GDPR Compliance Statement
Last Reviewed: January 18, 2026
Asian Mail Order Brides is committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation (GDPR) (EU) 2016/679. This statement explains how we handle personal data of individuals located in the European Economic Area (EEA) and outlines your rights under European data protection law.
Data Controller Information
As the data controller, we are responsible for determining how and why your personal data is processed. You can contact us regarding any data protection matters:
Data Controller: Asian Mail Order Brides
Website: asian-mail-order-brides.theauckland.co.nz
Data Protection Contact: [email protected]
General Inquiries: Contact Page
We take data protection seriously and have implemented appropriate technical and organizational measures to ensure the security and confidentiality of your personal information.
Legal Basis for Processing Your Data
Under GDPR Article 6, we process your personal data only when we have a valid legal basis. Our processing activities rely on the following lawful grounds:
- Consent (Article 6(1)(a)): When you subscribe to our newsletter or accept cookies, you provide explicit consent for us to process your data for those specific purposes. You may withdraw consent at any time.
- Legitimate Interests (Article 6(1)(f)): We process data for website analytics, security monitoring, and service improvement where our interests do not override your fundamental rights and freedoms.
- Contractual Necessity (Article 6(1)(b)): Processing may be necessary to respond to your inquiries or provide requested information through our contact forms.
- Legal Obligations (Article 6(1)(c)): We may process data when required by applicable laws, such as responding to lawful requests from regulatory authorities.
We do not engage in automated decision-making or profiling that produces legal or similarly significant effects on you.
Your Rights Under GDPR
As an individual located in the EEA, GDPR grants you comprehensive rights regarding your personal data. We are committed to honoring these rights promptly and transparently:
📋 Right of Access
You can request a copy of the personal data we hold about you, along with information about how we process it (Article 15).
✏️ Right to Rectification
You can ask us to correct inaccurate personal data or complete incomplete data we hold about you (Article 16).
🗑️ Right to Erasure
Also known as the "right to be forgotten," you can request deletion of your personal data in certain circumstances (Article 17).
⏸️ Right to Restriction
You can ask us to limit the processing of your personal data while we address concerns or verify information (Article 18).
📦 Right to Data Portability
You can receive your data in a structured, machine-readable format and transfer it to another controller (Article 20).
✋ Right to Object
You can object to processing based on legitimate interests or for direct marketing purposes at any time (Article 21).
🤖 Automated Decisions
You have the right not to be subject to decisions based solely on automated processing that significantly affect you (Article 22).
↩️ Withdraw Consent
Where processing relies on consent, you can withdraw it at any time without affecting prior lawful processing (Article 7).
What Personal Data We Collect
We collect and process different categories of personal data depending on how you interact with our website:
Data You Provide Directly
- Name and email address when you contact us or subscribe to communications
- Any information included in messages sent through our contact forms
- Preferences and settings you choose on our website
Data Collected Automatically
- IP address and approximate geographic location
- Browser type, device information, and operating system
- Pages visited, time spent, and navigation patterns
- Cookies and similar tracking technologies (see our Cookie Policy)
Data from Third Parties
- Analytics data from service providers like Google Analytics
- Referral information when you arrive from external websites
We apply data minimization principles, collecting only what is necessary for the stated purposes.
International Data Transfers
As our operations and service providers may be located outside the European Economic Area, your personal data may be transferred to countries that may not provide the same level of data protection as the EEA.
When transferring data outside the EEA, we implement appropriate safeguards to protect your information:
- Standard Contractual Clauses (SCCs): We use EU-approved model contracts with service providers to ensure adequate protection
- Adequacy Decisions: Where possible, we transfer data to countries recognized by the European Commission as providing adequate protection
- EU-U.S. Data Privacy Framework: Where applicable, we work with U.S. service providers certified under the framework
You may request information about the specific safeguards applied to transfers of your data by contacting our data protection team.
How Long We Keep Your Data
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, and resolve any disputes:
| Data Category | Retention Period |
|---|---|
| Contact form submissions | 24 months after last interaction |
| Newsletter subscriptions | Until unsubscription or 36 months of inactivity |
| Analytics data (aggregated) | 26 months (Google Analytics default) |
| Cookie consent records | 12 months from consent date |
| Legal compliance records | As required by applicable law (typically 6 years) |
After the retention period expires, we securely delete or anonymize your personal data. You may request earlier deletion by exercising your right to erasure.
How to Exercise Your Rights or File a Complaint
To exercise any of your GDPR rights or make a data protection inquiry, please contact us using the information below. We will respond to your request within one month, though complex requests may take up to three months (we will inform you if an extension is needed).
Contact Our Data Protection Team
Email: [email protected]
Subject Line: Please include "GDPR Request" for faster processing
Response Time: Within 30 days of receiving your verified request
Verification: We may ask you to verify your identity to protect your data
Your Right to Complain
If you are not satisfied with our response or believe we are processing your data unlawfully, you have the right to lodge a complaint with a supervisory authority. For EEA residents, this is typically the data protection authority in your country of residence.
We encourage you to contact us first so we can address your concerns directly. We take all complaints seriously and will work to resolve any issues promptly.
For more information about our general data practices, please review our Privacy Policy.