Privacy Policy

Last updated: March 5, 2026

This Privacy Policy describes how ECOVERSE INNOVATIONS LIMITED (trading as Gozyy) (“we”, “our”, “us”) collects, uses, discloses and safeguards your personal data when you visit or place orders on gozyy.com (the “Site”). This policy applies globally to all visitors and customers, and complies with applicable privacy laws including New Zealand Privacy Act 2020, EU‑GDPR, UK‑GDPR, Swiss LPD, CCPA‑CPRA, VCDPA, CPA, PIPEDA (Canada), LGPD (Brazil) and Australian Privacy Act. It also sets out your legal rights over your personal information.

1. Data Controller & Contact Information

Data Controller: ECOVERSE INNOVATIONS LIMITED
Trading as: Gozyy
Email: info@gozyy.com
Phone: +64 212698074
Address: Flat 302, 421 Queen Street, Auckland Central, Auckland 1010, New Zealand

If you wish to exercise your privacy‑related rights or submit a privacy complaint, please contact us using the details above.

2. What personal data we collect

We collect personal information you provide voluntarily, automatically via website interactions, during checkout or customer‑support communications:

  • Contact information: full name, email address, phone number, billing and shipping physical address
  • Order‑related data: order history, purchased items, payment reference numbers. We do not store full credit‑card numbers; payment processing is handled by our payment provider Stripe.
  • Automatically‑collected technical data: IP‑address, browser type, device information, pages visited, timestamps, referral source, cookie and tracking‑pixel data
  • Voluntary submissions: contact‑form messages, support‑ticket content, survey responses, marketing‑subscription preferences

3. Lawful basis & how we use your personal data

We process your personal data for the following lawful purposes:

  • To process, fulfil, ship and manage your orders and provide after‑sales customer‑support (performance of contract)
  • To verify identity, detect and prevent fraud and secure our website and payment transactions (legitimate interest)
  • To operate, maintain and improve website‑functionality and user‑experience (legitimate interest)
  • To send mandatory service‑related communications (order confirmations, shipping updates, support replies)
  • With your explicit consent: send marketing emails, newsletters and promotional‑offers; you may unsubscribe at any time
  • To comply with applicable legal, tax, accounting and regulatory obligations (legal obligation)

Automated decision‑making: We do not carry out solely‑automated decision‑making that creates legal or similarly significant effects for you. Any profiling we conduct is purely for analytics and marketing segmentation, and does not result in automatic decisions affecting your rights.

4. Sharing, disclosure & international data transfers

We will only share your personal information in the limited circumstances listed below. We do not sell your personal‑data for monetary profit.

  • Authorised service‑providers: Payment processor (Stripe), shipping‑carriers, analytics‑provider (Google Analytics), advertising‑platforms (Meta / Facebook Pixel). These parties process data only per our written‑instructions and applicable‑law.
  • Legal‑requirements: We may disclose personal‑data if required by law, court‑order or government‑authority, or to defend our legal‑rights.
  • Business‑transfer: In the event of merger, acquisition or asset‑sale, your information may be transferred as part of business‑assets, subject to existing‑privacy‑obligations.

International transfers: Your personal data may be transferred and stored outside New Zealand, EEA, United Kingdom or Switzerland, including to the United States. Where cross‑border transfer occurs, we implement appropriate safeguards such as Standard Contractual Clauses (SCCs) adopted by the European Commission, or other approved transfer mechanisms, to ensure your data is protected in accordance with applicable law. You may request a copy of these safeguards by contacting us at info@gozyy.com.

For Australian users: We take reasonable steps to ensure that any overseas recipient of your personal data complies with the Australian Privacy Principles.

For Brazilian users (LGPD): We provide the same level of protection to your personal data regardless of where it is processed, and we comply with LGPD requirements for international transfers.

5. Data breach notification

Under New Zealand Privacy Act 2020, GDPR and other applicable laws, if we identify a notifiable personal‑data breach likely to cause serious harm to individuals, we will notify the relevant supervisory authority without undue delay (within 72 hours where required by GDPR). Where required by law, we will also notify affected individuals.

6. Cookies and tracking‑technologies

Our site uses cookies, pixels, local‑storage and similar tracking‑tools. Full‑details are set‑out in our Cookie Policy.

You can manage or withdraw your cookie‑consent any‑time by clicking “Cookie Preferences” located in our site‑footer.

