Legal

Privacy Policy

Last updated: 1 May 2026

This Privacy Policy explains how Crafts by Jo ("we", "us", or "our") collects, uses, and protects your personal information when you visit our website or place an order, in accordance with the New Zealand Privacy Act 2020.


What information we collect

When you browse our site or place an order, we may collect the following:

  • Contact details — your name, email address, phone number, and delivery address
  • Payment information — we do not collect or store card numbers or payment credentials
  • Order history — items purchased, amounts paid, and delivery status
  • Usage data — anonymous browsing data to help us understand how our site is used (only collected with your consent via analytics tools)

How we use your information

We use the information we collect to:

  • Process, fulfil, and deliver your orders
  • Send order confirmations, invoices, and shipping updates
  • Respond to your questions and customer service requests
  • Improve the website experience (analytics data only, and only with your consent)
  • Meet any legal obligations we may have

We do not sell, rent, or share your personal information with third parties for marketing purposes.


How we protect your information

We take reasonable steps to keep your personal information safe, including:

  • Using HTTPS encryption across the entire website
  • Limiting access to personal data to only those who need it to operate the business

Cookies

Our website may use cookies for essential functions and, with your consent, for analytics. You can disable cookies in your browser settings at any time, though some features may not work correctly as a result.


Your rights

Under the New Zealand Privacy Act 2020, you have the right to:

  • Access the personal information we hold about you
  • Correct any information that is inaccurate or out of date
  • Request deletion of your information (where we are legally permitted to do so)
  • Withdraw consent to analytics or marketing communications at any time

To exercise any of these rights, please get in touch using the contact details below.


Third-party services

We use the following third-party services which may process your data on our behalf:

  • Amazon Web Services — secure cloud hosting and file storage
  • New Zealand Post / courier providers — order delivery

These providers have their own privacy policies and we encourage you to review them.


Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to check back periodically.


Contact us

If you have any questions or concerns about this Privacy Policy, please reach out via our Contact page.