Privacy policy
PRIVACY POLICY
1. Introduction
1.1 White Wisteria Limited trading as I See Bear ("I See Bear", "we", "us" or "our") is committed to protecting the privacy and personal information of our customers and visitors to our website.
1.2 This Privacy Policy explains how we collect, use, store, disclose and protect personal information when you visit our website, create an account, purchase products, communicate with us or otherwise use our services.
1.3 We collect and handle personal information in accordance with the Privacy Act 2020 and other applicable privacy laws based in New Zealand.
1.4 By using our website, you acknowledge that you have been provided with access to this Privacy Policy.
2. Personal information we collect
2.1 We may collect the following personal information:
(a) your full name;
(b) email address and telephone number;
(c) billing and delivery addresses;
(d) order details, purchase history and transaction records;
(e) payment-related information, including payment status and transaction references;
(f) account information, where you create an account;
(g) communications, enquiries, complaints, feedback and product reviews;
(h) information about your use of our website, including IP address, browser type, device information and browsing activity; and
(i) any other information you voluntarily provide to us in connection with an order or enquiry.
2.2 Payments are processed through Shopify and/or third-party payment providers. We do not ordinarily receive or store full payment card numbers. Payment providers may collect and process payment information in accordance with their own privacy policies and applicable legal requirements. You confirm you accept that we are not responsible for the information obtained, stored or used by payment providers.
2.3 We will only collect personal information that is reasonably necessary for a lawful purpose connected with our business.
3. How we collect personal information
3.1 We generally collect personal information directly from you when you:
(a) browse or use our website;
(b) place an order;
(c) create or update an account;
(d) contact us by email or through the website;
(e) subscribe to marketing communications;
(f) submit a review or feedback; or
(g) otherwise interact with our business.
3.2 We may also receive personal information from third parties, including Shopify, payment providers, delivery companies and other service providers, where this is necessary to process orders, prevent fraud or operate our business.
3.3 Where we collect personal information about you from another person or organisation, we will comply with any applicable notification requirements under the Privacy Act 2020, including Information Privacy Principle 3A.
4. Why we collect and use personal information
4.1 We collect and use personal information for the following purposes:
(a) processing and fulfilling customer orders;
(b) arranging payment and issuing invoices or receipts;
(c) sourcing products from suppliers;
(d) arranging delivery and tracking shipments;
(e) communicating with customers about orders, delays, availability and delivery;
(f) responding to enquiries, complaints, returns and warranty claims;
(g) managing customer accounts;
(h) maintaining and improving our website and customer services;
(i) detecting and preventing fraud, unauthorised transactions and other unlawful activity;
(j) maintaining business and accounting records;
(k) complying with legal and regulatory obligations; and
(l) sending promotional communications where permitted by law.
4.2 We will not use personal information for an unrelated purpose unless authorised by you or otherwise permitted or required by law.
5. Information required to process orders
5.1 Certain personal information is necessary for us to process and fulfil your order, including your name, contact details, delivery address and payment information.
5.2 Providing personal information is generally voluntary. However, if you do not provide the information reasonably required to process your order, we may be unable to accept or fulfil your purchase.
5.3 We may also request additional information where reasonably necessary to verify an order, prevent fraud or comply with applicable law.
6. Disclosure of personal information
6.1 We may disclose personal information to third parties where reasonably necessary for the purposes described in this Privacy Policy or where otherwise permitted or required by law.
6.2 These third parties may include:
(a) Shopify, which provides our e-commerce platform;
(b) payment processors and financial institutions;
(c) courier, freight and delivery providers;
(d) suppliers and manufacturers, where information is reasonably required to fulfil an order;
(e) website hosting, technical support and information technology providers;
(f) professional advisers, including accountants and lawyers;
(g) marketing and analytics providers, where used and permitted by law; and
(h) government agencies, regulators or law enforcement authorities where disclosure is required or authorised by law.
6.3 We will only disclose personal information to the extent reasonably necessary for the relevant purpose and in accordance with applicable privacy law.
6.4 We do not sell customer personal information to third parties for their independent marketing purposes.
6.5 Where a third party processes personal information on our behalf, we will take reasonable steps to ensure that appropriate privacy and security protections are in place.
7. Overseas processing and disclosure
7.1 Some of our technology, payment, marketing or other service providers may operate or store information outside New Zealand.
7.2 Personal information may therefore be transferred to, stored in or processed in countries outside New Zealand.
7.3 Where we disclose personal information to an overseas person or organisation, we will comply with Information Privacy Principle 12 of the Privacy Act 2020 where applicable.
7.4 We remain responsible for complying with our applicable obligations under the Privacy Act 2020 when using overseas service providers.
8. Shopify and payment services
8.1 Our online store is hosted by Shopify, which provides the e-commerce platform used to operate our website and process orders.
8.2 Shopify and its service providers may collect and process information about your use of the website and purchases, including information necessary for checkout, payment processing, fraud prevention and website functionality.
8.3 Shopify's processing of personal information is subject to its applicable contractual arrangements and privacy practices.
8.4 You can review Shopify's privacy information at:
https://www.shopify.com/legal/privacy
8.5 Where third-party payment providers are used, their processing of payment information may also be subject to their own privacy policies.
9. Cookies and website analytics
9.1 Our website may use cookies and similar technologies to:
(a) enable essential website functions;
(b) remember shopping cart contents and preferences;
(c) maintain website security;
(d) understand website traffic and usage;
(e) improve website performance and customer experience; and
(f) support advertising and marketing activities, where applicable.
9.2 Cookies are small files stored on your device when you visit a website.
9.3 You may be able to manage or disable cookies through your browser settings or any cookie preference controls made available on our website.
9.4 Disabling certain cookies may affect the functionality of the website, including shopping cart and checkout features.
9.5 Where cookies or tracking technologies collect personal information, we will handle that information in accordance with this Privacy Policy and applicable law.
10. Marketing communications
10.1 We may send you information about new products, special offers, promotions and other business updates where you have consented or where otherwise permitted by law.
10.2 We will comply with the Unsolicited Electronic Messages Act 2007 when sending commercial electronic messages.
10.3 You may unsubscribe from marketing communications at any time by using the unsubscribe link in an email or contacting us directly.
10.4 Unsubscribing from marketing communications will not prevent us from sending communications reasonably necessary to process or fulfil your orders or manage our contractual relationship with you.
10.5 We will not disclose your personal information to unrelated third parties for their own direct marketing purposes without appropriate authorisation or another lawful basis.
11. Retention of personal information
11.1 We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, or as required or permitted by law.
11.2 This may include retaining transaction and accounting records to comply with applicable tax and record-keeping obligations.
11.3 We may also retain information where reasonably necessary to resolve disputes, manage warranty or consumer claims, prevent fraud or establish or defend legal rights.
12. Changes to this Privacy Policy
12.1 We may update this Privacy Policy from time to time to reflect changes in our business operations, technology, service providers or legal obligations.
12.2 The current version will be published on our website with the date of the latest update.
12.3 Where required by law, we will provide additional notice of material changes or obtain any necessary authorisation.