We are committed to protecting your privacy and handling your personal information in an open and transparent way, in accordance with our obligations under the Privacy Act 2020. This Policy sets out how we collect, handle, store and protect the personal information of our customers and users of Candy CO while conducting our business.
What does this policy cover?
When you visit our website, contact us, or deal with any of our team members, you share some of your personal information with us. One of our main priorities is the privacy of our visitors.
References in this policy to “Candy Co”, “candyco.co.nz”, “we”, “our”, or “us” refers to Candy Co Limited, which owns and manages Candy Co and our website.
07 214 8080
The information provided in this Policy is to provide general information only. While we take all reasonable steps to ensure the information provided is current and correct, we make no representation or warranty of any kind (express or implied) about the completeness, accuracy, reliability, suitability, or availability in respect to Candy Co, or information, products, services or related graphics contained on our website or as supplied to you, for any purpose. If the event that you rely on the information provided to you, you do so at your own risk. We suggest you make your own enquiries to ensure the information and products are appropriate for you specifically.
We will not be held liable for any loss or damage, including (without limitation): indirect or consequential loss or damage, or any loss or damage whatsoever arising from loss of data or profits arising out of, or in connection with, the use of Candy Co, our products, or your interaction with us.
While we endeavour to ensure our website is current and running smoothly, we take no responsibility for, and will not be held liable for, the website being temporarily unavailable due to technical issues that are beyond our control.
What is personal information?
Personal information is any information which tells us something about a specific individual.
We will only collect your personal information, such as (but not limited to) your name, date of birth, gender, email address, phone number, and postal address) when it is necessary to do so. The type of information we may collect is dependent on the relationship you hold with us. You may decide you do not want to provide us with your personal information. In this instance, please keep in mind that we may not be able to provide you with access to certain information or services.
When you register for a Candy Co account, we may ask for your contact information, including items such as name, company name, address, email address, and telephone number.
We may also collect information for the purpose of fulfilling administrative functions associated with our provided services, i.e., billing, entering into agreements with you and managing client relationships.
In any instance you choose to interact with us, we may use automatic technology (such as monitoring software, cookies, sessions) to allow us to collect and store certain information and improve your experience when using our website. Please see our Cookies Policy (below) for more information.
Use and Disclosure
How we use and disclose your personal information is dependent on what services we are providing to you, or the purpose of our interaction with you.
We will never use or disclose your personal information, except in accordance with the Privacy Act 2020 or as otherwise required by New Zealand law. We may use your personal information for the below purposes (this list is not exhaustive):
•Communication with you;
•Engagement with you as a client (this may involve verifying your identity and the identity of any authorised person(s) as defined in our Terms and Conditions);
•Providing our services and products to you, or any third-party integrated services;
•In following any instructions you have given us;
•Administering your account with Candy Co;
•Understanding and analysing your use of our site and your interaction with our services and products;
•Providing, operating and maintaining our website;
•Improving, personalising, and expanding our website;
•Developing new products, services, features and functionality;
•Carrying out market and promotional activities;
•Conducting internal research, development, and the optimisation of our services and products;
•Disclosing further information, new marketing and promotional material to you; and
•Improving our services and products, and customising your experience with us to your preferences;
•Finding and preventing fraud.
Any personal information we collect will only be retained for as long as it is required for the purposes of what the information was collected for.
Storage and security
We may hold any personal information collected. We will take all reasonable efforts to protect any personal information you have given us that we hold from loss, misuse, unauthorised access, disclosure, alteration, or destruction. Please note that while we promise to take any reasonable measures to do so, we cannot absolutely exclude the possibility that Candy Co’s security may be compromised by unauthorised access, hacking, computer viruses, malware, spyware etc.
Candy Co follows a standard procedure of using log files. These files log visitors when they visit websites. All hosting companies do this and a part of hosting services’ analytics. The information collected by log files include internet protocol (IP) addresses, browser type, Internet Service Provider (ISP), date and time stamp, referring/exit pages, and possibly the number of clicks. These are not linked to any information that is personally identifiable. The purpose of the information is for analysing trends, administering the site, tracking users’ movement on the website, and gathering demographic information.
What are Candy Co’s responsibilities?
If there is a personal data breach related to our retention and processing of personal information, we will endeavour to notify you as soon as possible. We have an obligation to inform the Privacy Commissioner of any data breaches that are likely to or have caused serious harm to an affected individual.
How can customers access or correct their personal information?
Under the Privacy Act 2020, you have the right at any time to request access to or correction of any personal information we hold relating to you. You can do so by contacting us.
To ensure any personal information we hold about you is accurate and up to date, please inform us if there are any changes to your personal information as soon as possible.
We do not have control over the nature, content, and availability of any of the websites you may be directed to, or presented with, a link to during your engagement with us, which are not under our control. Our inclusion of such links does not automatically imply a recommendation or endorsement on our behalf of the views expressed within the link(s).
Updates to this Policy
We reserve the right to update or review this Policy at our discretion. Any changes made to the Policy will take effect immediately following their publication on our website. Please review this Policy regularly in case of modifications and updates. Your continued use of our services and website and/or further disclosure of personal information indicates your acceptance of any changes.
If you are unhappy about the way we have handled your private information, you can make a complaint to our nominated Privacy Officer at the contact details listed below.
The Privacy Officer will consider any complaints they receive to determine whether there are any steps that can be immediately undertaken to resolve the complaint. We will try to response to any complaints placed within five working days.
If an in-depth investigation is needed for a complaint, we will acknowledge receiving the complaint within five working days and will take all practicable measures to resolve the complaint as quickly as possible. We may need further information from you regarding the complaint, and the outcome you’re after. We will then work through the process of gathering any relevant information, locate and review all relevant documents and speak to any individuals involved in the matter.
In most circumstances, we will carry out an investigation and respond to a complaint within 30 working days of having received the complaint. If the investigation is expected to take longer than 30 working days, for whatever reason, we will inform you as soon as possible.
Following receiving a response from us on the outcome of the investigation of the complain and you are still dissatisfied, or you believe we may have breached our obligations under the Privacy Act 2020, you may place a complain to the Office of the Privacy Commissioner.