Privacy Policy

This website, www.rubbertree.co.nz, is operated by Majestic Textiles Limited, trading as Rubbertree (we, us, our). We are committed to protecting your privacy. This policy explains how we collect, use, disclose and look after your personal information in accordance with the Privacy Act 2020.

It applies to personal information we collect through our website and through any other channel, including phone, email and in person.

We collect the following personal information:

• Contact and identity details: your name, email address, phone number, and delivery and billing addresses.
• Order details: the products you order, your order history, vehicle details saved in your “My Garage”, reviews you submit through our reviews provider, and your communications with us (including enquiries, claims and feedback).
• Payment details: payments are processed by the payment provider(s) listed on our website (including Visa, Mastercard, AMEX, PayPal, Afterpay). We do not store your full payment card details on our own systems.
• Technical and usage information: your IP address, device and browser type, the pages you view and how you interact with our website, collected through cookies and similar technologies (see section 4).
• Marketing preferences: whether you have asked to receive, or stop receiving, marketing from us.

We collect this information:

• directly from you, when you place an order, create an account, fill out a form, subscribe to our mailing list, or contact us;
• automatically, through cookies and similar technologies on our website; and
• from third parties, such as our payment providers, couriers and platform providers (for example, to confirm payment or delivery) and Google and Meta (for example, information about how you interacted with our advertising). Where we collect personal information about you from someone other than you, we will tell you, to the extent required by the Privacy Act 2020.

You can browse our website anonymously. However, to place an order we need your name, contact details, delivery address and payment details. If you do not provide them, we will not be able to process or deliver your order. Providing other information, such as marketing preferences, is voluntary.

We use your personal information to:

• process and deliver your orders, take payment, and handle returns, repairs, refunds and claims (including under the Consumer Guarantees Act 1993);
• respond to your enquiries and provide customer service and support;
• send you order and delivery updates;
• send you marketing about our products and offers, where you have consented or where the law otherwise permits;
• analyse how our website is used, and improve our website, products and services;
• measure and manage our advertising, including showing you relevant advertising on other platforms; and
• keep records, prevent fraud, keep our website and systems secure, and meet our legal obligations (such as tax and accounting requirements).

We will only use your personal information for these purposes, for a directly related purpose, or as otherwise permitted by law.

Marketing: we comply with the Unsolicited Electronic Messages Act 2007. We send marketing SMS only if you have opted in to it. Every marketing message includes an unsubscribe option, and you can also opt out at any time by contacting us using the details in section 11.

We use cookies and similar technologies (such as pixels and tags) on our website. These include:

• essential cookies, which make the website and checkout work;
• analytics cookies, which help us understand how our website is used (we use Google Analytics); and
• advertising cookies, which help us measure and manage our advertising and show you relevant advertising on other sites and apps. These may be placed by third parties such as Google, Meta and Attentive.

Google and Meta may collect information about your visit and use it in accordance with their own privacy policies, including to combine it with other information they hold about you. You can find out more and manage your settings here:

• Google: policies.google.com/privacy
• Meta: facebook.com/privacy/policy

You can also block or delete cookies through your browser settings. If you block essential cookies, parts of our website, including checkout, may not work properly.

We do not sell your personal information. We may share it with:

• service providers who help us run our business and who may only use the information to provide services to us, including Shopify (with entities in Canada, the United States, Ireland and Singapore), our payment providers, couriers and delivery providers, our order management and fulfilment system provider, marketing providers (including Attentive for email and SMS), our reviews provider (Yotpo), and IT and hosting providers;
• Google and Meta, as described in section 4;
• our professional advisers, insurers and auditors;
• government agencies, regulators, the courts, and law enforcement, where we believe on reasonable grounds that disclosure is necessary to avoid prejudice to the maintenance of the law, to prevent or lessen a serious threat to public health or safety or to the life or health of a person, or where disclosure is otherwise required or authorised by law; and
• a buyer or successor, if our business or its assets are sold or restructured, in which case the information will continue to be handled in line with this policy.

We may share aggregated or de-identified information (which does not identify you) with other parties for marketing, advertising or analysis.

Some of the providers described above, including Google and Meta, Shopify, Attentive, Yotpo and our payment providers, store or process information outside New Zealand. Shopify has entities in Canada, the United States, Ireland and Singapore, and Google and Meta are in the United States. Attentive is in the United States, and Yotpo is in the United States and Israel. Information collected by Google and Meta through cookies on our website is handled by them under their own policies, and may not be protected by laws comparable to the Privacy Act 2020.

Where we ourselves disclose your personal information to a provider overseas, we will only do so if the provider is subject to privacy laws that provide comparable safeguards, or is bound by an agreement requiring it to protect the information in a comparable way, or if you have authorised the disclosure after we have told you the information may not be protected to the same standard.

We take reasonable steps to protect your personal information against loss, unauthorised access, use, modification or disclosure and other misuse. These steps include secure (encrypted) connections, access controls and the use of reputable payment providers.

If a privacy breach occurs that is likely to cause you serious harm, we will notify you and the Privacy Commissioner as required by the Privacy Act 2020.

We keep personal information only for as long as we need it for the purposes described in this policy or as the law requires (for example, we keep tax and accounting records for seven years). When we no longer need it, we will securely delete or de-identify it.

You are entitled to ask us to confirm whether we hold personal information about you, to give you access to it, and to correct it if it is wrong. To make a request, contact our Privacy Officer using the details in section 11. We may need to verify your identity first. We will respond within 20 working days of receiving your request, as required by the Privacy Act 2020. In some circumstances the Act allows us to refuse or limit access, and if we do, we will tell you why.

If we decide not to correct information as you have asked, you may ask us to attach a statement of the correction you sought to the information.

If you have a concern about how we have handled your personal information, please contact our Privacy Officer first so we can try to resolve it. If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner at www.privacy.org.nz or on 0800 803 909.

For any privacy questions, requests or complaints, please contact our Privacy Officer:

Privacy Officer

Majestic Textiles Limited, trading as Rubbertree

3 Bancroft Crescent, Glendene, Auckland 0602, New Zealand

Email: orders@rubbertree.co.nz

Phone: 0800 200 021

We may update this policy from time to time. The current version is always available on our website, with its effective date shown at the top. If we make a significant change, we will notify you by email or by a notice on our website.