1. Introduction

Welcome to GoodyBag (“we”, “our”, “us”). We’re serious about looking after your personal information. This policy explains how we collect, use, store and share your personal data when you use our website goodybag.co.nz (the “Site”), or engage with us in other ways. By using the Site, you agree to the practices described here.

2. The Information We Collect

We gather various types of information from you, depending on how you use the Site:

• Contact information such as name, email address, phone number, company name and physical address when you fill in forms or contact us.

• Usage information including how you navigate the Site, the pages you visit, the time and date of your visit and device/browser details.

• Transactional information if you purchase or subscribe to something (for example a membership), we collect details about the purchase, payment method, goods or services provided.

• Marketing and preferences data when you opt-in to receive communications from us, we may learn your preferences for content, offers and channels.

3. How We Use Your Information

We use your personal information for the following main purposes:

• To provide you with the services, products, subscriptions or benefits you request.

• To manage your account, support you and respond to your enquiries.

• To process payments, invoices or memberships.

• To improve our Site, services and user experience by analysing how the Site is used and making improvements.

• To send you marketing communications (only if you’ve opted in) about new offers, products or events we think you’ll find valuable.

• To comply with legal and regulatory obligations.

4. Legal Basis for Processing

Under the Privacy Act 2020, we rely on one or more of the following:

• Your consent (for marketing or non-essential data uses).

• Performance of a contract (for services you request).

• Our legitimate interests (for example improving our Site or business, provided this doesn’t unfairly affect your rights).

• Complying with legal obligations.

5. Disclosure of Your Information

We may share your personal information with:

• Trusted third-party service providers (such as payment processors, hosting providers, email platforms) who help us run the Site or fulfil services.

• Professional advisers (for example accountants or lawyers) where required.

• Government, regulatory or legal authorities if we believe disclosure is required by law or to protect our rights.
  We do not sell your personal information to third parties for marketing purposes.

6. Security and Retention

We care about keeping your information safe. We implement reasonable technical, physical and organisational measures to protect it from unauthorised access, modification, disclosure or destruction. We also review these measures regularly.
We retain your personal information only for as long as necessary for the purposes set out in this policy, or as required by law (for example for tax or compliance reasons).

7. International Transfers

If we transfer your data overseas (for example to a cloud service provider outside New Zealand), we’ll ensure we apply appropriate safeguards so your rights remain protected in line with the Privacy Act.

8. Your Rights

You have rights in relation to your personal information, including:

• The right to access the personal information we hold about you.

• The right to correct any inaccuracies in your personal information.

• The right to request deletion of your personal information (in certain circumstances).

• The right to object or restrict certain processing (for example direct marketing or profiling).
  If you wish to exercise these rights, or if you have questions about our handling of your personal information, please contact us (see section 10).
  If you believe we have breached the Privacy Act, you have the right to lodge a complaint with the Office of the Privacy Commissioner in New Zealand.

9. Cookies and Tracking Technologies

We use “cookies” and similar tracking technologies on the Site to help us understand how the Site is used and to improve it.
You can choose to disable cookies through your browser settings, although this may affect how the Site functions for you.
We may also use third-party analytics services (for example Google Analytics) to collect and process data about how the Site is accessed and used.

10. Changes to This Policy

We may update this Privacy Policy from time to time (for example to reflect changes in law or our services). When we make material changes, we’ll provide notice via our Site or email (if applicable). We recommend you check this page regularly for updates. The “Effective Date” (below) indicates when this version came into force.

11. Contact Us

If you have any questions, concerns or complaints about this policy or how we handle your personal information, please contact:
GoodyBag
Unit 6, 101 Diana Drive, Glenfield, Auckland, New Zealand
Email: info@goodybag.co.nz
Phone: 0800 885 739

Effective Date: [22 October 2025]

Thank you for placing your trust in GoodyBag. We’re committed to protecting your privacy and helping you get the most out of our services.