— DATA PROTECTION & PRIVACY POLICY · TAP8
Your data.
Handled right.
TAP8 only collects personal information from people who buy our products (our customers). People who tap a TAP8 product are not asked for and do not provide any personal information to TAP8. We only record an anonymous tap count and timestamp per product — no names, no location, no device ID. We don't sell data. You have rights under the NZ Privacy Act 2020 and we take them seriously.
— 01 · WHO THIS POLICY APPLIES TO
This Privacy Policy applies to: (a) visitors to tap8.co.nz, and (b) people who place orders with TAP8 ("customers"). It does not apply to members of the public who tap a TAP8 product, as TAP8 does not collect personal information from tappers. TAP8 is a New Zealand-registered business based in Christchurch. This policy is governed by the New Zealand Privacy Act 2020.
— 02 · WHAT DATA WE COLLECT & WHY
| DATA TYPE | WHAT WE COLLECT | WHY WE COLLECT IT | LEGAL BASIS |
|---|---|---|---|
| Customer identity | Name, email address, company name | To process your order and communicate with you | CONTRACT |
| Delivery details | Physical delivery address | To ship your order | CONTRACT |
| Order information | Products ordered, quantities, payment status | Order fulfilment, invoicing, financial records | LEGAL OBLIGATION |
| Profile / customisation content | URL destination, engraving text, branding details, profile info you set up | To programme and produce your NFC product correctly | CONTRACT |
| Communications | Emails and enquiry form submissions | Customer support and order correspondence | LEGITIMATE INTEREST |
| Anonymous tap analytics | Tap count + timestamp per product only — no personal data, no location, no device ID | To provide product owners with basic usage statistics | ANONYMOUS · NOT PERSONAL DATA |
| Website analytics | Browser type, pages visited, time on site (via analytics cookies — anonymous) | To understand how our website is used and improve it | LEGITIMATE INTEREST |
We do not collect personal data from people who tap our NFC products. Tapping simply opens a webpage — no name, email, location, device ID, or any other identifier is captured by TAP8. We do not store payment card numbers (handled entirely by our payment processor). We do not sell, rent, or trade personal data to any third party for marketing purposes.
— 03 · HOW WE USE YOUR DATA
We use personal information only for the purposes for which it was collected. We do not repurpose your data without telling you. If we wish to send marketing communications, we will ask for your explicit opt-in consent separately. You can withdraw consent at any time by emailing support@tap8.co.nz or using the unsubscribe link in any marketing email.
— 04 · WHO WE SHARE YOUR DATA WITH
We share limited data with trusted service providers who are bound by confidentiality obligations and may not use your data for their own purposes:
- Payment processors — secure payment handling (we never receive your full card details)
- Courier and logistics providers — your name and delivery address only
- Email / CRM platform — to manage customer communications
- Website hosting and analytics provider — to operate and improve our website
- NFC platform provider — to host and manage your product's destination profile
We disclose personal information to government or law enforcement agencies only when required by NZ law. We do not sell data to any third party, ever.
— 05 · DATA STORAGE, SECURITY & RETENTION
We take reasonable technical and organisational steps to protect your personal information: HTTPS across all web properties, reputable cloud hosting with encryption at rest, and restricted internal access on a need-to-know basis. No online system is 100% secure. If you believe your data has been compromised, contact us immediately at support@tap8.co.nz. We will notify affected individuals of any privacy breach likely to cause serious harm, as required by the Privacy Act 2020.
Customer order records are retained for 7 years to comply with Inland Revenue requirements. We do not store any financial or credit card information, as all payments are securely processed through Stripe. Account profile and contact data is retained while your account is active. On a valid deletion request, your data will be deleted. Anonymous tap analytics are retained indefinitely as they contain no personal information.
— 06 · YOUR RIGHTS UNDER THE PRIVACY ACT 2020
Email support@tap8.co.nz with the subject "Privacy Request". We respond within 20 working days as required by the NZ Privacy Act 2020. We may ask you to verify your identity before actioning the request.
— 07 · COOKIES
Our website uses essential cookies (required for the site to function) and analytics cookies (anonymous usage data). A cookie consent banner is shown on first visit — you may decline non-essential cookies without affecting your ability to browse or enquire. Our NFC tap tracking does not use cookies and does not run in any browser. You can .
— 08 · CHANGES TO THIS POLICY
We may update this policy from time to time. The current version with effective date is always published on our website. Material changes will be communicated to existing customers by email where practicable.