Privacy Policy
PRIVACY POLICY
Last Updated: 1st December 2025
1. Introduction
Exymes Ltd and its subsidiary Exymes NZ Ltd (together “Exymes”, “we”, “us”, or “our”) is committed to protecting your privacy and being transparent about how we collect, use, and safeguard your personal information.
This Privacy Policy explains how we collect, process, and maintain personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (GDPR), the New Zealand Privacy Act 2020, and other applicable data protection laws in countries where we conduct business operations.
This policy applies when you visit our website www.exymesplc.com (the “Site”), interact with us, make purchases, or use our products and services.
2. Who We Are
Exymes Ltd (parent company)
Registered Address: Alum House, 5 Alum Chine Road, Bournemouth, BH4 8DT, United Kingdom
Exymes NZ Ltd (subsidiary)
Operating in New Zealand
For privacy-related inquiries, please contact us at: privacy@exymesplc.com
3. Information We Collect
3.1 Personal Information
Personal information is data that can be used to identify or contact an individual. You may be asked to provide personal information when you:
Visit our Site
Contact us via email, telephone, or our online contact form
Make a purchase or inquiry about our products or services
Sign up for newsletters or marketing communications
Interact with us at events or through our distribution partners
You are not required to provide personal information, but if you choose not to do so, we may not be able to provide you with our products, services, or respond to your inquiries.
Types of personal information we collect include:
Contact Information: Name, email address, telephone number, company name, job title
Business Information: Company details, industry sector, business requirements
Correspondence Information: Any information you provide when contacting us
Order Information: Name, billing address, shipping address, payment information, email address, phone number (when we commence e-commerce operations)
Marketing Preferences: Your communication preferences and consent records
3.2 Automatically Collected Information
When you visit our Site, we automatically collect certain technical information about your device and browsing activity (“Device Information”), including:
Browser type and version
IP address
Operating system
Time zone settings
Pages you view on our Site
Websites or search terms that referred you to our Site
How you interact with our Site (clicks, scrolling, time spent)
Date and time stamps
In most cases, this information does not identify you personally. However, where local laws consider IP addresses or similar identifiers as personal information, we treat it accordingly.
3.3 Non-Personal Information
We also collect data that does not, on its own, identify a specific individual. We may collect, use, transfer, and disclose non-personal information for any purpose, including to improve our products, services, and Site experience.
4. How We Use Your Information
4.1 Legal Basis for Processing
We process your personal information only when we have a valid legal basis to do so:
Contract Performance: To fulfill orders, provide services, or perform contractual obligations
Legal Obligations: To comply with laws, regulations, court orders, or regulatory requirements
Legitimate Interests: For our business interests, such as improving our products, marketing our services, and fraud prevention, provided your rights and interests do not override these interests
Consent: Where you have given clear consent for specific processing activities (e.g., marketing communications)
4.2 Purposes of Processing
We use your personal information for the following purposes:
Order Fulfillment and Service Delivery (when e-commerce operations commence):
Process and fulfill orders placed through our Site
Process payment information
Arrange shipping and delivery
Provide invoices and order confirmations
Contact you regarding order issues or updates
Screen orders for potential fraud or risk
Customer Service and Communications:
Respond to your inquiries and requests
Provide customer support
Send important notices about our services
Manage our relationship with you
Marketing and Business Development:
Send you product announcements, offers, and event information (with your consent or where we have legitimate interests)
Share information with our approved distribution partners for marketing Exymes products only
Conduct market research and analysis
Site Improvement and Analytics:
Analyze how visitors use our Site
Improve our Site functionality and user experience
Optimize our products, content, and services
Conduct internal research and data analysis
Business Operations:
Maintain business records
Comply with legal and regulatory requirements
Protect against fraud and security threats
Enforce our terms and conditions
5. Cookies and Similar Technologies
5.1 What Are Cookies?
Cookies are small data files placed on your device when you visit our Site. We use cookies and similar technologies to enhance your experience and understand how our Site is used.
5.2 Types of Technologies We Use
Cookies: Data files containing an anonymous unique identifier
Log Files: Track actions on the Site, collecting data about your browser type, internet service provider, referring/exit pages, and timestamps
Web Beacons, Tags, and Pixels: Electronic files that record information about your browsing behavior
5.3 How We Use These Technologies
We use cookies and similar technologies to:
Remember your preferences and settings
Understand user behavior and Site usage patterns
Measure the effectiveness of our content and communications
Improve Site functionality and personalization
Analyse which parts of our Site are visited most frequently
Deliver relevant content and advertisements
5.4 Managing Cookies
Most web browsers automatically accept cookies, but you can usually modify your browser settings to decline cookies if you prefer. However, this may prevent you from taking full advantage of our Site.
