Welcome to craftsparesco (accessible via www.craftsparesco.com). We respect your privacy and are committed to protecting your personal data. This Privacy Policy outlines how we collect, use, store, and safeguard your information when you visit our website or interact with our services, in compliance with the Privacy Act 2020 of New Zealand, the General Data Protection Regulation (GDPR) (EU) 2016/679, and applicable European data protection laws.

1. Data Controller Identification

For the purposes of applicable data protection legislation, the data controller responsible for your personal data collected via www.craftsparesco.com is craftsparesco, operating from New Zealand and serving customers across Europe.

  • Domain & Brand: www.craftsparesco.com / craftsparesco
  • Primary Contact Email: partner@craftsparesco.com
  • Operational Jurisdiction: New Zealand and the European Union

2. Information We Collect

We collect personal information that you voluntarily provide to us when placing an order, communicating with our support team, or browsing our website. This information may include:

  • Contact & Identity Information: Your full name, billing address, shipping address, email address, and telephone number.
  • Transaction & Payment Details: Details regarding the products purchased and order history. Note that financial transaction processing is handled securely by our primary payment processor, Stripe. We do not store full credit or debit card numbers on our servers; all payment card details are transmitted directly to and processed by Stripe in accordance with PCI-DSS compliance standards.
  • Technical & Usage Data: IP address, browser type, operating system, referral source, page views, and website navigation patterns collected through cookies and similar tracking technologies.

3. Legal Basis and Purpose of Processing

We process your personal data on lawful bases recognized under New Zealand and European data protection laws, specifically:

  • Contractual Necessity: To fulfill orders, process payments via Stripe, and deliver purchased items to your designated European address.
  • Legal Obligation: To comply with tax, accounting, and regulatory requirements mandated by New Zealand and European authorities.
  • Legitimate Interests: To improve our website functionality, safeguard our business against fraudulent transactions, and maintain effective customer communication.

4. Data Retention Periods

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements:

  • Transaction & Financial Records: In compliance with applicable tax and corporate legislation in New Zealand and the European Union, transaction records, invoices, and associated billing data are retained for a period of 7 years from the date of the transaction.
  • Customer Support Correspondence: Communications and inquiry records are retained for a period of 2 years following the closure of the inquiry to ensure continuity of service and resolve potential follow-up questions.
  • Account & Profile Information: If you maintain an active profile, your data is retained while your account remains active and for a maximum period of 3 years of inactivity, after which it is securely deleted or anonymized.
  • Technical & Analytics Logs: Web server logs and cookie data are retained for a maximum period of 12 months, after which they are purged or aggregated for statistical analysis.

5. International Data Transfers

As our operations are based in New Zealand and our customers are located in Europe, your personal data may be transferred across international borders. When we transfer personal data from the European Union to New Zealand or other jurisdictions, we ensure appropriate safeguards are implemented—such as Standard Contractual Clauses (SCCs) or reliance on adequacy decisions—to maintain a high standard of data protection equivalent to European standards.

6. Your Data Protection Rights

Depending on your place of residence, you are granted specific rights regarding your personal data under the GDPR and New Zealand Privacy Act 2020:

  • Right of Access: You have the right to request copies of your personal data held by us.
  • Right to Rectification: You can request the correction of inaccurate or incomplete personal data.
  • Right to Erasure: You may request the deletion of your personal data under specific statutory conditions.
  • Right to Restriction of Processing: You have the right to request that we restrict the processing of your personal data.
  • Right to Data Portability: You can request the transfer of your data to another organization or directly to you.
  • Right to Object: You have the right to object to our processing of your personal data based on legitimate interests.

To exercise any of these rights, please contact our administrative team directly via email at partner@craftsparesco.com.

7. Security Measures

We implement administrative, technical, and physical security controls to protect your personal data from unauthorized access, disclosure, alteration, or destruction. Payment processing is encrypted and managed via Stripe, ensuring that your sensitive financial credentials remain protected under industry-leading security protocols.

8. Changes to This Privacy Policy

We reserve the right to modify or update this Privacy Policy at any time to reflect changes in our legal obligations or operational practices. Any revisions will be published directly on this page with an updated revision date. We encourage you to review this policy periodically.

9. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact us at:

Type to search

Shopping cart

0
image/svg+xml

No products in the cart.

Continue Shopping