Privacy policy

Who we are

Stories on Doughis a New Zealand–based business. If you have any questions about your privacy, contact our Privacy Officer at privacy@storiesondough.co.nz.

What we collect and why

We collect only the personal information we need to fulfil your order: your name, delivery address, and email address. Your payment is handled by our payment provider (Stripe) on its own secure checkout page, so we never see or store your card details. We use the information we do hold to process, make, and deliver your order, to contact you about it, and (only if you've opted in) to send you marketing. Providing this information is voluntary, but we can't process or ship your order without it.

Product reviews

If you leave a review, we store the name you choose to display (or “Anonymous” if you prefer), your rating, and what you wrote, linked to the order that verifies the purchase. Only the display name, rating and review text are ever shown publicly, and only after we've approved it. Your email address is never published.

Who we share it with

We share your information only where it's needed to fulfil your order, with:

• our payment provider, which processes your payment;
• the courier or postal service that delivers your order;
• service providers who host our website and store order data on our behalf.

We don't sell your information to anyone.

Information sent overseas

Some of these providers (including our payment provider, website hosting, and analytics) may store or process your information outside New Zealand, for example in Australia and the United States. Before sharing information overseas we take reasonable steps to ensure it's protected by safeguards comparable to those under the Privacy Act 2020, usually through our contracts with those providers.

How we store and protect it

We take reasonable steps to keep your information safe from loss, misuse, and unauthorised access. Your full payment card details are handled directly by our payment provider and are never stored by Stories on Dough, and our site is served over a secure (HTTPS) connection.

Please note: while you're building an order, we save it in your own web browser (in “local storage” on your device) so your cart is there when you come back. That information stays on your device, isn't encrypted, and isn't sent to us until you check out, so take care on shared or public computers.

How long we keep it

We keep order information only as long as we need it for the purposes above and to meet our legal obligations such as tax records, then we securely delete it.

Cookies and analytics

We use Cloudflare Web Analytics to understand how people use our site so we can improve it. It's privacy-focused: it doesn't use cookies, doesn't track you across other websites, and doesn't build a profile of you. It collects only aggregated information such as the pages visited, the referring site, your approximate (country-level) location, and your device and browser type. We use this only to measure and improve the site, not to sell your information or to show you targeted ads.

Because it uses no cookies and doesn't identify you, there's nothing you need to opt out of. You can still limit web tracking generally using your browser's privacy settings or a privacy-focused browser add-on.

Your right to access and correct

You have the right to ask what personal information we hold about you, to get a copy of it, and to ask us to correct it if it's wrong. Email privacy@storiesondough.co.nz and we'll respond within the timeframes set by the Privacy Act 2020. If we can't correct something, you can ask us to attach a note recording the correction you requested.

Privacy breaches

If a privacy breach happens that's likely to cause serious harm, we'll notify the affected people and the Office of the Privacy Commissioner as required by the Privacy Act 2020.

Questions or complaints

Please raise any privacy concern with us first, at privacy@storiesondough.co.nz. If you're not satisfied with our response, you can contact the Office of the Privacy Commissioner (privacy.org.nz, or 0800 803 909).