Geedup NZ · Legal
Privacy Policy
Last updated: May 2026 | Effective date: May 2026
This policy applies to geedup.co.nz and is governed by the New Zealand Privacy Act 2020.
Summary — What You Need to Know
- → We collect personal data only to process your orders, improve your experience, and communicate with you
- → We do not sell your personal data to third parties
- → You have the right under the NZ Privacy Act 2020 to access and correct your personal information
- → We use trusted third-party services (payment processors, shipping, analytics) that have their own privacy policies
- → Contact us at any time: privacy@geedup.co.nz
1. Who We Are
Geedup NZ operates the website geedup.co.nz — an authorised New Zealand stockist of authenticated Geedup Co. streetwear. We are a New Zealand-based business and are subject to the New Zealand Privacy Act 2020 and its 13 Information Privacy Principles (IPPs).
Contact: For any privacy-related matter, contact us at privacy@geedup.co.nz. We will respond within 20 working days as required by the Privacy Act 2020.
2. What Personal Information We Collect
We collect personal information in the following circumstances:
2.1 When You Place an Order
- Full name
- Billing address and shipping address
- Email address
- Phone number
- Payment information (processed by our payment provider — we do not store card details)
- Order history and transaction records
2.2 When You Create an Account
- Username and password (stored encrypted)
- Email address
- Saved addresses and order history
2.3 When You Browse Our Website (Automatic Collection)
- IP address
- Browser type and version
- Operating system
- Pages visited and time spent on each page
- Referring website
- Cookies and similar tracking technologies (see Section 6)
2.4 When You Contact Us
- Name and email address
- Content of your message or enquiry
- Any attachments or additional information you provide voluntarily
3. How We Use Your Personal Information
We use your personal information only for the purposes for which it was collected, consistent with Information Privacy Principle 10 of the Privacy Act 2020:
4. Disclosure of Personal Information to Third Parties
We do not sell your personal information. We share your information with third parties only where necessary to operate our business and fulfil your orders. The third parties we work with include:
Payment Processors
We use secure payment processors (such as Stripe, PayPal, or WooCommerce Payments) to handle transactions. These processors receive your payment details directly and are subject to PCI-DSS compliance standards. We do not store your full card details on our servers.
Shipping and Delivery Providers
Your name, delivery address, and phone number are shared with NZ Post, CourierPost, or equivalent domestic carriers to fulfil your delivery. These providers operate under their own privacy policies.
Website and Technology Providers
Our website is hosted on servers and uses third-party software including WordPress, WooCommerce, and related plugins. These may process technical data about your visit. We use Google Analytics or similar tools to analyse site usage — this data is anonymised and aggregated.
Email Marketing Providers
If you have opted into our email list, your email address and name may be shared with our email marketing provider (such as Mailchimp or Klaviyo). You can unsubscribe at any time using the link in any marketing email, or by contacting us directly.
Legal and Regulatory Authorities
We may disclose personal information to government agencies, law enforcement, or other legal authorities where required to do so by New Zealand law, or where we believe disclosure is necessary to protect our rights or the rights of others.
5. Overseas Disclosure
Some of our third-party service providers are based outside New Zealand, including in Australia, the United States, and the European Union. Where we disclose personal information to overseas recipients, we take reasonable steps to ensure that those recipients are subject to privacy obligations comparable to those in the New Zealand Privacy Act 2020, or that another exception under IPP 12 applies. This includes using services that comply with GDPR (EU), the Australian Privacy Act, or US frameworks such as the DPF (Data Privacy Framework). By using our website and purchasing from us, you acknowledge that your information may be transferred and processed overseas by our third-party providers.
6. Cookies and Tracking Technologies
Our website uses cookies — small text files stored on your device — to enable core functionality and improve your experience. The cookies we use include:
You can control cookie settings through your browser — most browsers allow you to refuse or delete cookies. Note that disabling essential cookies will affect the functionality of the shopping cart and checkout. For detailed guidance on managing cookies, visit consumer.org.nz.
7. How Long We Retain Your Information
8. Your Rights Under the New Zealand Privacy Act 2020
Under the Privacy Act 2020, you have the following rights in relation to your personal information held by us:
Right to Access
You have the right to request access to the personal information we hold about you. We will respond within 20 working days. We may charge a reasonable fee if the request requires significant resources.
