Your Data Rights (GDPR)
Your Rights Under GDPR
Under the General Data Protection Regulation (GDPR) and other applicable privacy laws, you have the following rights regarding your personal data:
Right to Access (Article 15)
You have the right to request a copy of all personal data we hold about you, including data from chatbot conversations and custom product requests.
Right to Erasure (Article 17)
You have the right to request deletion of your personal data. Please note that we may need to retain certain information for legal or accounting purposes.
Right to Rectification (Article 16)
You have the right to correct inaccurate or incomplete personal data.
Right to Data Portability (Article 20)
You have the right to receive your personal data in a machine-readable format (JSON).
What Data We Hold
If you've interacted with Wallace Heron, we may hold the following data:
- Chatbot Conversations: Your responses to questions, product recommendations shown, session timestamps
- Custom Requests: Name, email, phone, project requirements, and budget information
- Orders: Purchase history, shipping addresses, payment information (processed by Stripe)
- Technical Data: IP address, browser information (anonymized after 12 months)
Data Retention
- 📅 Chatbot conversations: Anonymized after 12 months
- 📅 Custom requests: Retained until fulfilled or 2 years
- 📅 Order data: Retained for 7 years (legal requirement)
- 📅 Deletion requests: Processed after a 30-day grace period
Submit a Data Request
Rate limited to 3 requests per email per day to prevent abuse.
Need Help?
If you have questions about your data rights or need assistance, please contact our privacy team:
📧 Email: sales@wallaceheron.co.nz
📞 Phone: +64 (0)9 238 3281
For more information about how we handle your data, see our Privacy Policy.