Privacy policy
Last updated: 22 August 2026
What we collect
When you place an order through Stripe, we receive your name, email, shipping address, and phone number from the Stripe Checkout session so we can fulfil the order. We never see your card details - those stay with Stripe.
For site analytics, we record a per-day hashed identifier (derived from your IP and browser, salted and not reversible) plus the path you visited. We do not log raw IPs, store cookies for tracking, or share this data with third parties.
Why we keep it
Order data: to print, ship, and follow up on your purchase, and to meet NZ tax / consumer record-keeping requirements.
Analytics: to understand which products people browse and how to improve the catalogue. We delete records older than 12 months.
Who else sees it
- Stripe - payment processing. stripe.com/privacy
- NZ Post - for delivery. Address only.
- Meta (Facebook) Conversions API - if you arrived via a Meta ad, we forward a hashed version of your email + purchase value back to Meta to attribute conversions. You can opt out via your Meta ad preferences.
That's it - no other third-party trackers, no advertising pixels beyond Meta CAPI, no email marketing service yet.
Your rights
Under the NZ Privacy Act 2020 you can request a copy of, correct, or delete any personal info we hold about you. Reach out through the site and we'll respond within 20 working days.