For more information about cookies and how to manage them, visit: http://www.allaboutcookies.org
5.5 Analytics Services
We use Google Analytics to understand how customers use our Site. Google Analytics collects information anonymously and reports website trends without identifying individual visitors.
Learn more about Google’s privacy practices: https://policies.google.com/privacy
Opt out of Google Analytics: https://tools.google.com/dlpage/gaoptout
6. How We Share Your Information
We do not sell your personal information to third parties. We may share your information in the following circumstances:
6.1 Within Exymes Group
We may share personal information between Exymes Ltd and Exymes NZ Ltd for the purposes described in this Privacy Policy, including business operations, customer service, and marketing.
6.2 Service Providers
We share information with trusted third-party service providers who assist us in operating our business, including:
Customer Relationship Management: Pipedrive (for managing customer interactions)
Accounting Services: Xero (for financial management)
Web Analytics: Google Analytics (for Site usage analysis)
Payment Processors: Third-party payment providers (when e-commerce operations commence)
Shipping and Fulfillment Partners: Delivery service providers (for order fulfillment)
IT and Security Providers: Technology service providers who support our systems
These service providers are contractually required to protect your information and use it only for the purposes we specify.
6.3 Distribution Partners
With your consent or where we have legitimate interests, we may share your contact information with our approved distribution network partners for the purpose of marketing and promoting Exymes products only.
6.4 Legal Requirements
We may disclose your information when required by law, regulation, legal process, or government request, or when we believe disclosure is necessary to:
Comply with legal obligations
Protect and defend our rights or property
Prevent fraud or security threats
Protect the safety of our employees, customers, or the public
6.5 Business Transfers
In the event of a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have.
7. International Data Transfers
Exymes operates internationally, with operations in the United Kingdom and New Zealand. We may also work with service providers located in other countries, including the United States and European Union.
When we transfer your personal information outside the UK, EEA, or New Zealand, we ensure appropriate safeguards are in place, such as:
Standard Contractual Clauses approved by the relevant authorities
Adequacy Decisions recognizing that the destination country provides adequate data protection
Other approved transfer mechanisms under applicable law
By providing your personal information to us, you acknowledge and consent to such international transfers.
8. Data Security
We take the security of your personal information very seriously and implement appropriate technical and organizational measures to protect it against unauthorized access, alteration, disclosure, or destruction.
Our security measures include:
Password-protected and encrypted computer systems
Restricted access to personal information on a need-to-know basis
Secure storage of physical and electronic records
Regular security assessments and updates
Secure data transmission protocols
However, please note that no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.
9. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy or as required by law.
9.1 Retention Periods
Active Customer Data: Retained while you remain an active customer or contact
Inactive Contact Data: If we have not heard from you for three years and there is no evidence that your information remains valid or relevant, we will delete your personal information from our systems
Order and Transaction Records: Retained for accounting, audit, and legal compliance purposes (typically 7 years from the transaction date or as required by law)
Marketing Data: Retained until you withdraw consent or unsubscribe, after which we will suppress your details
9.2 Accuracy of Information
We ask that you help us keep your personal information accurate, complete, and up to date by notifying us of any changes. You can update your details by contacting us at privacy@exymesplc.com.
10. Your Rights
10.1 UK and European Residents
If you are located in the UK or European Economic Area, you have the following rights under data protection law:
Right of Access: Request a copy of the personal information we hold about you
Right to Rectification: Request correction of inaccurate or incomplete personal information
Right to Erasure: Request deletion of your personal information in certain circumstances
Right to Restriction: Request that we restrict processing of your personal information in certain circumstances
Right to Data Portability: Request transfer of your personal information to another organization in certain circumstances
Right to Object: Object to our processing of your personal information based on legitimate interests
Rights Related to Automated Decision-Making: Request human review of automated decisions that significantly affect you
10.2 New Zealand Residents
If you are located in New Zealand, you have rights under the Privacy Act 2020, including:
Right to access your personal information
Right to request correction of your personal information
Right to request deletion in certain circumstances
10.3 All Users
Regardless of location, you have the right to:
Withdraw Consent: Withdraw consent for marketing communications at any time by clicking the unsubscribe link in our emails or contacting us
Opt Out of Marketing: Manage your marketing preferences or unsubscribe from our mailing list
Lodge a Complaint: Complain to the relevant data protection authority if you believe your rights have been violated
10.4 Exercising Your Rights
To exercise any of these rights, please contact us at privacy@exymesplc.com. We will respond to your request within the timeframes required by applicable law (typically within one month).
