Privacy Policy

1. Scope and Privacy Officer

This policy applies to personal information handled by Daily Nest NZ through the website, customer service, authorised marketplace accounts and related order, delivery, return and support activities. Personal information is information about an identifiable individual.

Our Privacy Officer is responsible for privacy enquiries, access and correction requests, and privacy complaints. You can contact the Privacy Officer at dailynestnz@gmail.com.

2. Information you provide directly

Depending on how you interact with us, we may collect:

• your name, email address, telephone number and billing or delivery address;
• account login details, preferences and saved addresses;
• order details, products, discounts, delivery selection, order notes and transaction information;
• messages, form submissions, newsletter choices and customer-service correspondence;
• proof of purchase, photographs, videos, shipping labels and other information supplied for a return, fault, delivery or warranty claim;
• reviews, comments or other content you choose to submit; and
• any other information you voluntarily provide that is reasonably necessary to deal with your request.

If required information is not provided, we may be unable to create an account, process an order, arrange delivery, verify a payment, assess a claim or respond to a request. Optional fields are identified by the context in which they appear.

3. Information collected from other sources

We may receive personal information from another source where this is lawful and reasonably necessary, including:

• payment status, transaction references and fraud or verification signals from payment providers;
• tracking, delivery, collection, address correction and delivery-event information from carriers;
• order, message or dispute information from an authorised marketplace through which you dealt with us;
• security, error and abuse-prevention information from website, hosting and IT service providers; and
• information from a person ordering for you, sending you a gift, or otherwise authorised to deal with us on your behalf.

We use this information to fulfil and support the relevant transaction, protect the website and customers, meet legal obligations, and maintain accurate records. Where the Privacy Act requires us to notify you about indirect collection, this policy and any transaction-specific notice provide that notification unless an exception applies.

4. Cookies and automatically collected information

When you use the website, our systems and service providers may automatically record your IP address, browser and device information, pages viewed, time and date, referring page, session activity, errors, security events and approximate location inferred from technical data.

The website uses cookies and similar browser storage for purposes such as:

• keeping the website, account login, security controls, cart and checkout working;
• remembering selections and maintaining a shopping session;
• measuring website use, advertising performance, referrals, campaigns and completed purchases; and
• detecting errors, abuse, fraud and unauthorised activity.

We currently use Google Analytics and Google Ads measurement technology. Depending on the service and your settings, Google may receive cookie or device identifiers, IP address and browser information, pages and products viewed, referring or advertising click information, and purchase or conversion events. We use this information to understand website performance, measure campaigns and improve the store. Google may process this information outside New Zealand under its own privacy terms.

You can block or delete cookies using your browser settings, but essential store, login, cart or checkout functions may then stop working correctly. You can also review Google's advertising controls and read how Google uses information from partner sites. We will update this policy and any available controls if our use of analytics or advertising technology changes materially.

5. How we use personal information

We may use personal information where reasonably necessary to:

• provide the website, respond to searches and maintain accounts;
• receive, verify, accept, fulfil, deliver, track, cancel or refund orders;
• calculate delivery options and charges and correct address or delivery information;
• provide support and assess returns, faults, damage, warranties, disputes or other claims;
• send transactional, service, safety, recall and policy communications;
• send marketing where you have subscribed or another lawful basis applies;
• protect customers, prevent fraud and abuse, enforce our terms and secure our systems;
• maintain business, accounting, tax, inventory, audit and legal records;
• improve products, website functionality, customer service and operational performance using information appropriate for that purpose; and
• comply with law, respond to lawful requests, establish or defend legal claims, or complete a genuine business reorganisation.

We do not use personal information for a purpose that is unrelated to the purpose for which it was obtained unless you authorise it or the Privacy Act otherwise permits it.

6. Address search and suggestion services

Checkout may offer Google Places address suggestions. If you use that feature, the address characters you enter and technical information such as your IP address may be sent to Google to return suggestions. Google handles that information under its own terms and privacy policy. You may instead enter and verify your address manually where the checkout allows.

We use the selected or manually entered address to calculate delivery, verify service availability and fulfil the order. You remain responsible for checking that the final address shown at checkout is complete and correct.

7. Payments, orders and delivery

Payments may be processed by the payment provider selected at checkout. Where a provider hosts or processes the payment fields, it receives the payment credentials under its own privacy terms. We generally receive information such as the payment method, amount, status, transaction reference and limited fraud or verification results rather than the full card number.

