Birty Dird Privacy Policy header graphic

Birty Dird Privacy Policy

Welcome to the Birty Dird Privacy Policy. Last updated: 30 April 2025

Birty Dird Privacy Policy.

Welcome to the Birty Dird Privacy Policy. At Birty Dird, your privacy matters. We keep it simple and respectful. Here’s how we handle your info at Birty Dird. — and how we stay in line with NZ laws like the Privacy Act 2020, Unsolicited Electronic Messages Act 2007, Fair Trading Act 1986, and the Consumer Guarantees Act 1993.

  • Your name, email address, shipping address, phone number and payment details
  • Order history and account activity
  • Comments and ratings you leave on products or blog posts
  • IP address and browser user agent for security and diagnostics
  • Cookie and browsing behaviour within our website
  • Device and browser details (e.g. IP, cookies)
  • Your preferences for emails or updates
  • An anonymised string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Seemed like a lot but it was an extensive list. We only collect what we need to serve you or meet legal obligations.

  • Process and fulfil your orders
  • Provide customer support
  • Improve our site and services
  • Detect and prevent fraud
  • Understand how users interact with our website (analytics)

You’ll only hear from us if you’ve given permission.

  • You can unsubscribe anytime by clicking the link in our emails or messaging us.

We’ll never sell your info to third parties.

When visitors leave product ratings or site comments, we collect the data shown in the form and the visitor’s IP address and browser user agent string to help detect spam. We use an automated spam detection service to screen comments.

If you use Gravatar, an anonymised hash of your email address may be provided to them to display your profile picture. Their privacy policy is here: Gravatar Privacy Policy. Once your comment is approved, your profile picture may be visible next to your comment.

Comments or ratings that are abusive, irrelevant, or misleading may be removed at our discretion.

We use cookies to:

  • Maintain session data and remember cart contents
  • Analyse traffic using Google Analytics
  • Measure drop-off points in the shopping process

When you log in, we set cookies to save your login info and screen preferences. Login cookies last for two days, and screen option cookies for one year. Selecting ‘Remember Me’ extends the login to two weeks. Logging out removes these cookies.

If you leave a comment on our site, you may opt in to saving your name, email address, and website in cookies. This is for your convenience so you don’t have to re-enter your details the next time you comment. These cookies last for one year.

We do not track users across websites or sell your data. For more details, see our Cookie Policy.

Although we use a local NZ web hosting service and servers. Some of our systems may store info overseas (e.g. with cloud services). We ensure your data is still protected under NZ privacy rules.

We only share your info with trusted third parties:

  • Services that help us (like couriers or payment providers)
  • Authorities if legally required
  • Advisors helping us run our business (e.g. accountants)

Everyone we work with must protect your data.
These providers are required to handle your data securely and only for the intended purpose.

We retain personal information only as long as necessary to provide our services, comply with legal obligations, or resolve disputes.

  • Comments and their metadata may be stored indefinitely to help us recognise and approve future comments automatically.
  • If you register an account (optional), the personal information you provide is stored in your user profile. You can view, edit, or delete this information at any time (except your username). Website administrators can also see and edit this data. Typically this is a minimum of seven years due to record-keeping rules under tax law and CGA for returns or disputes.
  • Website analytics up to two years.

You may contact us at any time to request deletion of your data, subject to any legal requirements we must follow.

You have the right to:

  • Lodge a complaint with the NZ Privacy Commissioner
  • Request access to your data
  • Correct or delete your data
  • Withdraw consent

We may occasionally update this Birty Dird Privacy Policy to reflect changes in our business practices, legal requirements or the way we collect and use your information. When we do, we will:

  • Revise the “Last updated” date at the top of this page so you always know when the policy was most recently changed.
  • Notify you directly (by email to the address you’ve provided) if we make any material changes that significantly affect how we handle your personal data.

We encourage you to review this policy from time to time so you’re always up to date on how we’re protecting your privacy.

For privacy-related inquiries, please contact us at birty@birtydird.com

  • Revise the “Last updated” date at the top of this page so you always know when the policy was most recently changed.
  • Notify you directly (by email to the address you’ve provided) if we make any material changes that significantly affect how we handle your personal data.

We encourage you to review this policy from time to time so you’re always up to date on how we’re protecting your privacy.