Privacy Policy

Last Updated: February 2026

Introduction

Vivopolish ("we", "us", "our") is committed to protecting your privacy in accordance with New Zealand's Privacy Act 2020. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website located in Auckland, New Zealand, or engage our handmade furniture services.

We operate as a New Zealand-based business and comply with all applicable New Zealand privacy legislation, including the Privacy Act 2020 and the Unsolicited Electronic Messages Act 2007.

Information We Collect

We may collect personal information about you in several ways when you interact with our Auckland-based furniture workshop:

  • Contact Information: Name, email address, phone number, postal address, and billing details when you contact us or place an order
  • Project Details: Information about your furniture requirements, design preferences, room dimensions, and delivery specifications
  • Website Usage: Information about your device, browser type, IP address, pages visited, time spent on pages, and referring website addresses
  • Communications: Records of correspondence, including emails, phone calls, and in-person consultations at our Onehunga studio
  • Payment Information: Bank account details, credit card information (processed securely through New Zealand payment providers), and transaction history
  • Photographs: Images of completed projects, which may be used with your consent for our portfolio and marketing materials

How We Use Your Information

We use the personal information we collect for the following purposes:

  • Service Delivery: To respond to enquiries, provide design consultations, create custom furniture commissions, and arrange delivery throughout New Zealand
  • Communication: To send project updates, delivery notifications, invoices, and respond to your requests
  • Business Operations: To process payments, manage orders, maintain customer records, and comply with New Zealand tax and business regulations
  • Marketing: To send you information about our services, new collections, and workshop events (only with your consent, in compliance with the Unsolicited Electronic Messages Act 2007)
  • Website Improvement: To analyse website usage patterns, improve user experience, and optimise our online presence
  • Legal Compliance: To meet our obligations under New Zealand law, including GST reporting, employment law, and health and safety regulations

Legal Basis for Processing

Under New Zealand privacy law, we process your personal information based on:

  • Your consent (which you may withdraw at any time)
  • Performance of a contract (to fulfil furniture orders and provide services)
  • Compliance with legal obligations (tax, employment, and business law requirements)
  • Legitimate business interests (improving services, preventing fraud, ensuring website security)

Information Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties. We may share your information only in the following circumstances:

  • Service Providers: With trusted New Zealand-based contractors who assist with delivery, payment processing, website hosting, and IT services, all bound by confidentiality agreements
  • Legal Requirements: When required by New Zealand law, court orders, or government agencies (e.g., Inland Revenue, Commerce Commission)
  • Business Transfers: In the event of a merger, acquisition, or sale of assets, with appropriate notice to customers
  • Protection of Rights: To protect our rights, property, or safety, or that of our customers, in accordance with New Zealand law

We ensure all third parties handling your information comply with New Zealand privacy standards and use your data only for specified purposes.

Data Security

We implement comprehensive technical and organisational security measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction:

  • Encrypted data transmission (SSL/TLS) for all online transactions
  • Secure storage systems with restricted access controls
  • Regular security audits and updates to our systems
  • Staff training on privacy and data protection
  • Physical security measures at our Onehunga workshop

While we strive to protect your information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but commit to promptly addressing any security breaches in accordance with New Zealand privacy law.

Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this policy or as required by New Zealand law:

  • Customer Records: Retained for 7 years after the last transaction (as required by Inland Revenue for GST and tax purposes)
  • Marketing Communications: Retained until you unsubscribe or request deletion
  • Website Analytics: Aggregated, anonymised data may be retained for longer periods for statistical analysis
  • Legal Disputes: Information may be retained longer if required for legal proceedings or regulatory investigations

When information is no longer needed, we securely delete or anonymise it in accordance with New Zealand privacy standards.

Your Rights Under New Zealand Privacy Law

Under the Privacy Act 2020, you have the following rights regarding your personal information:

  • Right of Access: Request access to personal information we hold about you
  • Right to Correction: Request correction of inaccurate, incomplete, or misleading information
  • Right to Object: Object to processing of your information for direct marketing purposes
  • Right to Complain: Lodge a complaint with the Office of the Privacy Commissioner if you believe we have breached your privacy rights
  • Right to Withdraw Consent: Withdraw consent for processing where consent is the legal basis

To exercise these rights, please contact us using the details provided below. We will respond within 20 working days as required by New Zealand law.

International Data Transfers

As a New Zealand-based business, we primarily store and process your information within New Zealand. If we need to transfer information overseas (e.g., for cloud storage or payment processing), we ensure appropriate safeguards are in place to protect your information in accordance with New Zealand privacy standards.

Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately.

Marketing Communications

In compliance with the Unsolicited Electronic Messages Act 2007, we only send marketing communications with your consent. You can opt-out at any time by:

  • Clicking the unsubscribe link in any email
  • Contacting us directly at the details below
  • Updating your preferences through our website

Complaints Process

If you have concerns about how we handle your personal information, please contact us first. If you are not satisfied with our response, you may lodge a complaint with:

Office of the Privacy Commissioner
PO Box 10094, Wellington 6143, New Zealand
Phone: 0800 803 909
Website: www.privacy.org.nz

Contact Us

For privacy-related enquiries, access requests, or to exercise your rights, please contact our Privacy Officer:

Vivopolish
Privacy Officer
268 Neilson Street, Onehunga, Auckland 1061, New Zealand
Phone: +64 9 636 6068
Email: privacy@vivopolish.world

We aim to respond to all privacy enquiries within 20 working days as required by the Privacy Act 2020.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational, legal, or regulatory reasons. Material changes will be notified by:

  • Posting the updated policy on this page with a new "Last Updated" date
  • Email notification to customers where significant changes affect how we use their information
  • Prominent notice on our website homepage for substantial changes

We encourage you to review this policy periodically to stay informed about how we protect your information. Your continued use of our services after changes are posted constitutes acceptance of the updated policy.

Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of New Zealand. Any disputes relating to privacy matters will be subject to the exclusive jurisdiction of the New Zealand courts.