Who we are
Our website address is: https://www.cba-design.co.nz.
What personal data we collect
Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).
We collect a variety of information about our customers and visitors to the CBA Design website. This personal data falls into these categories:
Identity Data includes title, first name, last name, username or similar identifier. If you interact with us through social media, this may include your social media user name.
Contact Data includes billing address, delivery address, email address and telephone numbers.
Financial Data includes payment card details.
Transaction Data includes details about payments to and from you and other details of products and services you have purchased from us.
Technical Data includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website.
Usage Data includes information about how you use our website, products and services.
Tracking Data includes information we or others collect about you from cookies and similar tracking technologies, such as web beacons, pixels, and mobile identifiers.
Marketing and Communications Data includes your preferences in receiving direct marketing from us and our third parties and your communication preferences.
We also collect, use and share Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data may be derived from your personal data but is not considered personal data in law as this data does not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific website feature. To provide better content and service, our website uses Google Analytics.
However, if we combine or connect Aggregated Data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this privacy policy.
We do not collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data). Nor do we collect any information about criminal convictions and offences.
Remember, if you choose not to share personal data with us, or refuse certain contact permissions, we might not be able to provide the products and services you’ve asked for.
How and why we collect your personal data
We use different methods to collect data from and about you including through:
Direct interactions. You may give us your Identity, Contact and Financial Data by filling in forms or by corresponding with us by post, phone, email or through chat or social media.
This includes personal data you provide when you:
- make enquiries or request information be sent to you;
- order our products or services;
- ask for marketing to be sent to you;
- engage with us on social media;
- enter a competition, promotion or survey;
- contact customer services; or
- leave comments or reviews on our products or services.
Automated technologies or interactions. As you interact with us, including via the cba-design.co.nz website, we may automatically collect Technical Data about your equipment, browsing actions and patterns. We may also collect Tracking Data when you use our website, or when you click on one of our adverts (including those shown on third party websites).
Third parties or publicly available sources. We may receive personal data about you from various types of third parties, including:
- Technical Data and/or Tracking Data from analytics providers, advertising networks and search information providers;
- Contact, Financial and Transaction Data from providers of payment and fraud prevention services;
- Identity and Contact Data from data partners; and
- Data from any third parties who are permitted by law or have your permission to share your personal data with us, such as via social media or review sites We will only use your personal data when the law allows us to.
Media
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
Contact forms
If you use a contact form on our site you may provide us with your name, email address and phone number. We use this information so that we can respond to your request.
Cookies
If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you have an account and you log in to this site, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.
Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracing your interaction with the embedded content if you have an account and are logged in to that website.
How long we retain your data
If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognise and approve any follow-up comments automatically instead of holding them in a moderation queue.
For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
What rights you have over your data
If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
Where we send your data
We may share your personal data with the parties set out below for the purposes set out in this privacy policy. We may also share your personal data if the law otherwise allows it.
We may share personal data with the following third parties:
- Suppliers and service providers (such as technology service providers, payment processing and fraud prevention providers, manufacturers and post and courier services);
- auditors and professional advisers like bankers, lawyers, accountants and insurers; and
- government, regulators and law enforcement.
Visitor comments may be checked through an automated spam detection service.
How to contact us about this privacy policy
If you have any questions about this privacy policy, or would like to exercise any of your rights, please email us at [email protected] or write to us with your letter addressed to: Data Privacy Manager, CBA Design, 18 Waller Street, Onehunga, Auckland, New Zealand.