3.1 Panamex New Zealand Limited trading as Neopol collects, uses, stores, discloses and protects personal information in accordance with the Privacy Act 2020.
3.2 This Privacy Policy applies when customers use Neopol.co.nz, create an account, place an order, subscribe to marketing, contact customer support, enter a promotion, make a complaint or otherwise interact with Neopol.
3.3 Privacy Officer: David Brown. Privacy contact: reception@panamex.biz.
3.4 Panamex New Zealand Limited will respond to access and correction requests as soon as reasonably practicable and, in any event, within 20 working days unless the Privacy Act 2020 permits an extension.
3.5 Personal information collected may include name, email address, phone number, billing address, delivery address, account details, login credentials, saved addresses, order history, payment status, transaction reference, delivery details, returns and refund information, chargeback information, marketing consent, unsubscribe preferences, promotion entries, customer support records, complaint details, photographs, product-use evidence, IP address, device information, browser information, cookies, analytics data, fraud-prevention data and system logs.
3.6 Payment card details are processed by payment gateways and are not intended to be stored by Panamex New Zealand Limited except for transaction references, payment status and records needed for order, accounting, fraud and dispute purposes.
3.7 Personal information is used to operate the Shopify ecommerce store, process orders, take payment, dispatch products, manage customer accounts, provide support, investigate courier issues, assess product complaints, process returns and refunds, prevent fraud, manage chargebacks, send service communications, send marketing where permitted, run promotions, improve the website, maintain records, comply with law, protect rights and respond to regulators, insurers, advisers or enforcement agencies. If a customer does not provide this personal information, Panamex New Zealand Limited may not be able to transact with the customer or otherwise carry out these functions.
3.8 Commercial electronic messages will be sent only where permitted by the Unsolicited Electronic Messages Act 2007, including sender identification, consent records and functional unsubscribe facilities.
3.9 Customers consent to receiving communications electronically in connection with orders, deliveries, returns, refunds, customer accounts, security matters, product safety matters, recalls and other matters relating to products or services supplied by Panamex New Zealand Limited.
3.10 Electronic communications may be sent by email, SMS, website notice, account notification or other electronic means.
3.11 A customer is responsible for ensuring contact details provided to Panamex New Zealand Limited remain accurate and current.
3.12 Customers may unsubscribe from marketing at any time. Service communications may still be sent where needed for orders, accounts, safety, recalls or legal compliance.
3.13 Personal information may be disclosed to Shopify, payment gateways, fraud-prevention tools, email marketing platforms, analytics platforms, advertising platforms, cookie and tracking providers, couriers, fulfilment providers, customer support tools, IT providers, professional advisers, insurers, regulators and enforcement agencies.
3.14 We note that where information is transferred offshore for processing, the information would still be treated as being held by Panamex, with such offshore processors being considered Panamex’s agent. However, if an offshore provider is going to use the information for its own purposes, rather than merely processing on Panamex’s behalf, then Panamex would need to ensure that the offshore transfer is permitted under Information Privacy Principle 12.
3.15 Overseas processing and contractual safeguards are confirmed on a generic service-provider basis. Panamex New Zealand Limited will rely on applicable provider terms, privacy terms, data processing terms or other reasonable safeguards where personal information is stored or accessed outside New Zealand.
3.16 Panamex New Zealand Limited takes reasonable security measures to protect personal information from loss, unauthorised access, misuse, disclosure, alteration and destruction.
3.17 Personal information is retained for as long as reasonably required for ecommerce operations, customer support, warranties, returns, accounting, tax, fraud prevention, insurance, legal compliance, product safety, recall, dispute management and record keeping.
3.18 When information is no longer required, Panamex New Zealand Limited will take reasonable steps to delete, destroy or de-identify it.
3.19 If a privacy breach occurs, Panamex New Zealand Limited will assess the breach and notify the Privacy Commissioner and affected individuals where required by the Privacy Act 2020.