Privacy Policy

1) Personal information we collect

• Account & profile: name, email, login credentials, preferences, and related account details you provide.
• Age/eligibility: if we use an age gate, we may collect your age or confirmation that you meet minimum age requirements.
• Contact & support: messages, form entries, emails, call records (where permitted), and information you choose to share with support.
• Device & usage data: IP address, device identifiers, browser type, pages viewed, referring/exit pages, and approximate location derived from IP.
• Cookies & analytics: cookie IDs and similar technologies used for core functionality, preferences, and measurement.

2) How we use personal information

• Provide, maintain, and improve the Services; create and manage accounts.
• Process requests and respond to inquiries and support issues.
• Monitor performance, prevent fraud/abuse, and secure our systems.
• Comply with legal obligations and enforce our terms.
• Send service-related notices; marketing messages only where permitted and with applicable choices.

3) How we share personal information

We may disclose personal information to:

• Service providers that host, analyze, support, or secure the Services (acting on our instructions).
• Legal/Compliance when required by law, to protect rights and safety, or to investigate misuse.
• Business transfers in connection with a merger, acquisition, or sale of assets.

We do not knowingly sell personal information. If we engage in targeted advertising, we will provide an opt-out mechanism in accordance with the Privacy Act 2020 (NZ) and guidance from the Office of the Privacy Commissioner.

4) Cookies, analytics & “Do Not Track”

We use cookies and similar technologies for essential site functions and to understand usage. Your browser settings may allow you to block or delete cookies, but some features may not work properly. Some browsers offer “Do Not Track” signals; our Services may not respond to all such signals.

5) Data retention

We retain personal information for as long as reasonably necessary to provide the Services, fulfill the purposes described above, resolve disputes, enforce agreements, and comply with law. We may de-identify or aggregate information where permitted.

6) Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7) Children

The Services are intended for adults and are not directed to minors. We do not knowingly collect personal information from anyone under the minimum age applicable in New Zealand. If you believe a minor has provided personal information, contact us to request deletion.

8) Your privacy rights under New Zealand law

Under the Privacy Act 2020 (NZ), you have rights to: access the personal information we hold about you, request correction of inaccurate information, request deletion where applicable, withdraw consent where processing is consent-based, and complain to the Office of the Privacy Commissioner if you believe your rights have been breached. You may also opt out of marketing communications and any targeted advertising.

To exercise rights, email contact@kiwisvault.com or call +64 7 577 1475. We may verify your identity and request additional information. You may authorise an agent to make a request on your behalf, subject to verification. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of New Zealand (privacy.org.nz).

9) Changes to this policy

We may update this policy from time to time. We will post the updated version on this page and update the effective date.