Spreading Happiness Across New ZealandThoughtful Gifts. Brighter Days.
Fast & Reliable Delivery
Customer care
This notice explains what Giftvase collects, why it is used, which service providers process it, how long it is kept, and the choices and rights available to New Zealand customers.
We collect contact and delivery details, account activity, cart and wishlist items, order history, support messages, and personalisation details you provide. We use them to supply orders, manage accounts, prevent fraud, answer inquiries, meet legal duties, and send marketing only when requested.
Our commerce platform and hosting providers process storefront, account, and order data for us. If you pay by card, Stripe processes your payment details; Giftvase does not store card numbers. If you choose cash on delivery, no payment details are collected online. We give delivery details to the selected carrier and use email or enquiry-delivery providers only to provide the requested service.
We use analytics to understand how people use our store: our analytics provider records the pages you visit and shopping events such as products viewed, items added to your cart, and completed orders, together with your IP address and browser type, which are used to estimate your general location and count unique visitors. We do not intentionally include your name, email, delivery address, payment details, design files, or order contents in analytics events. Analytics stays off if your browser sends a Global Privacy Control or Do Not Track signal.
Order, invoice, and payment-administration records that form part of our business records are generally kept for seven tax years. Support and inquiry records are kept for up to 24 months after the matter closes, unless needed for a dispute. Marketing records are kept until you unsubscribe. Analytics data is kept for no more than 13 months. We then delete or de-identify information unless a longer period is legally required.
Some service providers may store or access information outside New Zealand. Before enabling an overseas processor, we require a privacy review and contractual or other safeguards intended to provide protection comparable with the New Zealand Privacy Act 2020. If comparable safeguards are not available and authorisation is required, we will ask for express authorisation after giving the required warning.
You may ask for access to, or correction of, personal information we hold about you. You may also ask us to delete information where we are not required to retain it, withdraw analytics or marketing consent, or raise a privacy concern. Email our privacy contact first; if we cannot resolve your concern, you may complain to the Office of the Privacy Commissioner.
