Privacy policy

Overview

This Privacy Policy describes how Thanks For The Memories ("we", "us", or "our") collects, uses, and protects your personal information when you use our website and purchase our products. We are committed to complying with the New Zealand Privacy Act 2020.

By using our service you agree to the collection and use of information as described in this policy.

Definitions

• Company refers to Thanks For The Memories, based in Tauranga, New Zealand.
• Personal Data is any information that relates to an identified or identifiable individual.
• Service refers to our website at thanksforthememories.co.nz.
• Service Provider means any third-party company or individual who processes data on our behalf.
• You means the individual accessing or using our service.

What personal data we collect

When you use our service we may ask you to provide certain personal information, including:

• First name and last name
• Email address
• Phone number
• Delivery address (street, city, postcode, region)
• Payment information (processed securely by Stripe — we do not store card details)
• Photos you upload for printing on your magnets

How we use your personal data

We use your personal data to:

• Process and fulfil your orders
• Contact you about your order status, dispatch, and delivery
• Manage your account and order history
• Respond to your enquiries and support requests
• Send you updates about our products or offers where you have opted in
• Comply with our legal obligations under New Zealand law

Third-party service providers

We use the following trusted third-party services to operate our business:

• Supabase — secure database and file storage for your account and uploaded photos
• Stripe — secure payment processing. Stripe is PCI-DSS compliant and we never see or store your full card details
• Cloudflare — website hosting and content delivery, including simple visitor statistics that don't use cookies
• Google — address suggestions at checkout. The address you type is sent to Google to find matching New Zealand addresses
• Google Analytics — helps us understand how people find and use our website, such as which pages and products are viewed and whether checkouts are completed. It uses cookies and collects details like your approximate location, device and browser. We don't send it your name, email address, delivery address or photos
• Microsoft 365 — sending order confirmations, account emails, and replies to your enquiries

Each of these providers has their own privacy policy and we require them to handle your data securely and only for the purposes we specify.

Cookies and analytics

Our website uses a small number of cookies. Some are needed for the site to work, such as keeping you signed in and remembering your cart. Others come from Google Analytics and help us see how the site is used, so we can make it better.

You can block or delete cookies in your browser settings at any time, and the shop will still work. You can also stop Google Analytics collecting your visits by installing Google's opt-out browser add-on.

Data retention

We retain your personal data only for as long as necessary to fulfil the purposes set out in this policy, or as required by New Zealand law. Order records are typically retained for 7 years for tax and legal compliance purposes.

You may request deletion of your account and associated data at any time by emailing creative@thanksforthememories.co.nz. Note that we may be required to retain certain records for legal compliance.

Your rights under the Privacy Act 2020

Under the New Zealand Privacy Act 2020 you have the right to:

• Request access to the personal information we hold about you
• Request correction of any inaccurate personal information
• Ask us to delete your personal information (subject to legal retention requirements)
• Withdraw consent for us to use your data for marketing purposes at any time

To exercise any of these rights, email us at creative@thanksforthememories.co.nz.

Security

The security of your personal data is important to us. We use industry-standard security measures including encrypted connections (HTTPS), secure cloud storage, and access controls. However, no method of transmission over the internet is 100% secure and we cannot guarantee absolute security.

Links to other websites

Our site may contain links to other websites not operated by us. We strongly advise you to review the privacy policy of any site you visit. We have no control over and assume no responsibility for third-party sites or services.

Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy on this page. This policy was last updated on 25 September 2026.

If you have any questions about this Privacy Policy, please contact us at creative@thanksforthememories.co.nz.