CardCraft Privacy Policy

Last Updated: 14 October 2025

1. Introduction

This Privacy Policy explains how CardCraft NZ, operated by Legend Incorporation Limited (“we”, “us”, “our”), collects, uses, and protects your personal information when you visit our website or use our services.

By using our website, you agree to the collection and use of information in accordance with this policy.

2. Information We Do Not Collect

Your financial security is central to our design. We do not collect, store, or have access to:

  • Credit or debit card numbers
  • Bank account information
  • Card verification values (CVV/CVC)
  • Expiry dates or PINs
  • Any financial transaction data linked to your payment cards

We never ask for your online banking or card login details.

3. Information We Do Collect

To process your order and provide our services, we collect only the minimum information necessary:

Personal Information:

  • Your name and contact details (email, phone number, and shipping address)
  • Your card design preferences and customization details
  • Payment details (processed securely by trusted third-party payment processors — we do not store card information ourselves)

Technical Information:

  • IP address and browser type
  • Device details and website interaction data (via cookies or similar technologies)

4. How We Use Your Information

We use your information solely to:

  • Process and fulfill your orders
  • Communicate with you about your order status or support requests
  • Ship your customized metal cards
  • Improve our website, services, and customer experience
  • Comply with New Zealand laws and tax obligations

We do not use your information for profiling or unrelated marketing.

5. Information Sharing and Disclosure

We never sell, rent, or trade your personal information. We share data only when necessary with:

  • Service Providers: Partners who handle payment processing, shipping, and website hosting.
  • Legal Requirements: When disclosure is required by law or necessary to protect our rights, property, or safety.
  • Business Transfers: If CardCraft undergoes a merger or sale, your information may transfer under the same privacy protections.

All service providers are contractually required to protect your data and use it only for their specific purpose.

6. Data Security

We take data protection seriously. Our safeguards include:

  • Secure Socket Layer (SSL) encryption during data transmission
  • Secure data storage with limited internal access
  • Regular system updates and security audits
  • Staff training on data privacy practices

While we use strong security measures, no online service can guarantee complete security.

7. Data Retention

We keep your personal data only as long as needed to:

  • Complete your orders and provide support
  • Comply with New Zealand legal and accounting obligations (financial records are retained for at least 7 years)
  • Resolve disputes and enforce agreements

8. Your Rights Under the New Zealand Privacy Act 2020

You have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate or outdated data
  • Request deletion of your data (subject to legal requirements)
  • Opt out of receiving marketing communications
  • Make a complaint to the Privacy Commissioner if you believe your rights are breached

Requests can be made via our contact details below.

9. International Data Transfers

We are based in New Zealand, but some service providers we use may be located overseas. When your data is transferred internationally, we ensure appropriate legal and contractual safeguards are in place.

10. Cookies and Tracking Technologies

We use cookies to:

  • Improve website functionality and user experience
  • Analyse traffic and usage patterns
  • Remember preferences and order history

You can disable cookies through your browser settings, but doing so may affect website functionality.

11. Children’s Privacy

Our services are not intended for anyone under 18. We do not knowingly collect information from children. If such data is inadvertently collected, we will delete it immediately.

12. Changes to This Policy

We may update this Privacy Policy periodically to reflect service changes or legal updates. The updated version will always be available on our website, with the date clearly shown. Continued use of our services after updates means you accept the revised policy.

13. Contact Us

If you have any questions or concerns about this Privacy Policy, or if you wish to exercise your privacy rights, please contact us:

CardCraft
info@cardcraft.co.nz

14. Making a Complaint

If you are not satisfied with how we handle your data, you can contact the
Office of the Privacy Commissioner:
PO Box 10-094
Wellington 6143
New Zealand
Phone: 0800 803 909
Website: www.privacy.org.nz

Acknowledgement

By using our services, you confirm that you have read, understood, and agree to this Privacy Policy and consent to the collection, use, and disclosure of your information as described.