Our commitment to your privacy

DLM Wallace is committed to protecting your personal information. This policy explains what personal information we collect, why we collect it, how we use and store it, and your rights under the Privacy Act 2020 (New Zealand).

This policy applies to www.dlmwallace.co.nz (the "site") and all personal information collected in connection with your use of the site.

1. What personal information we collect

We collect personal information when you interact with our site or our business. This may include:

When you place an order:

  • Name, billing and shipping address

  • Email address and phone number

  • Payment details (processed securely via Shopify Payments — we do not store full card numbers)

  • Order history and transaction records

When you create an account:

  • Name, email address, and password (encrypted)

  • Saved addresses and order history

When you contact us:

  • Name, email address, phone number, and the content of your enquiry

When you sign up for marketing:

  • Email address and communication preferences

Automatically when you visit the site:

  • IP address, browser type, and operating system

  • Pages visited, links clicked, and time spent on site

  • Referring website

  • Device type and screen resolution

We do not knowingly collect personal information from children under 16.

2. How we collect personal information

We collect personal information directly from you when you make a purchase, create an account, contact us, or subscribe to our newsletter.

We may also collect personal information indirectly — for example, through our third-party service providers (such as payment processors, analytics platforms, or courier companies). Where we collect your information from a source other than you directly, we will take reasonable steps to make you aware of this, as required by IPP 3A of the Privacy Act 2020 (effective 1 May 2026).

3. Why we collect personal information

We collect and use your personal information for the following purposes:

  • Processing orders — fulfilling purchases, arranging delivery, and managing returns

  • Customer service — responding to enquiries, providing warranty support, and resolving issues

  • Account management — maintaining your account if you choose to create one

  • Marketing — sending newsletters, product updates, and promotions, but only if you have expressly opted in. You may unsubscribe at any time.

  • Site improvement — analysing usage data to improve the site's performance and user experience

  • Legal compliance — meeting our obligations under applicable law

We will not use your personal information for any purpose that is incompatible with the purpose for which it was collected without your consent.

4. Cookies and tracking technologies

Our site uses cookies and similar technologies. These help us operate the site, understand how visitors use it, and deliver relevant content.

Types of cookies we use:

  • Essential cookies — required for the site to function (e.g., shopping cart, checkout session). These cannot be disabled.

  • Analytics cookies — we use Google Analytics and Google Tag Manager to collect aggregated, anonymised data about site usage. This helps us understand user behaviour and improve the site.

  • Marketing cookies — if you have consented, these allow us to show relevant advertising and measure campaign performance.

You can manage or disable non-essential cookies through your browser settings. Disabling cookies may affect some site functionality.

Google Analytics: DLM Wallace uses Google Analytics. You can review how Google collects, processes and stores data at google.com/policies/privacy/partners. We do not share information with Google that could be used to personally identify you. You can opt out of Google Analytics tracking by visiting Google Ads Settings.

5. Sharing your personal information

We do not sell your personal information. We may share it with third parties only where necessary to operate our business:

  • Shopify — our e-commerce platform provider, who hosts and processes our store data

  • Payment processors — to securely process transactions (e.g., Shopify Payments, Stripe, PayPal)

  • Courier and freight providers — to fulfil and deliver your orders

  • Google — for analytics and advertising services (see section 4 above)

  • Email marketing platforms — if you have subscribed to our newsletter

  • Professional advisers — accountants, lawyers, or consultants, where reasonably necessary

These third parties are required to handle your information securely and only for the purposes we specify.

6. Overseas disclosure

Some of our service providers are based outside New Zealand — including Shopify (Canada/USA) and Google (USA). When we share your personal information with these providers, we take reasonable steps to ensure they provide comparable privacy protections to those required under the Privacy Act 2020.

7. How we store and protect your personal information

We take reasonable steps to protect your personal information from loss, unauthorised access, use, modification, or disclosure. Measures include:

  • Secure HTTPS encryption across the site

  • Secure, access-controlled data storage via Shopify's infrastructure

  • Restricted internal access to personal information on a need-to-know basis

We retain your personal information for as long as it is needed for the purposes for which it was collected, or as required by law. Order records are generally retained for seven years for accounting and legal purposes.

8. Notifiable privacy breaches

Under the Privacy Act 2020, we are required to notify the Office of the Privacy Commissioner and affected individuals if we experience a privacy breach that poses a risk of serious harm. If we become aware of such a breach, we will act promptly in accordance with our legal obligations.

9. Your rights

Under the Privacy Act 2020, you have the right to:

  • Access the personal information we hold about you

  • Correct any personal information that is inaccurate or out of date

  • Request deletion of your personal information, subject to our legal obligations to retain certain records

To exercise any of these rights, please contact us using the details below. We may need to verify your identity before processing your request.

10. Marketing communications

We will only send you marketing emails if you have expressly opted in. You can unsubscribe at any time by clicking the "unsubscribe" link in any marketing email, or by contacting us directly. Unsubscribing from marketing does not affect transactional emails related to your orders.

11. Links to other websites

Our site may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies.

12. Changes to this policy

We may update this policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

13. Contact us

If you have any questions, concerns, or requests relating to this privacy policy or your personal information, please contact:

DLM Wallace 55 Maurice Road, Penrose, Auckland 1061 Phone: 09 622 9100 Email: enquiries@dlmwallace.co.nz

14. Privacy complaints

If you are not satisfied with our response to a privacy concern, you may contact the Office of the Privacy Commissioner:

Website: www.privacy.org.nz Phone: 0800 803 909

The Office of the Privacy Commissioner can investigate complaints and take action where a breach of the Privacy Act 2020 has occurred.

This privacy policy has been prepared with reference to the Privacy Act 2020 (NZ) and the Privacy Amendment Act 2025, including the new indirect collection notification requirements under IPP 3A, effective 1 May 2026.