We may need to verify your identity before processing your request to ensure we are disclosing information to the correct person.
11. Marketing Communications
With your consent or where we have legitimate interests, we may send you marketing communications about our products, services, events, and offers.
You can opt out of marketing communications at any time by:
Clicking the “unsubscribe” link in any marketing email
Contacting us at privacy@exymesplc.com
Updating your preferences through our Site (when available)
Please note that even if you opt out of marketing communications, we may still send you non-marketing communications, such as order confirmations, service announcements, or responses to your inquiries.
12. Children’s Privacy
Our Site and services are not directed at children under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete such information promptly.
If you believe we have collected information from a child under 16, please contact us immediately at privacy@exymesplc.com.
13. Third-Party Links
Our Site may contain links to third-party websites, services, or applications that are not operated by Exymes. This Privacy Policy does not apply to those third-party sites.
We are not responsible for the privacy practices or content of third-party sites. We encourage you to review the privacy policies of any third-party sites you visit.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons.
When we make material changes to this Privacy Policy, we will notify you by:
Posting the updated policy on this page with a new “Last Updated” date
Sending an email notification to registered users (where appropriate)
Displaying a prominent notice on our Site
We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.
15. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Email: privacy@exymesplc.com
Postal Address:
Exymes Ltd
Alum House
5 Alum Chine Road
Bournemouth
BH4 8DT
United Kingdom
16. Supervisory Authorities
If you are not satisfied with our response to your privacy concerns, you have the right to lodge a complaint with the relevant supervisory authority:
UK Residents:
Information Commissioner’s Office (ICO)
Website: https://ico.org.uk
EU Residents:
Your local data protection authority
New Zealand Residents:
Office of the Privacy Commissioner
Website: https://www.privacy.org.nz
Privacy Policy
PRIVACY POLICY
Last Updated: 1st December 2025
1. Introduction
Exymes Ltd and its subsidiary Exymes NZ Ltd (together “Exymes”, “we”, “us”, or “our”) is committed to protecting your privacy and being transparent about how we collect, use, and safeguard your personal information.
This Privacy Policy explains how we collect, process, and maintain personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (GDPR), the New Zealand Privacy Act 2020, and other applicable data protection laws in countries where we conduct business operations.
This policy applies when you visit our website www.exymesplc.com (the “Site”), interact with us, make purchases, or use our products and services.
2. Who We Are
Exymes Ltd (parent company)
Registered Address: Alum House, 5 Alum Chine Road, Bournemouth, BH4 8DT, United Kingdom
Exymes NZ Ltd (subsidiary)
Operating in New Zealand
For privacy-related inquiries, please contact us at: privacy@exymesplc.com
3. Information We Collect
3.1 Personal Information
Personal information is data that can be used to identify or contact an individual. You may be asked to provide personal information when you:
Visit our Site
Contact us via email, telephone, or our online contact form
Make a purchase or inquiry about our products or services
Sign up for newsletters or marketing communications
Interact with us at events or through our distribution partners
You are not required to provide personal information, but if you choose not to do so, we may not be able to provide you with our products, services, or respond to your inquiries.
Types of personal information we collect include:
Contact Information: Name, email address, telephone number, company name, job title
Business Information: Company details, industry sector, business requirements
Correspondence Information: Any information you provide when contacting us
Order Information: Name, billing address, shipping address, payment information, email address, phone number (when we commence e-commerce operations)
Marketing Preferences: Your communication preferences and consent records
3.2 Automatically Collected Information
When you visit our Site, we automatically collect certain technical information about your device and browsing activity (“Device Information”), including:
Browser type and version
IP address
Operating system
Time zone settings
Pages you view on our Site
Websites or search terms that referred you to our Site
How you interact with our Site (clicks, scrolling, time spent)
Date and time stamps
In most cases, this information does not identify you personally. However, where local laws consider IP addresses or similar identifiers as personal information, we treat it accordingly.
