Information Security and Data Privacy Policy

1. Introduction

Your information security and data privacy are paramount to us. This policy details our commitments and practices for securing your data and maintaining your privacy when you use our services.

2. Information Collection

We collect personal information that you provide when making purchases, registering an account, or engaging with our services. This includes:

• Personal identification details (e.g., name, email address, contact number)
• Your Company information (e.g.name, address, contact number)
• Information automatically collected by our systems, such as IP addresses and browsing behavior, through cookies and similar technologies.

Our approach is to minimise the amount of information we collect and store, being that which is necessary for your order transaction and the use of our services.

3. Use of Information

Your information is used to:

• Process your transactions and manage your orders.
• Improve our website functionality and customer service.
• Communicate important notices and updates, and provide you with information on products or promotions. This is based on Opt-in Opt-Out consent management.
• Conduct internal audits, data analysis, and research to enhance our services.

4. Information Security

We are committed to protecting the information you share with us by implementing robust security measures, including:

• Encryption technologies to safeguard your data during transmission.
• Secure network architectures that protect against unauthorised access or attacks.
• Regular updates and patches to our systems to ensure the highest level of security.
• Strict access controls and authentication measures to restrict data access to authorised personnel only.
• All our systems are cloud based and utilise the security measures implemented by the datacenter providers eg Microsoft and Amazon Web Services.

5. Sharing of Information

We do not sell or rent your personal information to third parties. Information may be shared with:

• Third-party service providers who perform functions on our behalf (e.g., payment processing, delivery logistics).
• Law enforcement or regulatory agencies, when required by law or to protect our rights or safety.

6. Data Privacy

Consistent with the Privacy Act 2020, we ensure that your personal data is:

• Collected for specified, lawful purposes.
• Processed in a manner that ensures appropriate security.
• Kept accurate and up-to-date as necessary.
• Not kept longer than needed for the intended purposes.

7. Your Rights

You have the right to access, correct, and request the deletion of your personal information. If you wish to exercise these rights, please contact us using the contact information provided below.

8. Changes to This Policy

This policy may be updated periodically to reflect changes in our practices or regulatory changes. We will notify you of any significant changes through our website or through direct communication.

9. Contact Information

If you have questions or concerns about our information security practices, please contact us at info@promotional.co.nz or call 04 297 9444