Chrisco Hampers Limited (New Zealand) (from here in referred to as Chrisco) is subject to the Privacy Laws of New Zealand (Privacy Act 2020), which provide for the fair handling of personal information, and which sets standards for the collection, access, storage and use of personal information. We recognise that our customers' privacy is important and that they have the right to transparency as to how personal information is used. Our policy for dealing with any personal information (as that term is defined in the Privacy Laws and as summarised below) disclosed to or otherwise made available to us is detailed below.
Please note that our websites are not directed to individuals under the age of sixteen (16). We ask that you do not provide your personal information to us if you are under that age, and also that you do not share the personal information of anyone else under that age with us, unless this is required by us and you are their parent or guardian, or have the express consent of their parent or guardian to do this.
WHAT PERSONAL INFORMATION DO WE COLLECT?
The type of personal information Chrisco collects depends on the nature of your dealings with us. We only collect the personal information that we need for one or more of our functions or activities. We will only collect personal information about you by lawful and fair means and will not do so in an unreasonably intrusive manner.
To be able to provide you with our goods and services, and for account security verification purposes, we may need to collect your;
• Residential Address;
• Delivery Address;
• Daytime, Evening and Mobile Number’s;
• Date of Birth;
• Email Address;
• Payment and transaction details;
• Details of your dealings with us; and
• Any other information necessary to provide you with our goods and services.
We may collect information about you from activities related to other businesses or third parties like web hosting providers, analytics companies, social media platforms, data companies, and advertising services such as:
• Demographic information;
• Shopping preferences; and/or
• Information about your interests.
Depending on the method of payment you choose, Chrisco may need your credit card or bank account details.
If you are one of our suppliers or contractors, or one of their employees, we may collect your name, contact details and position in the organisation.
If you apply for a job with us, you may provide us with certain information, including your name, employment and educational background, and other personal information which we may require you to provide, or which you choose to provide us, in relation to your job application.
Further we may collect the personal information you provide as a result of completing a customer survey, such as information regarding your employer, your job title and household details.
Where you provide us with personal information about someone else, you must have their consent to provide their personal information to us.
ANONYMITY AND USE OF ASSUMED NAMES
Given the nature of the goods and services that we provide, we are generally not able to deal with you on an anonymous basis, or on the basis of you using an assumed name that is not your proper legal name. If you ask us about this option, we will inform you if it is possible for an interaction to occur on an anonymous basis. Whilst you may opt to not to provide us with your personal information, you should be aware that without this personal information, we may not be able to provide you with some of the services and/or products you are seeking.
HOW DO WE COLLECT PERSONAL INFORMATION?
How we collect personal information also depends on the nature of your dealings with us.
We collect personal information directly from you whenever it is reasonable and practical to do so. We may also collect personal information from third parties in the course of providing goods or services to you or to them. We may monitor and record your communications with us (including email and telephone) for security, dispute resolution and training purposes (subject to applicable law).
We collect personal information;
• from you directly, including when you make a non-cash payment,; provide information over the phone, online or on documentation such as an Order Form, complete a customer survey, apply for a job with us, or when you participate in a promotion conducted by us; or as is made available through your social media profiles;
• from other customers who request us to provide goods or services to you, when they provide information over the phone, online or on documentation such as an Order Form;
• from your agent, when they provide information regarding customers they service; and
• from your employer ONLY if you are employed by one of our suppliers or contractors and they provide us with your personal information with your permission.
If you are a customer, and you do not provide us with all of the necessary personal information, we may not be able to provide you with the necessary goods or services.
If you are interacting with one of our marketing platforms (for example, via our website, Social Media, or through surveys), and you do not provide us with all the necessary personal information, we may not be able to make that platform available to you or function properly.
If you are one of our suppliers or contractors, and you do not provide us with all of the necessary personal information, we may not be able to continue purchasing your goods or using your services.
If you apply for a job at Chrisco, and you do not provide us with all of the necessary personal information, we may not be able to advance your job application
COLLECTING PERSONAL INFORMATION FROM OUR WEBSITES
Chrisco also collects some information from you when you use our websites or social media platforms. This can include information about your shopping preferences, software versions used, device identifiers (like IP address), location data (where available and not disabled by the user), dates, times, file metadata, referring website, data entered and user activity such as links clicked. Your use of the facilities and services available through the websites or platforms will determine the amount and type of information which we collect about you.
The only personal information which Chrisco may collect about you when you use our websites is what you tell us about yourself, for example by completing our Join Now Form or information you provide to us when you send us an email. In other cases we may associate information about your use of the Chrisco website over time with your personal information, e.g. where on any occasion you have logged in, followed a link sent to you by email or we have otherwise been able to identify you. We will record your email address if you send us an email.
While great care is taken to protect your personal information on our websites, no data transmission over the internet can be guaranteed to be 100% secure. Accordingly, we cannot ensure or warrant the security of any information that you send to us or receive from us online. This is particularly true for information you send to us via email. We have no way of protecting that information until it reaches us. Once we receive your transmission, we make our best effort to ensure it remains secure in our possession.