3.3 Non-Personal Information
We also collect data that does not, on its own, identify a specific individual. We may collect, use, transfer, and disclose non-personal information for any purpose, including to improve our products, services, and Site experience.
4. How We Use Your Information
4.1 Legal Basis for Processing
We process your personal information only when we have a valid legal basis to do so:
Contract Performance: To fulfill orders, provide services, or perform contractual obligations
Legal Obligations: To comply with laws, regulations, court orders, or regulatory requirements
Legitimate Interests: For our business interests, such as improving our products, marketing our services, and fraud prevention, provided your rights and interests do not override these interests
Consent: Where you have given clear consent for specific processing activities (e.g., marketing communications)
4.2 Purposes of Processing
We use your personal information for the following purposes:
Order Fulfillment and Service Delivery (when e-commerce operations commence):
Process and fulfill orders placed through our Site
Process payment information
Arrange shipping and delivery
Provide invoices and order confirmations
Contact you regarding order issues or updates
Screen orders for potential fraud or risk
Customer Service and Communications:
Respond to your inquiries and requests
Provide customer support
Send important notices about our services
Manage our relationship with you
Marketing and Business Development:
Send you product announcements, offers, and event information (with your consent or where we have legitimate interests)
Share information with our approved distribution partners for marketing Exymes products only
Conduct market research and analysis
Site Improvement and Analytics:
Analyze how visitors use our Site
Improve our Site functionality and user experience
Optimize our products, content, and services
Conduct internal research and data analysis
Business Operations:
Maintain business records
Comply with legal and regulatory requirements
Protect against fraud and security threats
Enforce our terms and conditions
5. Cookies and Similar Technologies
5.1 What Are Cookies?
Cookies are small data files placed on your device when you visit our Site. We use cookies and similar technologies to enhance your experience and understand how our Site is used.
5.2 Types of Technologies We Use
Cookies: Data files containing an anonymous unique identifier
Log Files: Track actions on the Site, collecting data about your browser type, internet service provider, referring/exit pages, and timestamps
Web Beacons, Tags, and Pixels: Electronic files that record information about your browsing behavior
5.3 How We Use These Technologies
We use cookies and similar technologies to:
Remember your preferences and settings
Understand user behavior and Site usage patterns
Measure the effectiveness of our content and communications
Improve Site functionality and personalization
Analyse which parts of our Site are visited most frequently
Deliver relevant content and advertisements
5.4 Managing Cookies
Most web browsers automatically accept cookies, but you can usually modify your browser settings to decline cookies if you prefer. However, this may prevent you from taking full advantage of our Site.
For more information about cookies and how to manage them, visit: http://www.allaboutcookies.org
5.5 Analytics Services
We use Google Analytics to understand how customers use our Site. Google Analytics collects information anonymously and reports website trends without identifying individual visitors.
Learn more about Google’s privacy practices: https://policies.google.com/privacy
Opt out of Google Analytics: https://tools.google.com/dlpage/gaoptout
6. How We Share Your Information
We do not sell your personal information to third parties. We may share your information in the following circumstances:
6.1 Within Exymes Group
We may share personal information between Exymes Ltd and Exymes NZ Ltd for the purposes described in this Privacy Policy, including business operations, customer service, and marketing.
6.2 Service Providers
We share information with trusted third-party service providers who assist us in operating our business, including:
Customer Relationship Management: Pipedrive (for managing customer interactions)
Accounting Services: Xero (for financial management)
Web Analytics: Google Analytics (for Site usage analysis)
Payment Processors: Third-party payment providers (when e-commerce operations commence)
Shipping and Fulfillment Partners: Delivery service providers (for order fulfillment)
IT and Security Providers: Technology service providers who support our systems
These service providers are contractually required to protect your information and use it only for the purposes we specify.
6.3 Distribution Partners
With your consent or where we have legitimate interests, we may share your contact information with our approved distribution network partners for the purpose of marketing and promoting Exymes products only.
6.4 Legal Requirements
We may disclose your information when required by law, regulation, legal process, or government request, or when we believe disclosure is necessary to:
Comply with legal obligations
Protect and defend our rights or property
Prevent fraud or security threats
Protect the safety of our employees, customers, or the public
6.5 Business Transfers
In the event of a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have.
7. International Data Transfers
Exymes operates internationally, with operations in the United Kingdom and New Zealand. We may also work with service providers located in other countries, including the United States and European Union.
