Cookie Policy

Last updated: March 5, 2026

This Cookie Policy explains how ECOVERSE INNOVATIONS LIMITED (trading as Gozyy) (“we”, “our”, “us”) uses cookies and similar tracking technologies including web beacons, pixels, local storage, session storage and device identifiers on gozyy.com (the “Site”). This policy describes the types of tracking technologies we deploy, the purposes of processing, your legal rights globally, and how you can manage your consent.


1. What are cookies and similar tracking technologies?

Cookies are small text files saved to your computer, mobile phone, tablet or other device when you visit a website. Some cookies remain after your browser closes (persistent cookies); others are deleted when you close your browser (session cookies).

We may also use functionally equivalent tracking technologies such as web beacons, tracking pixels, HTML5 local storage and session storage, where permitted by applicable law.

2. Categories of cookies we use

Technical implementation: We block all non‑essential cookies from loading until you actively grant consent via our cookie banner. No analytics, marketing, or preference cookies are set by default on your first visit.

CategoryPurposeExamplesDuration
Strictly NecessaryEssential for the Site to operate securely. Required for shopping cart, checkout, authentication, fraud prevention, load balancing and security protection. Cannot be disabled by you.Session ID, CSRF tokens, checkout state, security anti‑fraud tokensSession / 24 hours
PreferencesStore your saved site settings to customise your browsing experience.Currency selection, language preference, regional settings1 year
Analytics / PerformanceCollect aggregated, anonymised visitor statistics to measure site performance, identify errors and improve site usability._ga, _gid (Google Analytics)2 years / 24 hours
Marketing / TargetingDeliver personalised advertising, measure ad conversion, control ad frequency, build audience segments. May be set by our authorised advertising partners._fbp (Meta Pixel), Google Ads tracking cookies, DoubleClick IDE3 months / 1 year

Note: Cookie lifetimes listed are typical values and may be adjusted by third‑party providers.

Legal Note: Strictly Necessary cookies may be deployed without consent under most global privacy frameworks. Analytics, Preference (where non‑essential) and Marketing cookies require your explicit opt‑in consent before activation in jurisdictions including the EEA, UK, Switzerland, Brazil, Singapore and others.

3. Your consent, control and opt‑out options

  1. Cookie Consent Banner & Permanent Preference Centre
    On your first site visit, a cookie banner will request your consent for non‑essential tracking. You may accept all, reject non‑essential cookies or customise consent per cookie category. You can update or withdraw consent at any time via the permanent Cookie Preferences link located in the website footer. If you withdraw consent, targeted advertising and analytics tracking will cease; core shopping and checkout functions remain available.
  2. Browser Controls
    You may configure your web browser to block, restrict or delete cookies. Blocking all cookies may break core website functionality. Official browser guidance:
  3. Global Industry Advertising Opt‑Out
  4. Consent Records
    We maintain timestamped consent logs recording your cookie choices to demonstrate compliance with global consent laws for the legally required retention period.

4. Regional privacy rights and applicable laws

4.1 European Economic Area, United Kingdom and Switzerland (GDPR, UK GDPR, ePrivacy Directive)

  • We obtain explicit opt‑in consent before loading non‑essential cookies.
  • You hold data subject rights: right of access, rectification, erasure, restriction of processing, data portability and objection to processing.
  • You may withdraw consent at any time without penalty.
  • Where personal data is transferred outside the EEA / UK / Switzerland, we rely on Standard Contractual Clauses (SCCs) or other legally approved transfer mechanisms to protect personal data.

4.2 United States – Multi‑State Privacy Rules (CCPA/CPRA California, CDPA Virginia, CPA Colorado, CTDPA Connecticut etc.)

  • We do not sell personal information for monetary consideration in the traditional sense.
  • We share personal information with advertising partners (including Meta and Google) for cross‑context behavioural advertising. This qualifies as “sharing” under CCPA/CPRA.
  • When we receive a Global Privacy Control (GPC) signal, we will automatically suppress all non‑essential cookies (including analytics and marketing cookies) for that browsing session.
  • Eligible consumers may submit verifiable consumer requests to access, delete or correct personal data. We will not discriminate against users exercising their statutory privacy rights.

4.3 New Zealand (Privacy Act 2020)

We comply with the New Zealand Privacy Act 2020. You may request access to or correction of personal data we hold. Complaints may be escalated to the New Zealand Office of the Privacy Commissioner.

4.4 Canada (PIPEDA)

We process personal data in compliance with the Personal Information Protection and Electronic Documents Act. Consent must be meaningful and may be withdrawn at any time. Personal data transfers outside Canada are protected by approved safeguards.

4.5 Australia (OAIC Privacy Act)

We adhere to the Australian Privacy Principles under the Privacy Act 1988. You may make a privacy access request or lodge a complaint with the Office of the Australian Information Commissioner.

4.6 Brazil (LGPD)

For users located in Brazil, processing follows the Lei Geral de Proteção de Dados. You have data subject rights and may withdraw consent. Under ANPD guidance, consent for cookie‑based processing has a maximum validity of 6 months. After this period, we will renew your consent request. Data transfers outside Brazil use approved legal safeguards.

4.7 Singapore (PDPA)

We comply with the Personal Data Protection Act. We obtain consent before non‑essential tracking; you may withdraw consent and submit data access or deletion requests.

4.8 Japan (APPI)

Processing complies with the Act on the Protection of Personal Information. Where data is transferred outside Japan, we implement legally required protective measures.

5. Children’s privacy (COPPA, GDPR children provisions, global minor safeguards)

This Site is intended for adult users aged 13 and older. We do not knowingly collect personal information, tracking identifiers or cookie data from children under 13. If you believe we have collected data from a child without valid parental consent, contact us immediately and we will delete the relevant records.

6. Third‑party services and third‑party cookies

Selected third‑party service providers may set their own cookies and tracking pixels when you visit our Site. These third parties act as independent data controllers and their tracking is governed by their own privacy and cookie policies.

Third PartyServicePurpose
Google LLCGoogle Analytics, Google Ads, Google Tag ManagerWebsite analytics, advertising measurement, tag management
Meta Platforms, Inc.Meta Pixel / Facebook PixelAdvertising conversion measurement, audience building
Stripe, Inc.Payment processing, fraud detectionSecure checkout, payment fraud prevention (strictly necessary)

7. Data Controller and global contact information

Data Controller: ECOVERSE INNOVATIONS LIMITED
Trading Name: Gozyy
Contact Email: info@gozyy.com
Phone: +64 212698074
Registered Address:Flat 302, 421 Queen Street, Auckland Central, Auckland 1010, New Zealand

For privacy requests, consent withdrawal, data access or deletion submissions, contact the above address. We respond to valid statutory requests within the applicable legal timeframe (generally 30 calendar days).

8. Policy updates

We may revise this Cookie Policy periodically to reflect legal changes, new tracking technologies or business updates. The “Last updated” date at the top indicates the latest revision. For material changes that affect our use of non‑essential cookies, we will re‑prompt for your consent via our cookie banner on your next visit. Continued site use after non‑material updates constitutes acceptance of the revised terms, subject to applicable consent law.

9. Governing law and conflict clause

This Cookie Policy is governed by the laws of New Zealand. Nothing within this policy overrides mandatory privacy legislation applicable to you in your country or territory of residence. Where local law imposes stricter requirements, local law shall prevail.