Privacy

Last updated: draft, not yet in force.

We collect as little as we can, use it only to make and deliver what you ask for, and don't sell it or use it for advertising. This notice is written for the New Zealand Privacy Act 2020.

What we collect, and why

• When you buy pegs: the names and options you choose (to make your order). Your name, email, phone (if given), delivery address and payment are collected by Stripe, our payment provider, on its checkout page. We see your contact and delivery details there so we can post your order and contact you about it. We never see your full card number.
• When you send a custom request: your email, and anything else you choose to give us (name, country, the description, photos or sketches), so we can reply and quote.
• When you check an order's status: the order reference and code you enter, only to show you that order.
• Technical data: our hosting provider handles your IP address to serve the site and block spam. We use it briefly to limit repeated form submissions. We don't use analytics or advertising cookies.

Who else handles it

We use a few service providers, some of which store data outside New Zealand:

• Stripe: payments and receipts.
• Cloudflare: hosting this website, and storing order requests and uploaded photos until we've collected them.
• A delivery service (for example NZ Post) gets your name and address to deliver your parcel.

We use AI tools to help run the shop. When we do, we keep your contact details and address out of them: they work with the details needed to make your item (for example the names to print, or a description of what you'd like made).

How long we keep it

• Order records are kept as long as needed for tax and accounting, and to deal with any problem with your order.
• Photos you upload for a custom request are deleted from our website storage after we've collected them, and from our records about 90 days after your request is finished.
• Requests that don't go ahead are deleted after about 12 months.

Keeping it safe

Order status links use a secret code; we store only a scrambled (hashed) version of it. Access to our systems is limited to the people running the shop.

Your rights

You can ask to see the personal information we hold about you, and ask us to correct it. You can also ask us to delete it where we don't need to keep it. If you're not happy with how we've handled your information, please tell us first; you can also complain to the Office of the Privacy Commissioner (privacy.org.nz).

Contact

Our contact email will be listed here before launch. Until then, use the request form and say what it is about.