When we transfer your personal information outside the UK, EEA, or New Zealand, we ensure appropriate safeguards are in place, such as:
Standard Contractual Clauses approved by the relevant authorities
Adequacy Decisions recognizing that the destination country provides adequate data protection
Other approved transfer mechanisms under applicable law
By providing your personal information to us, you acknowledge and consent to such international transfers.
8. Data Security
We take the security of your personal information very seriously and implement appropriate technical and organizational measures to protect it against unauthorized access, alteration, disclosure, or destruction.
Our security measures include:
Password-protected and encrypted computer systems
Restricted access to personal information on a need-to-know basis
Secure storage of physical and electronic records
Regular security assessments and updates
Secure data transmission protocols
However, please note that no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.
9. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy or as required by law.
9.1 Retention Periods
Active Customer Data: Retained while you remain an active customer or contact
Inactive Contact Data: If we have not heard from you for three years and there is no evidence that your information remains valid or relevant, we will delete your personal information from our systems
Order and Transaction Records: Retained for accounting, audit, and legal compliance purposes (typically 7 years from the transaction date or as required by law)
Marketing Data: Retained until you withdraw consent or unsubscribe, after which we will suppress your details
9.2 Accuracy of Information
We ask that you help us keep your personal information accurate, complete, and up to date by notifying us of any changes. You can update your details by contacting us at privacy@exymesplc.com.
10. Your Rights
10.1 UK and European Residents
If you are located in the UK or European Economic Area, you have the following rights under data protection law:
Right of Access: Request a copy of the personal information we hold about you
Right to Rectification: Request correction of inaccurate or incomplete personal information
Right to Erasure: Request deletion of your personal information in certain circumstances
Right to Restriction: Request that we restrict processing of your personal information in certain circumstances
Right to Data Portability: Request transfer of your personal information to another organization in certain circumstances
Right to Object: Object to our processing of your personal information based on legitimate interests
Rights Related to Automated Decision-Making: Request human review of automated decisions that significantly affect you
10.2 New Zealand Residents
If you are located in New Zealand, you have rights under the Privacy Act 2020, including:
Right to access your personal information
Right to request correction of your personal information
Right to request deletion in certain circumstances
10.3 All Users
Regardless of location, you have the right to:
Withdraw Consent: Withdraw consent for marketing communications at any time by clicking the unsubscribe link in our emails or contacting us
Opt Out of Marketing: Manage your marketing preferences or unsubscribe from our mailing list
Lodge a Complaint: Complain to the relevant data protection authority if you believe your rights have been violated
10.4 Exercising Your Rights
To exercise any of these rights, please contact us at privacy@exymesplc.com. We will respond to your request within the timeframes required by applicable law (typically within one month).
We may need to verify your identity before processing your request to ensure we are disclosing information to the correct person.
11. Marketing Communications
With your consent or where we have legitimate interests, we may send you marketing communications about our products, services, events, and offers.
You can opt out of marketing communications at any time by:
Clicking the “unsubscribe” link in any marketing email
Contacting us at privacy@exymesplc.com
Updating your preferences through our Site (when available)
Please note that even if you opt out of marketing communications, we may still send you non-marketing communications, such as order confirmations, service announcements, or responses to your inquiries.
12. Children’s Privacy
Our Site and services are not directed at children under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete such information promptly.
If you believe we have collected information from a child under 16, please contact us immediately at privacy@exymesplc.com.
13. Third-Party Links
Our Site may contain links to third-party websites, services, or applications that are not operated by Exymes. This Privacy Policy does not apply to those third-party sites.
We are not responsible for the privacy practices or content of third-party sites. We encourage you to review the privacy policies of any third-party sites you visit.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons.
When we make material changes to this Privacy Policy, we will notify you by:
Posting the updated policy on this page with a new “Last Updated” date
Sending an email notification to registered users (where appropriate)
Displaying a prominent notice on our Site
We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.
15. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Email: privacy@exymesplc.com
Postal Address:
Exymes Ltd
Alum House
5 Alum Chine Road
Bournemouth
BH4 8DT
United Kingdom
16. Supervisory Authorities
If you are not satisfied with our response to your privacy concerns, you have the right to lodge a complaint with the relevant supervisory authority:
UK Residents:
Information Commissioner’s Office (ICO)
Website: https://ico.org.uk
EU Residents:
Your local data protection authority
New Zealand Residents:
Office of the Privacy Commissioner
Website: https://www.privacy.org.nz