Right to Correction
If you believe personal information we hold about you is inaccurate, incomplete, or misleading, you have the right to request correction. We will take reasonable steps to correct the information or attach a statement of your correction request.
Right to Deletion
You may request deletion of your personal information. We will comply subject to any legal obligations to retain the information (e.g. tax records). Registered customers can also delete their account directly through the My Account page.
Right to Unsubscribe
You may unsubscribe from marketing communications at any time using the unsubscribe link in any email, or by contacting us at privacy@geedup.co.nz. Transactional emails (order confirmations, shipping notifications) cannot be disabled as they are essential to your order.
Right to Complain
If you believe we have breached the Privacy Act 2020 in how we handle your personal information, you may raise a complaint with us first by contacting privacy@geedup.co.nz. If you are not satisfied with our response, you may lodge a complaint with the Office of the Privacy Commissioner at privacy.org.nz or on 0800 803 909.
To exercise any of the above rights, contact us at privacy@geedup.co.nz with your name, email address used on the account, and a description of your request. We may ask you to verify your identity before processing your request.
9. Data Security
We take reasonable steps to protect your personal information from loss, unauthorised access, use, modification, or disclosure, consistent with Information Privacy Principle 5 of the Privacy Act 2020. Our security measures include:
- SSL/TLS encryption across the entire geedup.co.nz website (HTTPS)
- Encrypted password storage — passwords are hashed, not stored in plain text
- Payment card data handled exclusively by PCI-DSS compliant payment processors — we never receive or store full card numbers
- Access controls — only authorised personnel can access customer data for order fulfilment and customer service purposes
- Regular software updates and security patches applied to our website platform
No method of internet transmission or electronic storage is 100% secure. While we take commercially reasonable measures to protect your information, we cannot guarantee absolute security. In the event of a privacy breach that is likely to cause serious harm, we will notify affected individuals and the Privacy Commissioner as required by the Privacy Act 2020.
10. Children’s Privacy
Our website is intended for use by adults. We do not knowingly collect personal information from children under the age of 16 without parental consent. If you are a parent or guardian and believe we have collected information from your child without appropriate consent, please contact us at privacy@geedup.co.nz and we will take prompt steps to delete that information.
11. Links to Third-Party Websites
Our website may contain links to external websites — including the official Geedup Co. website, social media platforms, and partner brands. We are not responsible for the privacy practices or content of those websites. We encourage you to review the privacy policy of any third-party site you visit before providing personal information.
12. WooCommerce and WordPress Data Handling
Our website is built on WordPress with WooCommerce. In addition to the data described above, the following applies specifically to WordPress/WooCommerce functionality:
- Comments: If you leave a comment on our site, we collect your name, email address, and IP address. Email addresses are anonymised for display purposes. We do not publish your email address publicly.
- Gravatar: If you have a Gravatar account, an anonymised hash of your email address may be sent to Gravatar to check if a profile image is available. Gravatar’s privacy policy applies to this data.
- Checkout: WooCommerce stores order data in our database. You can request export or deletion of this data via the My Account page or by contacting us.
- Media uploads: Images uploaded to the site may contain location metadata (EXIF GPS data). We recommend stripping this data before upload if you are concerned about location privacy.
13. Changes to This Privacy Policy
We may update this privacy policy from time to time to reflect changes in our business, legal obligations, or the services we use. When we make significant changes, we will update the “Last updated” date at the top of this page and, where appropriate, notify you by email if you have an account with us. We encourage you to review this policy periodically. Continued use of geedup.co.nz after a policy update constitutes acceptance of the revised policy.
14. Contact Us
For any privacy-related questions, requests, or complaints, please contact us:
Geedup NZ — Privacy Officer
Email: privacy@geedup.co.nz
Website: geedup.co.nz
Response time: We aim to respond to all privacy requests within 20 working days as required by the Privacy Act 2020.
If you are not satisfied with our response to a privacy complaint, you have the right to contact the Office of the Privacy Commissioner of New Zealand:
Website: privacy.org.nz | Phone: 0800 803 909 | PO Box 10094, Wellington 6143