Privacy Policy

MindKits Ltd (“MindKits”, “we”, “us”, “our”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our website and services, in accordance with the New Zealand Privacy Act 2020.

By using our website, you agree to the collection and use of information in line with this policy.

Information we collect

We collect the following types of personal information when you interact with our website or services:

• Name
• Email address
• Physical/shipping address
• Phone number
• Technical information collected via cookies and similar technologies (such as IP address, browser type, pages visited, and usage patterns)

This information is collected when you:

• Place an order or engage with us about products or services
• Fill out contact forms or request support
• Sign up to our newsletter or marketing communications
• Browse and interact with our website (including via cookies and analytics tools)

How we collect your information

We collect personal information in the following ways:

• Directly from you when you enter details into forms on our website (such as “Contact Us” or newsletter sign-up forms)
• When you communicate with us by email, phone, or other channels
• Automatically through your use of our website, via cookies and similar technologies

Our website uses Google Analytics to help us understand how visitors use the site and to improve our content and user experience. Google Analytics may collect information such as your IP address, browser type, pages visited, and time spent on the site.

How we use your information

We use your personal information for purposes including:

• Processing and fulfilling your orders
• Arranging delivery of products to you
• Providing customer service and responding to enquiries
• Managing your newsletter or marketing email subscriptions
• Improving and optimising our website, products, and services
• Running analytics and performance monitoring (for example, through Google Analytics)
• Running marketing and advertising campaigns, including retargeting through platforms such as Google
• Complying with legal, tax, and business record-keeping requirements

We only use your personal information where it is necessary for our business operations, to perform a contract with you, to comply with our legal obligations, or where you have given consent (for example, for certain marketing communications).

Cookies and tracking technologies

Our website uses cookies and similar technologies to:

• Enable core site functionality (such as remembering items in your cart)
• Improve your browsing experience and site performance
• Analyse website traffic and usage patterns
• Support marketing and retargeting activities (including through Google’s advertising services)

You can usually configure your browser to refuse some or all cookies or to alert you when websites set or access cookies. If you disable or refuse cookies, some parts of our website may not function properly.

Marketing communications

If you sign up to receive marketing communications, or where it is otherwise permitted, we may use your email address and other contact details to send you:

• Newsletters
• Product updates and promotions
• Information about events, offers, or services

We use Klaviyo as our email marketing platform to manage and send these communications. You can opt out of marketing emails at any time by clicking the “unsubscribe” link in any email you receive or by contacting us directly.

We do not sell or rent mailing list personal information to third parties.

Retargeting and online advertising

We may use retargeting and online advertising services (such as Google Ads) to show you relevant ads based on your interactions with our website. These services typically rely on cookies or similar technologies to recognise your device and deliver tailored advertising.

You can manage your preferences for personalised advertising through your browser settings or via tools provided by advertising platforms.

Payment processing

Online card payments made through our website are processed by Stripe. When you make a payment, certain information (such as your name, email address, and payment details) is transmitted securely to Stripe so they can process the transaction.

Stripe processes your payment information in accordance with its own privacy and security practices. MindKits does not store your full card details on its own systems.

Website hosting and service providers

Our website is hosted on Cart.com, and we use other trusted service providers to help operate our business and website. These service providers may handle or store personal information on our behalf, including for:

• Website hosting and infrastructure
• Payment processing (Stripe)
• Email marketing and communications (Klaviyo)
• Analytics and advertising (Google services)

We take reasonable steps to ensure that these service providers protect your information and only use it for the purposes for which it was provided.

Sharing your information

We may share your personal information with:

• Courier and logistics companies for the purpose of delivering your orders
• Payment processors such as Stripe to complete transactions
• Email marketing and communication tools such as Klaviyo
• Website hosting and analytics providers such as Cart.com and Google Analytics
• Professional advisers (such as accountants or legal advisers) where reasonably necessary
• Government agencies or regulators where required by law or to comply with legal processes

We do not sell your personal information to third parties. Any sharing of personal information is limited to what is reasonably necessary to provide our services, run our business, or meet legal obligations.

International transfers

Some of our service providers may be located outside New Zealand, which means your personal information may be stored or processed in other countries. Where this occurs, we take reasonable steps to ensure that any overseas recipient will protect your personal information in a way that is comparable to the protections provided under the New Zealand Privacy Act 2020.

Data retention

We retain personal information for as long as it is needed for the purposes for which it was collected, or as required by law. In practice, this means we may keep order and account-related information for an extended period (for example, for tax and business record-keeping).

If you request deletion of your data, we will remove or de-identify information where reasonably practicable, subject to any legal or operational requirements to retain certain records.

Your rights

Under the New Zealand Privacy Act 2020, you have certain rights in relation to your personal information, including the right to:

• Request access to the personal information we hold about you
• Request correction of any personal information that is inaccurate, incomplete, or out of date
• Request deletion of your personal information, subject to legal and business record-keeping requirements

To exercise these rights, or to ask a question about how your information is handled, please contact us using the details below. We may need to verify your identity before fulfilling certain requests.

Data security and breach management

We take reasonable steps to protect your personal information from loss, unauthorised access, use, modification, or disclosure. This includes using appropriate technical and organisational measures and working with reputable service providers.

If a privacy or data breach occurs that is likely to cause serious harm, we will follow our data breach response process, which may include notifying affected individuals and the Office of the Privacy Commissioner, as required under the New Zealand Privacy Act 2020.

Third-party websites

Our website may contain links to third-party sites that are not operated by us. This Privacy Policy does not cover those sites, and we are not responsible for the privacy practices or content of third-party websites. You are encouraged to review the privacy policies of any third-party sites you visit.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other reasons. The updated version will be posted on our website with an updated “last updated” date. Your continued use of our website after any changes are made will constitute your acceptance of the updated policy.

Contact us

If you have any questions about this Privacy Policy, our privacy practices, or if you would like to make a request regarding your personal information, please contact:

MindKits Ltd
16 Aileron Rise
Dairy Flat
Auckland 0793
New Zealand

Email: support@mindkits.co.nz