New Zealand Privacy Policy

Platinum Health Supply — New Zealand Privacy Policy

1. Application

1.1 This policy applies when you purchase anything ("Items") from Platinum Health Supply, including via our website (the "Website"), or an email order, and to any of your dealings with us, where you are located in New Zealand.

1.2 This policy operates alongside our New Zealand General Terms and Conditions, available on our Website.

1.3 References to "us", "we" or "our" mean Platinum Closing Pty Ltd ACN 640 026 115, trading as Platinum Health Supply Group, and references to "you" mean you.

1.4 This policy explains how we manage personal information under New Zealand's Privacy Act 2020, and how to contact us if you have questions about how we do this.

1.5 This policy does not apply to how we handle personal information about our employees.

1.6 We are subject to the Privacy Act 2020 because we offer goods to individuals located in New Zealand, even though we do not have an office there. The Act applies to any agency carrying on business in New Zealand, regardless of physical presence.

2. The personal information we collect

2.1 We may collect the following personal information:

your name;
contact details, including postal and email address and telephone number;
order and payment history relevant to your purchases from us; and
other personal information relevant to us providing our products and services to you.

2.2 Our outsourced service providers, including payment processors and platform providers such as Stripe, PayPal and Shopify, collect some of the above information directly, along with payment card data. We do not collect or store payment card data ourselves. Please refer to each provider's own privacy policy for how they handle this information.

3. How we collect and use personal information

3.1 We will only collect personal information that is necessary for a lawful purpose connected with our functions or activities, and only by lawful and fair means.

3.2 At or before the time we collect personal information from you, we will take reasonable steps to ensure you are aware of the purpose for which it is being collected, the intended recipients of the information, and our contact details.

3.3 We collect and use your personal information to:

fulfil your order and provide customer support;
communicate with you about your order and, where you have agreed to receive them, our products and promotions;
process payment and prevent fraud;
comply with our legal obligations; and
improve our services, including through customer and market research and analytics.

3.4 We will not use your personal information for a purpose other than the one for which it was collected, or a directly related purpose, without your authorisation, except where the Privacy Act 2020 otherwise permits.

4. Disclosure of personal information

4.1 We may disclose your personal information to:

outsourced service providers, including payment processors and platform providers;
our related bodies corporate;
our professional advisors, including legal and accounting advisors; and
government or regulatory authorities, where required or authorised by law.

4.2 Where an overseas service provider holds or processes your personal information on our behalf as our agent, for example to provide hosting, payment processing, or customer support functions, this is not treated as a disclosure under the Privacy Act 2020, and we remain responsible for ensuring that provider handles your information in accordance with this policy.

5. Transfer of your personal information overseas

5.1 We are based in Australia, and your personal information will be transferred to, and processed in, Australia in order for us to provide our products and services to you.

5.2 Where we disclose your personal information to another overseas organisation, other than an agent described in section 4.2, we will only do so where we reasonably believe that organisation is:

subject to the Privacy Act 2020 because it carries on business in New Zealand;
subject to privacy laws that, overall, provide comparable safeguards to the Privacy Act 2020;
party to a binding scheme, or subject to the privacy laws of a country, prescribed by the New Zealand government for this purpose; or
otherwise bound by a contract requiring it to protect your information to a standard comparable to the Privacy Act 2020.

5.3 If none of these apply, we will only disclose your personal information to that overseas organisation with your express authorisation, after informing you that it may not receive the same protection as under the Privacy Act 2020.

6. Data security and retention

6.1 We take reasonable security safeguards to protect the personal information we hold against loss, unauthorised access, use, modification, or disclosure.

6.2 We do not retain personal information for longer than necessary for the purpose for which it was collected, unless a longer period is required by law.

7. Data breach notification

7.1 If we become aware of a privacy breach involving your personal information that has caused, or is likely to cause, you serious harm, we will notify the Office of the Privacy Commissioner and you, as soon as practicable, and in line with the Privacy Commissioner's published expectation of notification within 72 hours of becoming aware the breach is notifiable.

7.2 You can contact our Privacy Officer at customercare@phsgroup.com.au.

8. Access and correction of your personal information

8.1 You have the right to request access to the personal information we hold about you, and to request that we correct it if it is inaccurate, incomplete, misleading, or out of date.

8.2 To make a request, please contact us at customercare@phsgroup.com.au. We will respond within a reasonable time, and will explain our reasons if we are unable to act on your request.

9. Contact us

If you have any queries about this policy, or how we manage your personal information, please contact us at customercare@phsgroup.com.au. If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner.