Privacy Policy

Last updated [FILL: date]

DaysRun Limited, NZBN 9429045884566, of Auckland, New Zealand, is committed to protecting your privacy. This policy explains what personal information we collect, why we collect it, who we share it with, and what rights you have. We handle personal information in accordance with the Privacy Act 2020 and its Information Privacy Principles.

1. What we collect

Information you give us

• Name, email address, delivery address, billing address and phone number
• Order and payment details (see section 3 — we do not store full card numbers)
• Account login details, if you create an account
• Messages you send us, including commission and licensing enquiries
• Reviews, comments and any content you submit
• Your email address if you subscribe to our newsletter

Information collected automatically

• IP address, browser type, device type and operating system
• Pages viewed, referring site, and how you move through the site
• Cookie and analytics data (see section 7)

We do not collect sensitive information, and we do not knowingly collect personal information from children under 16.

2. Why we collect it

We use your personal information to:

• process, produce, fulfil and deliver your order;
• take payment and issue receipts and GST invoices;
• send order confirmations, dispatch notices and tracking;
• respond to your enquiries, including commissions and licensing;
• handle returns, damage claims and courier claims;
• send marketing emails, if you have subscribed (section 6);
• improve the site, our products and our service;
• detect and prevent fraud; and
• meet our legal and tax obligations, including under the Tax Administration Act 1994 and the Goods and Services Tax Act 1985.

We will not use your information for an unrelated purpose without telling you or getting your consent, unless the Privacy Act allows it.

3. Payments

Payments are processed by [FILL: name your providers] through Squarespace’s commerce platform.

We never see or store your full card number, expiry date or security code. Your payment details go directly to the payment provider, which handles them under its own privacy policy and to PCI-DSS standards. We receive only confirmation of payment and the last four digits of the card.

4. Who we share it with

We share personal information only where it is necessary:

We may also disclose information where required by law, to enforce our terms, or to protect the rights or safety of any person.

5. Information sent overseas

Several of our providers — including Squarespace, our payment providers and our email platform — store and process data outside New Zealand, primarily in the United States, the European Union and Australia.

Before disclosing personal information overseas, we take reasonable steps under Information Privacy Principle 12 to satisfy ourselves that the recipient is required to protect the information with comparable safeguards to those in the Privacy Act 2020 — whether through binding contractual terms, participation in a recognised privacy framework, or the privacy laws of the receiving country.

International orders necessarily involve sending your name and address to overseas couriers and customs authorities in order to deliver the parcel.

6. Marketing emails

We send marketing emails only to people who have subscribed. Our emails comply with the Unsolicited Electronic Messages Act 2007: every message identifies us as the sender and includes a working unsubscribe link.

You can unsubscribe at any time using the link in any email, or by emailing prints@daysrun.co.nz. We will action it promptly.

Unsubscribing from marketing does not stop transactional emails about an order you have placed — order confirmations, dispatch notices and delivery updates.

7. Cookies and analytics

The site uses cookies — small files stored on your device — to keep your cart working, remember your preferences, keep you logged in, and understand how the site is used.

We use:

• Strictly necessary cookies — required for the cart, checkout and account login to work. The site will not function properly without these.
• Analytics cookies — [FILL: analytics platform] to see which pages are visited and how people find us, in aggregate.
• Marketing cookies — [FILL: delete this bullet if you don’t run ads] to measure advertising performance.

You can block or delete cookies in your browser settings. If you block strictly necessary cookies, you will not be able to complete a purchase.

8. How we store and protect it

Personal information is stored on Squarespace’s systems and with the providers listed in section 4. We use access controls, strong passwords and multi-factor authentication where available, and we limit access to those who need it.

No system is completely secure, and we cannot guarantee absolute security. If a privacy breach occurs that is likely to cause serious harm, we will notify the affected individuals and the Office of the Privacy Commissioner as required by Part 6 of the Privacy Act 2020.

9. How long we keep it

We delete or de-identify personal information when we no longer need it for a lawful purpose.

10. Your rights

Under the Privacy Act 2020 you have the right to:

• Access the personal information we hold about you (IPP 6);
• Correct it if it is wrong, or ask us to attach a statement of correction if we disagree (IPP 7);
• Unsubscribe from marketing at any time; and
• Complain if you believe we have mishandled your information.

To make a request, email prints@daysrun.co.nz. We may need to verify your identity. We will respond within 20 working days, as the Privacy Act requires.

There is no charge for a request, unless it is a large or repeated request, in which case we will tell you about any charge before proceeding.

11. Complaints

If you have a privacy concern, contact us first at prints@daysrun.co.nz and we will try to resolve it.

If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner:

• privacy.org.nz
• 0800 803 909
• enquiries@privacy.org.nz

12. Changes to this policy

We may update this policy from time to time. The current version is always on this page, with the date it was last updated. Where changes are significant, we will let subscribers and account holders know by email.