Privacy Policy

1) Personal information we collect

• Account details: name, email, username, password (hashed), preferences.
• Transaction/support: billing references, refunds/chargeback details, and messages you send to support.
• Device/usage data: IP address, device identifiers, browser type, pages viewed, timestamps, logs, and approximate location derived from IP.
• Cookies/analytics: identifiers used to remember settings, measure performance, and prevent fraud.

2) Why we collect it (purpose) & legal basis

• Provide and operate the Service, create/manage accounts, and process requests (performance of a contract).
• Customer support, communications, and service notices (contract and legitimate interests).
• Security, fraud prevention, troubleshooting, and enforcing terms (legitimate interests).
• Analytics to improve features and user experience (legitimate interests; where required, consent for non-essential cookies).
• Comply with legal obligations (e.g., tax, accounting, or lawful requests) (legal obligation).

Under the New Zealand Privacy Act 2020, we collect and use personal information for lawful purposes connected with our functions and only where necessary for those purposes.

3) How we share information

We may share personal information with:

• Service providers (processors): hosting, analytics, customer support tools, email delivery, security monitoring, and payment-related providers (as applicable).
• Professional advisers: legal, audit, and accounting.
• Authorities: when required or authorised by law.
• Business changes: if we restructure, merge, or sell assets, with appropriate safeguards.

We do not sell personal information.

4) International transfers

Some providers may store or access information outside New Zealand. When we disclose personal information overseas, we take reasonable steps to ensure it is protected in a way that is comparable to the New Zealand Privacy Act 2020 (e.g., contractual safeguards and vendor due diligence).

5) Retention

We keep personal information only for as long as needed for the purposes above, including to meet legal, accounting, dispute resolution, and security requirements. We then delete or de-identify it where practicable.

6) Security

We use reasonable administrative, technical and physical safeguards (e.g., access controls, encryption in transit where supported, logging/monitoring). No method of transmission or storage is 100% secure.

7) Your rights (NZ Privacy Act 2020)

• Request access to personal information we hold about you.
• Request correction of your personal information.
• Complain if you believe we have mishandled your information.

We may ask you to verify your identity before responding. If you are not satisfied with our response, you can contact the Office of the Privacy Commissioner (NZ).

8) Contact us