If you interact with chatbots (automated messengers) we will record what you respond to these chatbots, how you interact with them and we will store data related to the device that you use. Depending on the platform for the chatbot and your permission, your device data may include: IP address, social media handle, time zone, country and GPS location. The platform that provides the chatbot may also collect some of this data. For example, if the chatbot is provided on Facebook, this platform will collect your user data as well.
If you choose to connect your social media account to your Chrisco account (where such feature is available), you will share certain personal data from your social media account with us, for example, your name, email address, photo, list of social media contacts, and any other information that may be or you make accessible to us when you connect your social media account to your Chrisco account. If you logon to your account through Facebook, Google, Instagram or other social media accounts, we collect profile information from your social media account including your name and email address. Please note that when accessing your account through a social media platform, the social media provider will be notified of your access to the account. Please refer to the privacy notice of the respective social media provider(s) for more information on how your personal information is stored.
Our websites and social media may contain links/plug-ins to other sites. We are not responsible for the content of, or the privacy practices or policies of, those sites.
We may use third party advertising companies to display ads tailored to you based on how you browse and shop online, a practice commonly referred to as “interest-based” or “behavioural” advertising. We allow these third parties to collect certain information when you visit our websites or use our applications, including non-personally identifiable information (browser type, subject of advertisements clicks on, session IDs) and personal data (such as static IP address). The information that we obtain from social media platforms depends on your account and privacy settings within the platforms and the platform’s privacy policies. You can use Ads Settings on your browser to manage the ads that you see and to opt out of Ads Personalisation. Please note that you may need to opt-out separately from each service.
HOW DO WE USE PERSONAL INFORMATION?
Personal information may be used to
• to identify you and any records relating to you;
• to provide you with the products and services you have requested;
• to manage your requests for products and services including delivery, processing payments, providing refunds, discounts and incentives;
• to develop and improve the products and services we offer;
• to maintain and improve customer services and seek your feedback, including conducting product and market research and analysis;
• to improve our operational processes, enhance your customer experience and to monitor and review our compliance with relevant regulations and codes of conduct in our dealings with you;
• to send you reminders;
• to market the products and services of Chrisco;
• to enable us to undertake a credit assessment;
• to facilitate appropriate communication between you and our preferred credit suppliers;
• to comply with any legal obligations or governance requirements;
• to facilitate your interactions with us on our website;
• to meet our legal obligations and to notify you of matters that we are required to do so by law (such as product recalls);
• to interact with Regulators or other Government agencies;
• to manage and resolve any legal or commercial complaints and issues;
• to investigate fraud and to carry out loss prevention activities; and/ or
as part of buying or selling our businesses.
Chrisco may use your personal information for research and development of our goods and services, or to send you information about other goods and services offered by us which may be of interest to you.
Chrisco will not use unique identifiers such as individual numbers, references, or other forms of identification allocated to people by other organisations, such as driver’s licence numbers, passport numbers, or IRD numbers unless this is necessary. We will take reasonable steps to protect unique identifiers from misuse.
We are committed to compliance with all laws and requirements relating to the use of your personal information for direct marketing.
When you provide your personal details, you may consent to us using your personal information for direct marketing purposes (for an indefinite period). From time to time, we may contact you with information about products and services offered by us and our related entities and our business partners or affiliates, which we think may be of interest to you. When we contact you, it may be by mail, telephone, email, SMS or via social media. These communications may relate to products and services that we and our affiliates provide, and other products that may be of interest to you.
De-identified personal information may also be used to allow corporate reporting within our business and with our affiliates.
Whilst you may opt not to provide us with your personal information, you should be aware that without this personal information, we may not be able to provide you with some of the services and/or products you may be seeking.
HOW TO OPT OUT
If you would prefer not to receive promotional communications, please let us know by sending us an email at firstname.lastname@example.org and we will update your account preferences accordingly. Alternatively, simply select the "unsubscribe" option in any of the emails that you receive from us, this will unsubscribe you from receiving any further promotional emails. Please note, we may still contact you about your account via email or other means if you have an active Order or HeadStart Plan with us, as we need to communicate important information about your order, payments, address confirmation or delivery.
If you apply for a job with us, we will hold, use and disclose that information solely for the purpose of considering your application. In considering your application, it may be necessary for us to disclose some of that information to third parties to verify the accuracy of that information. In such circumstances, we will disclose only such information as is reasonably necessary. In considering your application, we may also collect personal information about you from any third parties that you nominate as your referees in your application.
WHAT PERSONAL INFORMATION DOES CHRISCO DISCLOSE?
In general, Chrisco will not sell or otherwise share your personal information to others. However, in certain circumstances, Chrisco may be required to disclose your personal information to our business partners.
