Privacy Policy
Last updated: 13 July 2026
1. Who we are
Halcyon Journal Ltd ("we", "us", "our") operates the website at https://flexremove.world/. We are registered in New Zealand (NZBN 9429000000000), with our principal place of business at 22 Shortland Street, Auckland 1010, New Zealand. You can contact us at info@flexremove.world.
2. What personal data we collect
We may collect the following categories of personal information:
- Contact and order data: name, telephone number, delivery address - collected when you place an order for Hardero.
- Communication data: name, email address, message content - collected when you submit our contact form.
- Usage data: IP address, browser type, pages visited, time on site, referral source - collected automatically via cookies and analytics tools.
- Cookie and consent data: your cookie consent choices, stored locally in your browser.
3. How and why we use your data (legal bases)
We process your personal data on the following legal bases under the New Zealand Privacy Act 2020 and, where applicable, the EU General Data Protection Regulation (GDPR):
- Contract performance (GDPR Art. 6(1)(b)): to process and fulfil your order for Hardero, including confirming your order by phone and arranging delivery.
- Legitimate interests (GDPR Art. 6(1)(f)): to operate and improve our website, detect fraud (honeypot field), and respond to enquiries.
- Consent (GDPR Art. 6(1)(a)): to use analytics cookies and advertising cookies where you have accepted them via our cookie consent banner. You may withdraw consent at any time.
- Legal obligation (GDPR Art. 6(1)(c)): to comply with applicable tax, consumer protection and privacy laws.
4. Cookies and tracking technologies
We use cookies and similar technologies. For full details, see our Cookie Policy. In summary:
- Essential cookies: necessary for site operation (cookie consent storage, form security). Always active.
- Analytics cookies: Google Analytics (_ga, _gid, _ga_*) - activated only with your consent. Used to understand site usage in aggregate.
- Advertising cookies: Google Ads (_gcl_au) - activated only with your consent. Used for ad performance measurement and remarketing.
We implement Google Consent Mode v2. By default, all advertising and analytics storage is set to "denied" until you give consent. On acceptance, we update consent to "granted" for the categories you chose.
5. Google Ads, Remarketing and Analytics
If you consent, we may use Google Ads Remarketing to show advertisements to previous visitors to our website. Google Analytics helps us understand how visitors interact with our site. Google's privacy policy is available at policies.google.com/privacy. You can opt out of Google Analytics at tools.google.com/dlpage/gaoptout.
6. Data sharing and transfers
We do not sell your personal data. We may share data with:
- Delivery and logistics partners (to fulfil your order).
- Google LLC (analytics and advertising, where consented) - data may be transferred to the United States under Google's Standard Contractual Clauses.
- Legal authorities where required by applicable law.
International transfers are protected by Standard Contractual Clauses or equivalent safeguards in accordance with GDPR Chapter V and the New Zealand Privacy Act.
7. Retention periods
- Order data: retained for 7 years to comply with New Zealand tax and commercial law.
- Contact form data: retained for up to 2 years unless you request earlier deletion.
- Analytics data: retained per Google Analytics settings (default 26 months).
- Cookie consent records: retained for 12 months.
8. Your rights
Under the New Zealand Privacy Act 2020 and, where applicable, the GDPR, you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Request erasure of your data (where no legal obligation requires retention).
- Restrict or object to processing.
- Data portability (GDPR, where applicable).
- Withdraw consent at any time without affecting the lawfulness of prior processing.
- Lodge a complaint with the Office of the Privacy Commissioner (OPC), New Zealand's data protection supervisory authority, at www.privacy.org.nz.
To exercise any right, contact us at info@flexremove.world. We will respond within 20 working days.
9. Security
Our website is served over HTTPS. We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or disclosure. No method of transmission over the Internet is 100% secure.
10. Children
Our website and products are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under 18.
11. Changes to this policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top will reflect any changes. Material changes will be communicated via a notice on our website.
12. Contact
Halcyon Journal Ltd, 22 Shortland Street, Auckland 1010, New Zealand. Email: info@flexremove.world. Supervisory authority: OPC - Office of the Privacy Commissioner, New Zealand (www.privacy.org.nz).