Martha’s furnishing fabrics | Privacy policy

1. introduction
   • Martha’s Furnishing Fabrics Limited (we, us, our) is committed to protecting the privacy of all customers and users of our website marthas.co.nz (Website).
   • We collect and store personal information about you to allow us to provide you with our services. Our collection of personal information is subject to the New Zealand Privacy Act 2020 (Act). This privacy policy (Policy) outlines how we collect, use, disclose and protect your personal information in accordance with our obligations under the Act.
   • Nothing in this Policy alters your rights under the Act. If you would like to learn more about these rights, please visit privacy.org.nz
2. Changes to this policy
   • Please note that we may make changes to this policy at any time by uploading a revised policy onto our website at www.marthas.co.nz. Any changes will be effective from the date that the revised policy is uploaded.
   • This policy was last updated on 1^st May 2021.
3. Why we collect your personal information
   • We collect personal information (as defined in the Act) from you for the purpose of facilitating and improving the provision of our services to you. We also collect your information to provide you with marketing materials where you have consented to us doing so (Purposes).
   • We only collect your personal information for reasons associated with these Purposes.
4. Your consent to our collection of your personal information
   • By engaging with our Website and services you consent to your personal information being collected, held and used in accordance with this Policy or for any other use that you authorise.
   • This includes the collection of your:
     1. Name
     2. Contact details (including your email address and phone numbers).
     3. Delivery address.
     4. Payment details (including credit card and/or banking information).
     5. Details of orders/purchases made through our Website or in our store.
   • If you contact us by phone, we may record the call and note the details of it. This information may be used by us for training, service improvement, or for statistical purposes.
   • We also collect information about your usage of our Website through the use of cookies. You may disable cookies by changing the settings on your web browser, however, this may mean that you cannot use some or all of the features of our Website.
   • We collect technical information about your device when you access our Website. This includes information about your:
     1. Device and web browser.
     2. Mobile Phone Carrier.
     3. Location
     4. IP address.

Your device may allow you to restrict our ability to view this information. In some instances this may mean you are unable to use some or all of our services.

• More detailed information about why we collect the personal information outlined above is available upon request.

1. how we collect your personal information
   • We may collect your personal information from:
     1. You, when you provide that information to us, whether that be via the use of our Website or when you otherwise voluntarily provide us with information that is relevant to the Purposes of this Policy.
     2. Third parties, where you have authorised that your information be shared with us (such as through interaction with any of our advertising on social media or any other website).
     3. Other sources where the information is publicly available.

1. what we may use your personal information for
   • We may use your personal information for the following reasons:
     1. To verify your identity.
     2. To provide our services to you.
     3. To communicate with you (including for marketing purposes) and respond to communications from you.
     4. To improve the services we provide to you, including by tailoring your experience with our services by making assumptions about you based on your provided information and activity on our Website.
     5. To undertake credit checks of you (if necessary).
     6. To bill you and to collect money that you owe us.
     7. To conduct research and statistical analysis (on an anonymised basis where possible).
     8. To protect and/or enforce our legal rights and interests, including defending any claim.
     9. For any other purposes authorised by you or the Act.

1. who we may disclose your personal information to
   • We may disclose your personal information to:
     1. Any business that supports our services and products, including any person that hosts or maintains any underlying IT system or data centre that we use to provide the Website or other services, any payment providers, any fraud detection partners, marketing and advertising partners, and customer support partners.
     2. Any credit reference agency for the purpose of credit checking you.
     3. Other third parties (for anonymised statistical information).
     4. A person who can require us to supply your personal information (such as a regulatory or government authority).
     5. Any other person authorised by the Act or another law (such as a law enforcement agency).
     6. Any other person authorised by you.
   • We may also disclose your personal information to any entity that we enter into any joint venture with or any other business that we are sold to or merged with.
   • We will only disclose personal information to the parties listed above if it is necessary and appropriate to facilitate the Purposes for which your personal information was collected pursuant to this Policy.
2. how long we will store your personal information
   • We will hold your personal information for as long as it is required to provide you with our services.
   • You may request that we delete your personal information as outlined in clause 13.
3. direct marketing
   • Where you have given consent to do so, we will use your personal information to directly market our services to you.
   • We may carry out this direct marketing by online advertising, email, phone, or post.
   • You have the right to revoke your consent to receive direct marketing at any time by contacting us.
4. how we protect your personal information
   • We take all reasonable steps to keep your personal information safe from loss, unauthorised activity or other misuse. These steps include:
     1. Adopting and regularly reviewing the performance and terms of our internal data security policies and systems to ensure that they are fit for purpose and protect your personal information from unlawful processing, accidental loss, destruction and damage.
     2. Adopting technologies for our internal use that meet the standards required by the Act.
     3. Verifying the suitability of security systems in place with third parties that we work with to ensure that they meet the standards required by the Act.
   • In some cases the personal information that we collect from you may be processed outside of New Zealand. Where this is the case, these third parties are also obliged to comply with the Act when dealing with your personal information. We make all reasonable endeavours to ensure that all entities that we work with outside of New Zealand offer satisfactory protection for your personal information. If you wish for your personal information to not be disclosed outside of New Zealand, please let us know., however, this may mean that you may be unable to use any or all of our services.
   • We have taken steps to ensure that our Website is secure. We use the secure HTTPS data transfer protocol for the transmission of data and our site holds an SSL certificate from a trusted organisation. Despite this, the internet is not in itself a secure environment and we cannot give an absolute assurance that your information will be secure at all times. Transmission of personal information over the internet is at your own risk and you should only enter, or instruct the entering of, personal information to the service within a secure environment.
   • If you follow a link from our Website to any other website, the owner(s) of that site will not be bound by our Policy and may have their own policy in place. We suggest you review that site’s privacy policy before you provide your personal information to them.
5. notification in event of a security breach
   • We will advise you at the first reasonable opportunity upon discovering or being advised of any security breach in which your personal information is lost, stolen, accessed, used, disclosed, copied, modified or disposed of by any unauthorised person or in any unauthorised manner.
   • Should such a breach occur we are committed to taking all reasonable steps to remediate the issue that gave rise to the security breach to prevent subsequent security breaches.
6. your rights to access, correction and deletion of your personal information

Your right to access personal information we hold about you

• Under the Act you have the right to access readily retrievable personal information held by us about you. This right is subject to certain grounds for our refusal as outlined in the Act.

Your right to request corrections to your personal information

• Under the Act you have the right to request corrections to the personal information that we hold about you. Should you request a correction, we will make the correction should the correction be reasonable and we are reasonably able to make it. If we are unable to, we will take reasonable steps to note the requested correction in our records against your data.

Your right to request deletion of your personal information

• Under the Act you have the right to request that we delete any personal information that we hold about you. We will take all reasonable steps within our control to action such a request.
• Please note that if we no longer hold your personal information we may be unable to provide some or all of our services to you.

How to exercise your rights

• If you would like to exercise the above rights, please email us at info@marthas.co.nz Please clearly state what information you are requesting, provide evidence of your identity, and notify us of anything else you deem relevant to your request.

1. how you can contact us about privacy matters
   • If you have any queries or requests concerning this Policy, please contact us at info@marthas.co.nz