ORA AROMATHERAPY

|

Privacy Policy

Effective Date: August 4, 2026

At ORA AROMATHERAPY LIMITED, operating through our website www.homeaccessde.com, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, purchase our home and car fragrance products, or interact with our brand.

Please read this policy carefully. By accessing or using our website, you agree to the practices described in this document. If you do not agree with the terms of this Privacy Policy, please do not use our site.

1. Who We Are

ORA AROMATHERAPY LIMITED is the data controller responsible for your personal data.

  • Company Name: ORA AROMATHERAPY LIMITEDus
  • Website: www.homeaccessde.com
  • Contact Email: ernlea@homeaccessde.com
  • Mailing Address: 39 Lloyd George Road, Wainui, Gisborne 4010, New Zealand
  • Contact Phone: +64 22 139 7356

If you have any questions about this Privacy Policy or wish to exercise your legal rights regarding your data, please contact us using the details above.

2. Information We Collect

We collect several types of information from and about users of our website, which can be grouped into the following categories:

A. Information You Provide to Us

  • Identity Data: Includes first name, last name, username, or similar identifiers when you create an account, purchase products, or contact customer support.
  • Contact Data: Includes billing address, delivery address, email address, and telephone numbers.
  • Financial Data: Includes payment card details and bank account numbers processed through secure payment gateways. We do not store full credit card numbers on our servers.
  • Transaction Data: Includes details about payments to and from you, and other details of products you have purchased from us.
  • Profile Data: Includes your username, password, purchases or orders made by you, your interests, preferences, feedback, and product review responses.
  • Marketing and Communications Data: Includes your preferences in receiving marketing from us and your communication preferences.

B. Information Automatically Collected

  • Technical Data: Includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.
  • Usage Data: Includes information about how you use our website, products, and services, such as pages viewed, search terms entered, and interaction with links.

C. Cookies and Tracking Technologies

We use cookies, web beacons, tracking pixels, and other tracking technologies to collect and store your Technical and Usage Data. Cookies help us optimize your shopping experience, remember items in your shopping cart, and analyze our traffic. You can set your browser to refuse all or some cookies, but doing so may cause some parts of our website to function improperly.

3. How We Use Your Information

We use the information we collect for various business and commercial purposes, including:

  • To Process and Deliver Orders: To manage your purchases, process payments, arrange shipping, and handle any product returns or refunds.
  • To Manage Our Relationship: To notify you about changes to our terms or Privacy Policy, ask you to leave a product review, or address customer service inquiries.
  • To Personalize Your Experience: To understand consumer trends and present products or offers tailored to your interests.
  • To Improve Our Website: To administer, troubleshoot, test, maintain, and protect our website infrastructure and information technology systems.
  • To Send Marketing Communications: To provide you with newsletters, promotional offers, and information about new arrivals, provided you have opted in to receive them.
  • For Security and Fraud Prevention: To monitor for potential fraudulent transactions, unauthorized access, and malicious activities to safeguard our customer community.
  • To Comply with Legal Obligations: To meet tax, accounting, or regulatory requirements dictated by applicable law.

4. Legal Basis for Processing

We will only use your personal data when the law allows us to. Most commonly, we rely on the following legal bases:

  • Performance of a Contract: Where we need to process your data to fulfill a contract we have entered into with you (e.g., shipping a reed diffuser or car perfume you purchased).
  • Legitimate Interests: Where it is necessary for our legitimate business interests (or those of a third party) and your interests and fundamental rights do not override those interests.
  • Consent: Where you have given explicit consent to process your data, such as signing up for marketing emails. You can withdraw your consent at any time.
  • Legal Compliance: Where we need to comply with a legal or regulatory obligation.

5. Disclosing and Sharing Your Information

We do not sell, rent, or trade your personal data to third parties. However, we may share your data with trusted third parties who assist us in operating our e-commerce business:

  • Service Providers: Third-party vendors who provide IT and system administration support, cloud hosting, email delivery systems, data analysis, and market research tools.
  • Payment Processors: Secure third-party payment gateways to handle financial transactions safely.
  • Logistics and Shipping Companis: Postal operators and courier companies tasked with delivering physical products to your designated address.
  • Professional Advisers: Lawyers, bankers, auditors, and insurers providing consultancy, legal, banking, insurance, and accounting services.
  • Law Enforcement and Regulatory Bodies: Government entities or law enforcement if required to do so by law, court order, or to protect the rights, property, and safety of our company and customers.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow third-party service providers to use your personal data for their own purposes.

6. International Data Transfers

Because ORA AROMATHERAPY LIMITED is based in New Zealand, your data may be transferred, stored, and processed outside your country of residence. New Zealand has been recognized by the European Commission as providing an adequate level of data protection. If we transfer data to third-party service providers located in other countries that do not have equivalent protection laws, we ensure appropriate safeguards (such as Standard Contractual Clauses approved by the relevant authorities) are put in place to maintain security.

7. Data Security

We have put in place appropriate technical, organizational, and physical security measures to prevent your personal data from being accidentally lost, used, altered, disclosed, or accessed in an unauthorized way.

  • Our website utilizes Secure Socket Layer (SSL) encryption for transmitting sensitive data.
  • Access to your personal data is strictly limited to employees, agents, contractors, and service providers who have a legitimate business need to know. They operate solely under our explicit instructions and are bound by strict confidentiality clauses.
  • We have established procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

8. Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process your data, and the applicable legal obligations. For tax purposes, international laws often require us to keep basic information about our customers (including Contact, Identity, Financial, and Transaction Data) for several years after they cease being customers.

9. Your Legal Rights

Depending on your jurisdiction (such as the European Union under GDPR, or New Zealand under the Privacy Act), you possess specific legal rights concerning your personal data. These rights may include:

  • Request Access: You have the right to receive a copy of the personal data we hold about you and check that we are lawfully processing it.
  • Request Correction: You can request that any incomplete or inaccurate data we hold about you be corrected.
  • Request Erasure (“Right to be Forgotten”): You can ask us to delete or remove personal data where there is no good reason for us continuing to process it.
  • Object to Processing: You can object to the processing of your personal data where we are relying on a legitimate interest and you feel it impacts your fundamental rights and freedoms.
  • Request Restriction of Processing: You can ask us to suspend the processing of your personal data in certain scenarios, such as establishing its accuracy.
  • Request Data Portability: You can request the transfer of your personal data to you or to a third party in a structured, commonly used, machine-readable format.
  • Withdraw Consent: You can withdraw your consent at any time where we are relying on consent to process your personal data (e.g., opting out of marketing emails).

To exercise any of these rights, please email us directly at ernlea@homeaccessde.com. We aim to respond to all legitimate requests within 30 days. We may need to request specific information from you to help us confirm your identity and ensure your right to access the data.

10. Third-Party Links

Our website may include links to third-party websites, plug-ins, or applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy policy of every website you visit.

11. Children’s Privacy

Our website and products are not intended for use by children under the age of 16. We do not knowingly collect personal data from children. If we discover that a child under 16 has provided us with personal data, we will immediately delete that information from our servers. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at ernlea@homeaccessde.com.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business practices, operational standards, or legal obligations. Any changes we make will be posted on this page with a revised “Effective Date” at the top. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

13. Contact Information

If you have any feedback, questions, complaints, or if you wish to exercise your data privacy rights, please do not hesitate to contact our privacy management team:

  • Company Name: ORA AROMATHERAPY LIMITED
  • Email Address: ernlea@homeaccessde.com
  • Postal Address: 39 Lloyd George Road, Wainui, Gisborne 4010, New Zealand
  • Phone Number: +64 22 139 7356