Privacy Policy

Welcome to BAG PLANET LIMITED (“we,” “our,” or “us”). We operate the ecommerce website www.bagplanetshop.com (the “Site”). We are fully committed to protecting your privacy and ensuring the security of your personal data.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our Site, make a purchase, or interact with us. This policy complies with applicable global privacy laws, including the New Zealand Privacy Act 2020, the General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA).

By accessing or using our Site, you agree to the terms of this Privacy Policy. If you do not agree with this policy, please do not use our services.

1. Information We Collect

We collect several types of information from and about users of our Site, including:

Personal Information You Provide to Us

  • Identity Data: Name, surname, date of birth, and gender.
  • Contact Data: Billing address, delivery address, email address (mistal@bagplanetshop.com), and telephone number (+(64)9 8351152).
  • Financial Data: Bank account and payment card details (processed securely through third-party payment gateways).
  • Transaction Data: Details about payments to and from you, and other details of products you have purchased from us.
  • Profile Data: Your username, password, purchases or orders made by you, your interests, preferences, feedback, and survey responses.

Information We Collect Automatically

  • Technical Data: Internet Protocol (IP) address, login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system, and platform.
  • Usage Data: Information about how you use our Site, products, and services, including page response times, download errors, and length of visits.

Information from Third Parties

  • We may receive personal data about you from various third parties, including analytics providers (such as Google), advertising networks, and search information providers.

2. How We Use Your Information

We use the information we collect for various business and commercial purposes, including:

To Provide and Maintain Our Service

  • Processing and delivering your orders.
  • Managing payments, fees, and charges.
  • Collecting and recovering money owed to us.
  • Managing our relationship with you by notifying you about changes to our terms or privacy policy.

To Improve and Customize Our Site

  • Administering and protecting our business and this Site (including troubleshooting, data analysis, testing, system maintenance, support, reporting, and hosting of data).
  • Using data analytics to improve our website, products, services, marketing, customer relationships, and experiences.

For Marketing and Communications

  • Delivering relevant website content and advertisements to you.
  • Measuring or understanding the effectiveness of the advertising we serve to you.
  • Making suggestions and recommendations to you about goods or services that may be of interest to you.

3. Legal Basis for Processing (GDPR/UK GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, we rely on the following legal bases to process your personal data:

  • Performance of a Contract: Where we need to perform the contract we are about to enter into or have entered into with you (e.g., processing your order).
  • Legitimate Interests: Where it is necessary for our legitimate interests (or those of a third party), and your interests and fundamental rights do not override those interests.
  • Consent: Where you have given us clear consent to process your personal data for a specific purpose (e.g., subscribing to our newsletter). You can withdraw consent at any time.
  • Compliance with Legal Obligations: Where we need to comply with a legal or regulatory obligation.

4. How We Share Your Information

We do not sell, rent, or trade your personal information to third parties. We may share your personal data with selected third parties in the following circumstances:

  • Service Providers: We share data with third-party vendors who perform services for us, including payment processing (e.g., Stripe, PayPal), data analysis, email delivery, hosting services, customer service, and marketing assistance.
  • Delivery Partners: We share your name, address, and phone number with postal and courier services to ensure the delivery of your purchased products.
  • Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).
  • Business Transfers: If we are involved in a merger, acquisition, or asset sale, your personal data may be transferred. We will provide notice before your personal data is transferred and becomes subject to a different Privacy Policy.

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track the activity on our Site and hold certain information.

What are Cookies?

Cookies are files with a small amount of data which may include an anonymous unique identifier. Cookies are sent to your browser from a website and stored on your device.

Types of Cookies We Use

  • Essential Cookies: Necessary for the website to function properly, enabling basic features like page navigation and access to secure areas of the website.
  • Performance and Analytics Cookies: Help us understand how visitors interact with the website by collecting and reporting information anonymously.
  • Marketing Cookies: Used to track visitors across websites to display ads that are relevant and engaging for the individual user.

Managing Cookies

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Site.

6. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed.

  • We use Secure Sockets Layer (SSL) encryption technology to protect your data during transmission.
  • We limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know.
  • They will only process your personal data on our instructions, and they are subject to a duty of confidentiality.
  • We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

7. Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

  • To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data.
  • We also consider the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data, and applicable legal requirements.
  • By law, we must keep basic information about our customers (including Contact, Identity, Financial, and Transaction Data) for seven years after they cease being customers for tax and legal purposes in accordance with New Zealand regulations.

8. International Data Transfers

BAG PLANET LIMITED is located in New Zealand. Your information, including personal data, may be transferred to—and maintained on—computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction.

If you are located outside New Zealand and choose to provide information to us, please note that we transfer the data, including personal data, to New Zealand and process it there. We ensure that a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

  • We will transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data.
  • Where we use certain service providers, we may use specific contracts approved for use which give personal data the same protection it has globally.

9. Your Legal Rights

Depending on your location, you have rights under data protection laws in relation to your personal data.

Your Rights Under the New Zealand Privacy Act 2020

  • Right to Access: You have the right to request a copy of the personal information we hold about you.
  • Right to Correction: You have the right to request that we correct any incorrect or outdated information we hold about you.

Your Rights Under the GDPR (EEA/UK Users)

  • Request access to your personal data.
  • Request correction of the personal data that we hold about you.
  • Request erasure of your personal data (the “right to be forgotten”).
  • Object to processing of your personal data where we are relying on a legitimate interest.
  • Request restriction of processing of your personal data.
  • Request the transfer of your personal data to you or to a third party.
  • Withdraw consent at any time where we are relying on consent to process your personal data.

Your Rights Under the CCPA (California Users)

  • Right to Know: You can request that we disclose the categories and specific pieces of personal information we have collected about you.
  • Right to Delete: You can request the deletion of your personal information collected by us.
  • Right to Opt-Out of Sale/Sharing: We do not sell your personal data. You have the right to direct a business that sells or shares personal information not to do so.
  • Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

If you wish to exercise any of the rights set out above, please contact us at mistal@bagplanetshop.com.

10. Children’s Privacy

Our Site is not intended for use by children under the age of 16 (or the legal age in your jurisdiction). We do not knowingly collect personal identifiable information from children under 16. If you become aware that a child has provided us with personal data, please contact us immediately. If we become aware that we have collected personal data from children without verification of parental consent, we will take steps to remove that information from our servers.

11. Third-Party Links

This Site may include links to third-party websites, plug-ins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our Site, we encourage you to read the privacy policy of every website you visit.

12. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Effective Date” at the top of this policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us using the information below:

  • Company Name: BAG PLANET LIMITED
  • Website: www.bagplanetshop.com
  • Contact Email: mistal@bagplanetshop.com
  • Contact Phone: +(64)9 8351152
  • Postal Address: 387 Great North Road, Henderson, Auckland 0612, New Zealand