We share the minimum delivery and contact information reasonably required with carriers, fulfilment or collection providers. This may include the recipient name, address, telephone number, email address, parcel details, delivery instructions and information needed to resolve delivery problems.

Payment providers, carriers and authorised marketplaces may act independently for some processing and have their own privacy notices. Their current identity is normally shown at checkout, in an order record or in delivery communications.

8. Who we may share information with

We do not sell personal information. We only disclose relevant information where reasonably needed, including to:

• website hosting, security, maintenance, email, form, storage and other IT providers;
• analytics, advertising measurement and campaign providers, including Google;
• payment, fraud-prevention and transaction service providers;
• couriers, logistics, fulfilment, assembly or collection providers;
• professional advisers, insurers, auditors and debt-recovery providers where reasonably necessary;
• government, regulators, courts, tribunals or law-enforcement bodies where required or permitted by law;
• a purchaser, investor or adviser involved in a genuine proposed sale, merger or reorganisation, subject to appropriate confidentiality and privacy safeguards; and
• another person where you authorise the disclosure or the Privacy Act otherwise permits it.

Service providers are given only the information reasonably required for their role. We take reasonable steps within our control to require appropriate handling and prevent unauthorised use or disclosure.

9. Overseas storage and processing

Some technology, payment, marketplace, email, address, support or storage providers may process or store personal information outside New Zealand. The countries involved can change as providers update their infrastructure.

Where an overseas transfer is a disclosure governed by information privacy principle 12, we will take reasonable steps to use a recipient that is subject to the New Zealand Privacy Act, comparable privacy protections or contractual safeguards, or we will seek informed authorisation where required. An overseas provider may also process information as our agent rather than for its own purposes.

10. Security and privacy breaches

We use safeguards that are reasonable in the circumstances, which may include access controls, account authentication, encrypted connections, security monitoring, backups, software maintenance and limiting staff or provider access according to operational need.

No internet transmission or storage system can be guaranteed completely secure. You should use a unique password, protect access to your email and devices, and tell us promptly if you suspect unauthorised account activity.

If a privacy breach has caused or is likely to cause serious harm, we will notify the Office of the Privacy Commissioner and affected individuals as soon as practicable, unless a statutory exception applies. We may also take containment, investigation and remediation steps.

11. How long we retain information

We retain personal information only for as long as it may lawfully be used for the purpose for which it was collected. Retention periods differ according to the information and may reflect order fulfilment, customer support, product life and claims, fraud prevention, accounting, tax, dispute and other legal requirements.

When information is no longer reasonably required, we may delete it, anonymise it or securely place it beyond ordinary use. Residual copies may remain in protected backups until they are overwritten under the relevant backup cycle. We may retain a minimal suppression record to respect an unsubscribe or prevent repeated contact.

12. Access, correction and deletion requests

You may ask for access to personal information we hold about you and request correction if it is inaccurate, incomplete, out of date or misleading. If we do not make a requested correction, you may ask us to attach a statement of correction where the Privacy Act requires it.

Send requests to our Privacy Officer and describe the information involved. We may ask for reasonable identity or authority verification and may withhold information only where the Privacy Act permits. We will respond within the statutory timeframe.

New Zealand privacy law does not create an unrestricted right to deletion. You may still ask us to delete information, and we will consider the request, but we may retain information that remains reasonably necessary for a lawful purpose, including transactions, safety, fraud prevention, disputes and legal recordkeeping.

13. Marketing, reviews and public content

We send email marketing when you subscribe, consent or another lawful basis permits it. You can unsubscribe using the link in a marketing email or by contacting us. It may take a short time to apply the request across active mailing systems. Unsubscribing from marketing does not stop necessary order, account, safety, recall or legal messages.

If you submit a product review, comment, photograph or other content for publication, the name or display name and content you choose may be visible publicly. Do not include information you do not want made public. We may retain moderation information, IP address and browser details where reasonably necessary to prevent spam, fraud or abuse.

14. Policy updates, complaints and contact

We may update this policy when our practices, providers or legal obligations change. The revised version applies from the updated date shown at the top. Material changes will be given additional notice where reasonably appropriate.

To make a request or complaint, email the Privacy Officer at dailynestnz@gmail.com. Please explain the issue and the outcome you seek. We may request information reasonably needed to investigate.

If you are not satisfied with our response, you may contact the New Zealand Office of the Privacy Commissioner.

This policy describes our current privacy practices. It does not limit any right or remedy available under the Privacy Act 2020.

Daily Nest NZ is operated by JYM TRADE LTD.