www.plaidstoragecot.com (the “Site”) is committed to protecting the privacy of our visitors and customers. This Privacy Policy outlines how your personal information is collected, used, and safeguarded when you visit or make a purchase from the Site.
- Data Controller
The data controller responsible for your personal information under European and New Zealand data protection laws is:
Website: www.plaidstoragecot.com
Company: Thread Design Limited
Registration Number: 1151252
Address: 254 Richmond Road, Grey Lynn, Auckland 1021, New Zealand
Email: support@plaidstoragecot.com
Telephone: +64 93601361
- Information We Collect
When you interact with the Site, we collect certain categories of information necessary to fulfill your orders and improve your browsing experience.
Device Information: When you access the Site, we automatically collect details regarding your web browser, IP address, time zone, and cookies installed on your device. Additionally, we log information about the specific pages or products viewed, and reference source websites or search terms that directed you to the Site.
Order Information: When you attempt to complete or finalize a purchase through the Site, we collect your name, billing address, shipping address, email address, and telephone number.
- Purpose and Legal Basis for Processing
We process your personal data under the following legal frameworks:
Performance of a Contract: To process, package, and dispatch orders placed via the Site, manage communications regarding transactions, and fulfill customer service requests.
Legitimate Interests: To monitor site traffic, evaluate transaction risks, optimize the functionality of our storefront, and maintain structural system monitoring.
Compliance with Legal Obligations: To satisfy statutory accounting, tax, reporting, and corporate obligations in New Zealand and the European region.
- Third-Party Data Processors and Payment Handling
To facilitate secure payment operations and logistical fulfillment, we transfer necessary data to standard service providers.
Payment Processing: All transaction processing is managed directly by our external financial infrastructure provider, Stripe. Stripe collects, processes, and stores payment instrument details in accordance with their regulatory frameworks. Your payment details are transmitted directly to Stripe via encrypted protocols. The Site does not retain or store full payment card account numbers on internal infrastructure.
Logistics and Operations: Your operational data (such as name, delivery address, and telephone number) is shared with our dedicated warehousing, transport, and delivery networks to ensure direct physical fulfillment from our inventory location to your destination.
- Data Retention
We maintain rigorous schedules regarding data minimization and retention to align with New Zealand and European data protection mandates:
Order Records: Personal details associated with commercial transactions are retained for a standard period of 7 years following the end of the financial year in which the transaction occurred. This duration is strictly required to satisfy New Zealand tax legislation (Tax Administration Act 1994) and corresponding European fiscal reporting standards.
Browsing and Analytical Logs: Technical logs, server data, and site interaction identifiers are automatically overwritten, anonymized, or deleted within a standard period not exceeding 14 months.
Upon the expiration of the defined retention periods, your personal data is permanently deleted or anonymized using reliable cryptographic protocols.
- International Data Transfers
As a business registered in New Zealand operating globally, personal data collected from residents within the European Economic Area (EEA) and the United Kingdom will be transferred to and processed in New Zealand.
New Zealand has been officially recognized by the European Commission as providing an adequate level of data protection under Article 45 of the General Data Protection Regulation (GDPR), ensuring your structural data rights remain fully protected during cross-border transfers.
- Data Security Measures
We deploy administrative, technical, and operational measures designed to restrict unauthorized access, alteration, disclosure, or destruction of the data under our control. These protocols include encrypted communication channels and restricted internal access permissions.
Please note that while we implement standard industry measures to mitigate operational risks, no method of transmission over the internet or electronic storage infrastructure can be characterized as entirely immune to external vulnerabilities, and we maintain standard monitoring to address operational anomalies promptly.
- Your Statutory Rights
Depending on your geographical jurisdiction (specifically under the New Zealand Privacy Act 2020 and the European General Data Protection Regulation), you possess distinct legal rights regarding your personal information:
Access: The right to request copies of the personal data held by the data controller.
Correction: The right to request the rectification of inaccurate or incomplete personal records.
Erasure (“Right to be Forgotten”): The right to request the deletion of personal data where legal grounds for retention no longer apply.
Restriction and Objection: The right to restrict or object to specific processing activities based on legitimate interests.
Data Portability: The right to request the transfer of your structured data to another provider.
To exercise any of these statutory rights, please contact our privacy compliance team directly at support@plaidstoragecot.com. If you reside in the European Economic Area and believe your data has been handled incorrectly, you retain the right to lodge an inquiry or complaint with your local supervisory authority.
- Policy Amendments
We reserve the right to modify, revise, or update this Privacy Policy at any time to reflect operational, legislative, or regulatory updates. Any modifications will become effective immediately upon the publication of the revised text on the Site.