Privacy policy

Last updated: [date]

Who we are

CritterPals is operated by [Legal / trading name], [postal address]. If you have any questions about your privacy, contact our Privacy Officer at privacy@critterpals.co.nz.

What we collect and why

We collect only the personal information we need to fulfil your order: your name, delivery address, email address, and payment details. We use it to process, make, and deliver your order, to contact you about it, and — only if you've opted in — to send you marketing. Providing this information is voluntary, but we can't process or ship your order without it.

Who we share it with

We share your information only where it's needed to fulfil your order, with:

• our payment provider, which processes your payment;
• the courier or postal service that delivers your order;
• service providers who host our website and store order data on our behalf.

We don't sell your information to anyone.

Information sent overseas

Some of these providers — including our payment provider, website hosting, and analytics — may store or process your information outside New Zealand [for example, in Australia and the United States]. Before sharing information overseas we take reasonable steps to ensure it's protected by safeguards comparable to those under the Privacy Act 2020, usually through our contracts with those providers.

How we store and protect it

We take reasonable steps to keep your information safe from loss, misuse, and unauthorised access. Your full payment card details are handled directly by our payment provider and are never stored by CritterPals, and our site is served over a secure (HTTPS) connection.

Please note: while you're building an order, we save it in your own web browser (in “local storage” on your device) so your cart is there when you come back. That information stays on your device, isn't encrypted, and isn't sent to us until you check out — so take care on shared or public computers.

How long we keep it

We keep order information only as long as we need it for the purposes above and to meet our legal obligations [e.g. tax records], then we securely delete it.

Cookies and analytics

We use [provider] analytics to understand how people use our site so we can improve it. This uses cookies or similar technology to collect information such as the pages you visit, your approximate location, and your device and browser type. We use this only to measure and improve the site — not to sell your information or to show you targeted ads.

You can opt out by [describe the opt-out — e.g. declining analytics in our cookie banner, or using your browser's privacy settings or a browser add-on]. [Confirm the specific provider and opt-out method before publishing.]

Your right to access and correct

You have the right to ask what personal information we hold about you, to get a copy of it, and to ask us to correct it if it's wrong. Email privacy@critterpals.co.nz and we'll respond within the timeframes set by the Privacy Act 2020. If we can't correct something, you can ask us to attach a note recording the correction you requested.

Privacy breaches

If a privacy breach happens that's likely to cause serious harm, we'll notify the affected people and the Office of the Privacy Commissioner as required by the Privacy Act 2020.

Questions or complaints

Please raise any privacy concern with us first, at privacy@critterpals.co.nz. If you're not satisfied with our response, you can contact the Office of the Privacy Commissioner (privacy.org.nz, or 0800 803 909).