Privacy Policy
1. Data Controller
The operator of shopbabyfactory.com is responsible for processing your personal data in compliance with the New Zealand Privacy Act 2020.
2. Information We Collect
We process:
- Identity Data (name, address, contact details)
- Transaction Data (order history, payment information)
- Technical Data (IP address, device information, cookies)
- Children’s Data (only with parental consent for gift purchases)
3. Purpose of Processing
Your data helps us:
✓ Process orders and manage deliveries
✓ Provide customer support
✓ Improve our services (analytics)
✓ Send marketing communications (with consent)
4. Legal Basis for Processing
Under NZ law, we rely on:
• Your consent (for marketing)
• Contractual necessity (order fulfillment)
• Legitimate business interests
5. Data Sharing
We only share with:
• Payment processors (secure, PCI-compliant)
• Delivery partners (necessary information only)
• IT service providers (under strict contracts)
6. International Transfers
Data may be transferred to:
- Australia (under TTSA agreement)
- Other countries with adequate protections
7. Your Rights
You can:
→ Request access to your data
→ Correct inaccurate information
→ Opt-out of marketing
→ Request deletion (where applicable)
8. Data Security
We implement:
• SSL encryption for all transactions
• Regular security audits
• Restricted staff access
9. Retention Periods
| Data Type | Retention Period |
|---|---|
| Orders | 7 years (tax requirements) |
| Accounts | Until deletion request |
| Marketing data | Until consent withdrawal |
10. Cookies
We use:
• Essential cookies (shopping cart)
• Analytics cookies (anonymous)
Manage preferences via browser settings.
11. Policy Updates
Changes will be posted here with effective dates.