Privacy Policy

Last updated: 2 September 2026

Who we are

KiteCoCreates operates the website kitecocreates.co.nz.
This policy explains what personal information we collect, why we collect it, how it may be shared and the choices available to you.

Information we collect

We may collect information you provide when you:

place an order;
create or use a customer account;
contact us;
subscribe to our email list; or
otherwise interact with the website.
This information may include your name, email address, billing details, country, order history, account information, subscription preferences and messages sent to us.
We may also collect technical information such as your IP address, browser, device type, pages visited and interactions with the website.

How we use your information

We use personal information to:

process orders and provide digital downloads;
manage customer accounts;
provide customer support;
respond to enquiries;
prevent fraud and protect the website;
understand and improve website use;
send marketing emails where you have consented; and
meet our accounting, tax and legal obligations.
KiteCoCreates does not sell or trade your personal information.

Payments

Payments are processed by the payment method selected at checkout. This may include Stripe, Link by Stripe, PayPal or another payment provider offered on the website.
Payment providers receive the information necessary to process your transaction and apply their own privacy policies.
KiteCoCreates does not see or store your complete credit-card details.

Email marketing

If you subscribe to our email list, your name, email address and subscription information may be processed through Flodesk.
Marketing emails are sent only where you have subscribed or otherwise consented to receive them. You may unsubscribe at any time using the link included in each email.
Unsubscribing from marketing will not prevent transactional emails relating to your orders, downloads or account.

Analytics

We use Google Analytics and related Google services to understand how visitors find and use the website.
These services may collect information such as your IP address, device, browser, general location, pages visited and actions taken on the website.
This information helps us monitor website performance and improve the customer experience.

Cookies

The website uses cookies and similar technologies to operate essential features such as the shopping cart, checkout, customer accounts, login preferences, currency selection and website security.
Analytics and embedded content may also use cookies to collect information about website use.
You can control or delete cookies through your browser settings. Disabling essential cookies may prevent some parts of the website from working correctly.

Embedded content

The website may include embedded content such as YouTube videos, images or links from other websites.
When you view or interact with embedded content, the provider may collect information, use cookies or track your interaction as though you had visited its website directly. The provider’s own privacy policy will apply.

Who we share information with

We share personal information only where necessary to operate the website, complete transactions and provide our services.
Recipients may include:

payment providers such as Stripe and PayPal;
Flodesk for email subscriptions;
Google for analytics and website-performance services;
website hosting, security, technical and email service providers; and
government, regulatory or law-enforcement agencies where disclosure is legally required.
We require service providers to handle information only for the services they provide.

Information processed overseas

Some service providers may store or process information outside New Zealand.
Where personal information is disclosed overseas, we take reasonable steps to ensure it is protected in accordance with applicable New Zealand privacy requirements.

How long we retain information

Order and transaction records are retained for the periods required by our accounting, tax and legal obligations.
Customer-account information is retained while the account remains active or while it is reasonably required for customer support and business records.
Email-subscription information is retained until you unsubscribe or request its removal, subject to any records we must keep to confirm your subscription preferences.
Enquiries and other communications are retained only for as long as reasonably necessary.

Security

We take reasonable technical and organisational steps to protect personal information from loss, misuse, unauthorised access, alteration or disclosure.
No online system can be guaranteed completely secure, but we limit access to personal information to those who need it to operate the business and provide services.

Your privacy rights

Under the New Zealand Privacy Act 2020, you may ask for access to the personal information we hold about you and request that incorrect information be corrected.
You may also ask us to delete information that we are not legally or reasonably required to retain.
To make a privacy request, please use our contact form.

Changes to this policy

We may update this policy when our services, providers or legal obligations change. The current version will be published on this page with its latest revision date.

Contact

If you have a question or concern about your personal information, please contact KiteCoCreates through our contact form.