with a supervisory authority. In New Zealand, this is the Office of the Privacy Commissioner (privacy.org.nz). In the EEA, you may complain to the data protection authority in your country of residence.

To exercise any of these rights, contact us at team@frozenonphar.world. We will respond within the timeframes required by applicable law (e.g. one month under GDPR). We may need to verify your identity before processing your request.

6. Sharing and international transfers

We may share your data with:

• Service providers who assist us (e.g. hosting, payment processing, shipping, email delivery, analytics). Such providers are bound by contract to use data only for the purposes we specify and in line with this policy.
• Professional advisers (e.g. lawyers, accountants) where necessary for our legitimate interests or legal obligations.
• Public authorities when required by law or to protect our rights.

Our business is based in New Zealand. If we transfer data to countries outside New Zealand or the EEA, we ensure appropriate safeguards are in place (e.g. adequacy decisions, standard contractual clauses, or other mechanisms approved by applicable law). You may request details of these safeguards by contacting us.

7. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include: use of HTTPS and encryption where appropriate; secure access controls; regular review of our practices; and training of personnel. Despite our efforts, no method of transmission or storage over the internet is completely secure; we encourage you to use strong passwords and to contact us immediately if you suspect any misuse of your data.

8. Children

Our website and services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us and we will take steps to delete it.

9. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, law, or the website. The “Last updated” date at the top will be revised when we make material changes. We encourage you to review this page periodically. Where required by law, we will seek your consent or notify you of significant changes before they take effect.

10. Contact

For any questions about this Privacy Policy or our use of your personal data:

Frozenonphar
1A/155 Queen Street, Auckland CBD, Auckland 1010, New Zealand
Email: team@frozenonphar.world
Phone: +64 9 941 4911