7. Data subject rights by region

7.1 EEA / United Kingdom / Switzerland (GDPR & Swiss LPD)

If you are located within European‑Economic‑Area, United‑Kingdom or Switzerland you hold these data‑subject‑rights:

  • Right to access a copy of your stored‑personal‑data
  • Right to rectify inaccurate or incomplete‑information
  • Right to erasure (“right‑to‑be‑forgotten”), where lawful‑grounds apply
  • Right to restrict processing of your personal‑data
  • Right to data‑portability
  • Right to object to processing for direct‑marketing purposes
  • Right to withdraw previously‑given consent without affecting lawfulness of processing before‑withdrawal

Submit requests via email info@gozyy.com. We respond within one calendar‑month as required by GDPR, extendable by two additional‑months for complex‑requests. You retain the right‑to‑lodge complaint with your local‑data‑protection‑authority (list of authorities available at EDPB website).

7.2 United States state‑level privacy rights

California residents (CCPA / CPRA):

  • You may request disclosure of categories and specific‑pieces of personal‑information we have collected about‑you
  • You may request deletion of your personal‑data subject‑to‑exceptions under‑law
  • You have the right to opt‑out of the “sharing” of your personal information for cross‑context behavioral advertising. We use Meta Pixel and Google Ads, which may collect and share your data for this purpose – this qualifies as “sharing” under CCPA. You can exercise your opt‑out via our Cookie‑Preferences tool or by enabling the Global‑Privacy‑Control (GPC) signal in your browser
  • We will not discriminate against you for exercising CCPA‑privacy‑rights
  • We do not sell your personal‑information for monetary‑consideration

Virginia, Colorado, Connecticut and other US state residents: You may exercise your applicable consumer‑privacy rights (access, correction, deletion, opt‑out of targeted advertising) by submitting your request via our contact email info@gozyy.com. We will process requests in accordance with your state‑level legislation.

7.3 Canada (PIPEDA), Australia, Brazil (LGPD) and other global jurisdictions

If you reside in Canada, Australia, Brazil or other countries with local data‑protection legislation, you may submit access, correction, deletion or objection requests through our main contact channel info@gozyy.com. We will evaluate and respond to your request considering the requirements of your local privacy‑law.

For Canadian users: You have the right to withdraw your consent at any time, subject to legal or contractual restrictions. We will inform you of the implications of withdrawal.

8. Data retention period

We keep personal‑data no‑longer‑than necessary to fulfil purposes for‑which it‑was‑collected:

  • Order‑related records: retained for tax‑and‑commercial‑record‑keeping legal‑obligations (minimum 7 years for New‑Zealand commercial‑records, and similar periods in other jurisdictions where applicable)
  • Marketing‑contact‑data: stored until you opt‑out / unsubscribe, and then we retain a suppression list to honour your preference
  • Support‑correspondence: retained for resolution‑and‑complaint‑handling purposes, typically for 3 years after the last interaction
  • Analytics‑cookie‑data: subject‑to cookie‑expiry defined in our Cookie‑Policy

We regularly review our retention periods and will delete or anonymise your data when it is no longer needed.

9. Children’s privacy

This website is intended for general audiences. We do not knowingly collect personal information from children under 13 years of age (or under 16 in jurisdictions where that age applies, such as certain EU member states). If you believe we hold data of a child without parental consent, please contact us immediately and we will remove it.

10. Security measures

We take commercially‑reasonable technical‑and‑organisational‑security‑steps (including encryption) to‑protect your‑personal‑data against‑loss, misuse, unauthorised‑access, alteration or‑disclosure. No internet‑transmission method can‑be guaranteed 100 % secure.

11. Third‑party‑websites

Our website may‑contain hyperlinks‑to‑external‑third‑party‑websites. We‑have‑no‑control‑over their‑content or‑privacy‑practices. Visiting‑external‑sites‑is‑at‑your‑own‑risk; review‑their‑respective‑privacy‑policies.

12. Complaints under New Zealand Privacy Act 2020

If you are dissatisfied with how we handle your personal‑information, you may lodge a complaint with us first (using contact details above). You also retain the right to refer your concern to the New Zealand Office of the Privacy Commissioner (https://www.privacy.org.nz/).

13. Changes to this Privacy‑Policy

We‑may‑update‑this‑Privacy‑Policy from‑time‑to‑time because‑of‑legislative‑changes or‑business‑adjustments. The‑“Last‑updated”‑date‑at‑top‑indicates‑revision‑date. Material‑changes‑will‑be‑communicated‑via‑website‑notice. Please‑review‑periodically. Your continued use of the site after updates constitutes acceptance of the revised policy.

14. Contact‑us

For‑questions‑regarding‑this‑Privacy‑Policy or‑to‑submit‑a‑privacy‑request‑please‑write‑to‑us:

ECOVERSE INNOVATIONS LIMITED
Email: info@gozyy.com
Phone: +64 212698074
Flat 302, 421 Queen Street, Auckland Central, Auckland 1010, New Zealand