Privacy policy
Last updated .
This statement explains how Kyxrelynmyfrax, trading from 72 Cuba Street, Te Aro, Wellington 6011, New Zealand, processes personal data when you browse or purchase from our storefront focused on Torlyn food supplements.
Data controller and contact
Controller: Kyxrelynmyfrax
Postal address: 72 Cuba Street, Te Aro, Wellington 6011, New Zealand
Electronic correspondence identifiers: info@kyxrelynmyfrax.world, contact@kyxrelynmyfrax.world, support@kyxrelynmyfrax.world, help@kyxrelynmyfrax.world (text references only on this site).
Supervisory authorities for residents in the European Union or the United Kingdom may be contacted in parallel with us. We cooperate promptly with regulators and with you when exercising the rights listed below.
Geographic focus, product category, and advertising alignment
Kyxrelynmyfrax is operated from New Zealand and sells Torlyn solely as a food supplement. The website is published in English and may be accessed globally, but checkout eligibility, shipping routes, and consumer law that apply to you depend on your territory.
Personal data we process is used to run an online storefront: order fulfilment, service messages, optional analytics, and optional marketing measurement. We do not use this site to offer medical diagnosis, treatment, or telehealth, and privacy notices are written to match that narrow retail purpose.
Where we or partners place digital advertising, creative and landing pages are reviewed so they do not state or imply that a food supplement can treat or prevent disease, guarantee results, or replace professional care. Copy is kept consistent with the non-medical disclaimer on the product page.
Categories of data we collect
- Identity and contact information you type into forms (name, email, optional phone, free-text messages).
- Technical connection data such as browser type, time stamps, truncated IP metadata, and device characteristics supplied by your user agent.
- Order fulfilment data including delivery coordinates you supply and payment references managed by our payment partners.
- Cookie identifiers where you grant permission through the banner categories for analytics or marketing.
Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Replying to product questions and processing purchase requests | Performance of a contract and steps prior to contract (GDPR Art. 6(1)(b)) |
| Storing consent logs for cookies and marketing choices | Consent (GDPR Art. 6(1)(a)) |
| Fraud screening, security monitoring, and dispute records | Legitimate interests balanced against your rights (GDPR Art. 6(1)(f)) |
| Accounting ledgers where the law mandates retention | Legal obligation (GDPR Art. 6(1)(c)) |
Recipients and transfers
We share data with payment processors, shipment carriers, cloud hosting providers, and email delivery systems that operate under written agreements requiring confidentiality and security. Some processors host data in the European Economic Area or countries benefiting from adequacy decisions; where transfers occur elsewhere we rely on standard contractual clauses or comparable safeguards.
Retention
- Marketing consent evidence: retained for three years after the last interaction unless law demands longer storage.
- Order and tax documentation: retained for seven years to meet accounting rules in applicable jurisdictions.
- Support tickets: retained for two years after closure unless linked to an active dispute.
- Server security logs: rotated every ninety days unless an investigation requires an extended snapshot.
Security measures
We apply layered access control, encrypted transport, segregated admin accounts, routine backups, and staff training. No online system is without risk; please use unique passwords and notify us immediately if you suspect misuse.
Your rights
You may request access, rectification, erasure, restriction, portability, and objection where applicable. You may withdraw consent for optional processing at any time without affecting lawful processing that occurred beforehand. You may lodge a complaint with your local supervisory authority. We answer verified requests within the timelines regulators define.
Automated decisions
We do not use solely automated decision-making that produces legal effects concerning you.
Children
Products are marketed to adults. We do not knowingly collect data from anyone under sixteen without guardian permission.
Updates
Material revisions will be posted here with a refreshed “Last updated” line. Continued use after changes constitutes acceptance where permitted by law.