Privacy Policy — Nine2Five

1. Who we are

Nine2Five Limited ("Nine2Five", "we", "us") operates nine2five.nz. We are registered in New Zealand and collect personal information in accordance with the Privacy Act 2020.

If you have any privacy questions, contact us at nine2five.co.nz@gmail.com.

2. What we collect

Name, email address, and shipping address when you place an order
Phone number (optional, for delivery queries)
Payment details — processed securely by Stripe; we do not store card numbers
Email address if you sign up for back-in-stock alerts or marketing emails
Cart and browsing data to recover abandoned carts (with your consent)
IP address and browser information for security and fraud prevention

3. How we use your information

To process and fulfil your order
To send your order confirmation and tracking information
To send marketing emails — only if you opt in at checkout or via your account settings
To notify you when a product is back in stock (if you signed up for alerts)
To improve our website and detect fraud
To comply with our legal obligations as a GST-registered business

4. Marketing emails

We only send marketing emails to customers who have given explicit consent (opt-in checkbox at checkout, or via your account settings). Every marketing email includes an unsubscribe link. You can also unsubscribe at any time by emailing nine2five.co.nz@gmail.com.

Order confirmation and transactional emails (receipts, shipping updates) are sent regardless of marketing preferences as they are necessary to fulfil your purchase.

5. Who we share your information with

Stripe — payment processing (stripe.com/privacy)
eShip / CourierPost — to arrange delivery of your order
Resend — email delivery service
Supabase — secure database hosting

We do not sell your personal information to any third party.

6. Data retention

We retain order records for 7 years as required by the Tax Administration Act 1994 and GST Act 1985. If you request deletion of your account, we will delete your personal data except where retention is required by law.

7. Your rights

Under the Privacy Act 2020 you have the right to:

Request access to the personal information we hold about you
Request correction of inaccurate information
Request deletion of your personal information (subject to legal retention obligations)
Withdraw consent for marketing communications at any time

To exercise these rights, email nine2five.co.nz@gmail.com.

8. Cookies

We use essential cookies to maintain your cart session and remember affiliate referrals. We do not use third-party advertising cookies.

9. Security

All data is transmitted over HTTPS. Payment data is handled entirely by Stripe and never touches our servers. Customer data is stored in Supabase with row-level security enabled.

10. Changes to this policy

We may update this policy from time to time. The current version is always available at nine2five.nz/privacy. Continued use of the site after changes constitutes acceptance.