Privacy Policy

The Mask Shop – www.themaskshop.co.nz

Last updated: 10th March 2026

1. Introduction

The Mask Shop is committed to protecting your privacy and handling your personal information in a fair and lawful manner. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit our website or make a purchase from us.

We comply with the Privacy Act 2020 (New Zealand) and the 13 Information Privacy Principles outlined in that Act -3-7.

By using our website and providing us with your personal information, you consent to the collection, use, and disclosure of that information in accordance with this Privacy Policy.

2. What Personal Information We Collect

We may collect the following types of personal information -2-8:

• Identity and contact details – your name, email address, phone number, and delivery address
• Transaction information – order details, purchase history, and invoices
• Payment information – we do not store credit or debit card details. If you pay by bank transfer, we may record your bank account name and payment reference
• Technical information – IP address, browser type, operating system, and device information when you visit our website -4
• Communications – any messages, emails, or enquiries you send to us
• Website usage data – information about how you use our website, collected through cookies and similar technologies

3. How We Collect Your Information

We collect personal information in the following ways -8:

• Directly from you – when you place an order, create an account, sign up for our newsletter, complete a contact form, or communicate with us via email
• Automatically – through our website using cookies and analytics tools when you browse or interact with our site -4
• From third parties – such as payment processors or couriers, but only to the extent necessary to fulfil your order

4. Why We Collect Your Information (Purposes)

We collect and use your personal information for the following purposes -8:

• To process and fulfil your orders, including confirming payments and arranging delivery
• To communicate with you about your order, including order confirmations, dispatch notifications, and any issues with delivery
• To respond to your enquiries and provide customer support
• To send you service-related communications (e.g., order updates)
• To improve our website, products, and services through analytics
• To comply with legal obligations, including record-keeping requirements
• To send marketing communications only where you have given us your consent (you may opt out at any time) -10

5. Marketing Communications

We will only send you marketing emails or newsletters if you have explicitly opted in to receive them -2-10.

Every marketing email we send will include a clear and simple way to unsubscribe (e.g., an "unsubscribe" link). You can also contact us at any time to ask us to stop sending marketing materials.

We do not share your personal information with third parties for their own marketing purposes without your consent.

6. Who We Share Your Information With

We may share your personal information with third parties only to the extent necessary to operate our business and fulfil your orders -8. These parties include:

• Couriers and delivery services – to deliver your order to you
• Payment processors – to process your payments securely
• IT service providers – including website hosting, email services, and analytics tools (e.g., Google Analytics)
• Professional advisers – such as accountants or lawyers, where necessary
• Government agencies – where required by law (e.g., for tax or law enforcement purposes)

Where we use third-party service providers, we take reasonable steps to ensure they handle your personal information in a manner consistent with the Privacy Act 2020.

7. Overseas Disclosures

Some of the third-party service providers we use may be located outside New Zealand or store data overseas (e.g., cloud-based platforms) -7-9.

Where we disclose personal information to an overseas recipient, we take reasonable steps to ensure the recipient agrees to protect your information to a standard comparable to New Zealand's Privacy Act 2020. However, by providing your information, you acknowledge that overseas recipients may be subject to foreign laws that differ from New Zealand's privacy laws -3-9.

8. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to improve your browsing experience and analyse website traffic -4.

What are cookies? Cookies are small text files stored on your device when you visit a website.

How we use cookies:

• To remember your preferences and settings
• To understand how you use our website (e.g., which pages you visit)
• To improve website performance and functionality

Types of cookies we may use:

• Essential cookies – necessary for the website to function (e.g., to process your order)
• Analytics cookies – to help us understand how visitors interact with our site (e.g., Google Analytics)

Your choices: You can control cookies through your browser settings. However, disabling certain cookies may affect your ability to use some features of our website.

For more information about cookies and how to manage them, visit www.allaboutcookies.org.

9. How We Store and Protect Your Information

We take reasonable steps to protect your personal information from loss, unauthorised access, misuse, disclosure, or alteration -3-5. These steps include:

• Secure servers and encrypted connections (SSL) for data transmission
• Access controls – only authorised personnel can access personal information
• Regular review of our security practices

While we strive to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

10. How Long We Keep Your Information

We will only retain your personal information for as long as necessary to fulfil the purposes for which it was collected, including for legal, accounting, or reporting requirements -3-8.

When your information is no longer required, we will take reasonable steps to securely delete or de-identify it.

11. Your Rights: Access and Correction

You have the right to -3-7:

• Request access to the personal information we hold about you
• Request correction of any personal information that is inaccurate or out of date

If you would like to request access to or correction of your information, please contact us using the details below.

We may need to verify your identity before processing your request. We will respond to your request as soon as reasonably practicable and within the timeframes required by law.

In some circumstances, we may be unable to provide access (e.g., where disclosure would breach another person's privacy). If this occurs, we will explain why.

12. Privacy Complaints

If you have concerns about how we have handled your personal information, please contact us first – we will do our best to resolve your issue -2-8.

If you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Privacy Commissioner (New Zealand) -7:

Office of the Privacy Commissioner

• Website: www.privacy.org.nz
• Phone: 0800 803 909
• Email: enquiries@privacy.org.nz

13. Data Breaches

In the event of a privacy breach that is likely to cause serious harm to affected individuals, we will notify the Office of the Privacy Commissioner and affected individuals as required by the Privacy Act 2020 -7-9.

14. Third-Party Links

Our website may contain links to other websites. Please note that we are not responsible for the privacy practices of those third-party sites. We encourage you to read the privacy policies of any website you visit.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any updates will be posted on this page with an updated "Last updated" date -1.

We encourage you to review this policy periodically.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please contact us:

The Mask Shop
Email: hello@themaskshop.co.nz
Website: www.themaskshop.co.nz