Chrisco may disclose your personal information;
• where Chrisco is required by law to disclose information to third parties;
• to banks and financial institutions in accordance with your Direct Debit Request and/or Credit Card Authority;
• where Chrisco has outsourced functions (for example, information technology) or otherwise uses third party contractors to provide our goods and services or to facilitate our ability to do so (for example: external mailing houses or contact centre services, delivery personnel, New Zealand Post, labour hire or resource augmentation service providers or hosting servers). For us to operate our business we may share your personal information with such third-party contractors. At all times we seek to protect your personal information including by endeavouring to ensure that our third party contractors are required to comply with the applicable Privacy Laws and also seeking to ensure that they and their individual employees are aware of the need to comply with our privacy policies and requirements and also to comply with general confidentiality obligations in relation to any information that is made available to them as a result of their engagement by Chrisco; or
• to your nominated agent (for example, we may share your contact details with them).
DO WE DISCLOSE PERSONAL INFORMATION OVERSEAS?
There may be circumstances where we need to disclose personal information that we hold about you to a third party overseas. Such countries are likely to include Australia; however, web hosting services may be outside Australia and New Zealand.
This may occur, for example, where:
• we have a database or server hosted outside New Zealand (or where our third-party IT contractors or service providers may likewise have a database or server hosted outside New Zealand);
• providing information to our related entities outside New Zealand.
Where we disclose your personal information to an entity outside of New Zealand, we will do checks to ensure that the receiving party is subject to equivalent protections and safeguards to those in New Zealand’s privacy laws. If the receiving party is not subject to protections and safeguards comparable to New Zealand’s privacy laws, we will let you know that this is the case and seek your consent to disclose your personal information to them. Please note we will not do these checks or seek your consent if we are just transferring information to a third party for storage or processing.
HOW DO WE KEEP PERSONAL INFORMATION SECURE?
Chrisco is committed to ensuring the security of your personal information. Personal information may be stored electronically and, in some cases, hard copy format. Where possible, we use encryption technology, privacy protection controls and restrictions on employee access in order to maximise our ability to safeguard your personal information. Where we no longer require your personal information, we will endeavour to as soon as reasonably possible destroy or permanently delete such personal information.
Please note as well that as an entity subject to Privacy Laws, in the event that there is an eligible data breach (as that term is defined in the Privacy Laws), we may have obligations to disclose this, and other surrounding circumstances and information, to the Office of the Privacy Commissioner.
HOW YOU CAN ACCESS AND CORRECT YOUR PERSONAL INFORMATION
You can request access to your personal information by contacting us through the contact details listed below. Before we are able to provide you with access to your personal information, we will require some proof of identity. You should note that it may be an offence to mislead us in order to access someone else’s personal information – for example, impersonating someone in order to access information that you are not entitled to see (this can carry a penalty up to $10,000).
For most requests, your information will be provided free of charge, however we may charge a reasonable fee if your request requires a substantial effort by us.
If any of the personal information you have provided to us changes (for example, if you move or change your phone number), please let us know so that we can update your personal information.
If you find any inaccuracies in your personal information, please let us know.
In the case of access and correction requests, please provide as much detail as you can about the information you seek, in order to help us retrieve it. Under the applicable Privacy Laws and other relevant laws, we are required to provide our reasons if we refuse your request. Where we decide not to make a requested correction and you disagree, you may ask us to make a note of your requested correction to be attached to the information sought to be corrected. As an extra measure all customers have the option of having the information in relation to their account protected by a password chosen by them.
BUSINESS TRANSFER CLAUSE
It is possible, moving forward, that there could be a change in our business ownership or structure (including but not limited to a merger, acquisition or sale of a portion of all or some of our assets, (including our customer databases)), or we may undertake a corporate reorganisation or other action or transfer the personal information we handle between Chrisco or our related entities.
In the event that this should happen, you should be aware, that when you provide your personal information (by any means, whether verbal, written or electronic) or through your use of the Chrisco websites at any time, you are consenting to the future transfer of your personal information to a potential or actual new owner or successor entity so that services can be continued to be provided to you.
HOW DO WE DEAL WITH PRIVACY COMPLAINTS?
Your privacy is important to us and we will make every effort to resolve your concerns. To assist us in helping you, we ask you to follow a this three-step process;
1. Gather all supporting documents about the matter of complaint, think about the questions you want answered and decide on what you want us to do.
2. Telephone us on Chrisco: 0800 555 333 where your situation will be reviewed and, if possible, resolved straight away.
3. If you are not satisfied with our response, we may require you to submit your complaint in writing by email at email@example.com
with your contact details. We will then investigate your complaint and endeavour to respond to you in writing within 14 days of receipt of your written complaint. If at this stage the matter has not been resolved to your satisfaction, you can telephone the office of the Privacy Commissioner on 0800 803 909 or email firstname.lastname@example.org
Further information may be obtained on privacy issues in New Zealand by visiting the Office of the Privacy Commissioner's website at: http://privacy.org.nz