Policies
Privacy policy
Placeholder for legal review. This is a working structure, not legal advice. It is written for a simple, static shop that uses Stripe for payment and has no analytics or advertising scripts. If you add analytics, advertising, remarketing, a chat widget or an email platform with tracking, this policy has to change and you will most likely need a cookie consent banner as well. Have it reviewed against the Privacy Act 2020 before you go live.
1. The short version
We collect as little as possible. An email address to send you the files you bought, whatever you type into the contact form, and an email address if you join the newsletter. Card details are handled by Stripe and never reach this website. There is no advertising, no remarketing and no analytics script on this site.
2. Who is responsible
Verso is the agency responsible for the personal information described here, as that term is used in the Privacy Act 2020.
Placeholder: insert your registered business name, NZBN and a contact address. If you have appointed a privacy officer, name them and give their contact details.
3. What we collect
- When you buy something. Your name, email address and the details of what you bought, passed to us by Stripe. We also see the country of the card and the last four digits, which Stripe shows on the receipt. We do not receive or store your full card number.
- When you use the contact form. Your name, email address, the subject you chose, any order reference you enter and the content of your message.
- When you join the email list. Your email address, held by our email platform.
- Server logs. Our host, Cloudflare, records standard request information such as IP address, browser type and the page requested, as part of serving and protecting the site.
4. Why we collect it
- To deliver the files you paid for and to confirm your purchase.
- To answer your questions and provide support.
- To send the newsletter, if you asked for it.
- To keep records required for tax and accounting.
- To detect and prevent fraud and abuse of the site.
We do not sell personal information, and we do not share it for anyone else's marketing.
5. Payments
Payments are processed by Stripe. When you click a buy button you leave this website and complete the payment on Stripe's own page. Card details are entered there, handled by Stripe, and never pass through or get stored by this site.
Stripe processes your information under its own privacy policy, and it operates internationally, which means your information may be processed outside New Zealand.
6. Who else sees your information
Only the service providers we need to run the shop:
- Stripe, to take payment.
- Cloudflare, which hosts this website.
- Our form provider, which passes contact form submissions to our inbox. Placeholder: name the provider once you have connected one, for example Formspree.
- Our email platform, which stores newsletter subscribers. Placeholder: name the platform once you have connected one.
- Our email and file hosting, used to send your download instructions.
- Our accountant and, where the law requires it, government agencies.
Several of these providers operate overseas, so your information may be stored or processed outside New Zealand.
7. Cookies and tracking
This website does not set analytics, advertising or tracking cookies, and there is no consent banner because there is nothing to consent to. Cloudflare may set cookies that are strictly necessary for security and delivering the site.
Stripe sets its own cookies on its checkout pages, which are outside this site.
Note for the site owner: if you later add Google Analytics, Meta Pixel, a chat widget or any similar script, this section stops being accurate. Update it, and take advice on whether you now need a consent banner.
8. Where information is stored
Purchase records are held in Stripe. Emails are held in our email account. Newsletter subscribers are held by our email platform. Contact form messages pass through our form provider and arrive in our inbox.
9. How long we keep it
- Purchase and tax records: seven years, as required by New Zealand tax law.
- Contact form messages and email correspondence: up to two years, unless they relate to a purchase.
- Newsletter subscribers: until you unsubscribe.
10. Your rights
Under the Privacy Act 2020 you can ask us for a copy of the personal information we hold about you, and ask us to correct it if it is wrong. Email hello@example.co.nz and we will respond within 20 working days.
You can unsubscribe from the newsletter at any time using the link in any email. We can delete your other information on request, except where we are required to keep it for tax purposes.
11. Security
We use reputable providers, keep accounts protected with strong passwords and two-factor authentication, and limit access to what is needed. No system is completely secure, and we cannot guarantee the security of information sent to us over the internet.
If a privacy breach occurs that is likely to cause serious harm, we will notify the affected people and the Office of the Privacy Commissioner as required by the Privacy Act 2020.
12. Children
This shop is intended for adults buying for their business or personal use. We do not knowingly collect information from children.
13. Changes to this policy
We may update this policy. The date at the top shows when it last changed. Material changes will be noted on this page.
14. Questions and complaints
Email hello@example.co.nz with any privacy question or complaint. If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.