Collection of personal information

Needlecraft will take reasonable steps to ensure that the individual is aware of:

• Needlecraft’s identity and how to contact us,
• their ability to gain access to their personal information,
• the purposes for which the information is collected,
• the organisations (or the types of organisations) to which Needlecraft usually discloses information of that kind,
• any law that requires the particular information to be collected, and
• the main consequences (if any) for the individual if all or part of the information is not provided.

If Needlecraft collects personal information about an individual from someone else, Needlecraft will take reasonable steps to ensure that the individual is or has been made aware of the matters listed above.

Use and Disclosure

Generally Needlecraft will only use and disclose personal information for the primary purpose for which it was collected. For example, personal information may be used to provide a specific service or function to individuals, to process requests and transactions, and to communicate marketing offers and information to individuals.

This may include providing personal information to external organisations or to our related companies where they are assisting us to provide a service or function. Where we do provide third parties with personal information, we have measures in place to ensure they do not use the personal information for any purpose other than providing the relevant service or function.

Needlecraft will only use or disclose personal information about an individual for a purpose other than the primary purpose (the secondary purpose) of collection if:

1.  
   1. The secondary purpose is related to the primary purpose of collection; and
   2. The individual would reasonably expect Needlecraft to use or disclose the information for the secondary purpose; or
2. The individual has consented to the use or disclosure; or
3. If the information is not sensitive information and the use of the information is for the secondary purpose of direct marketing: it is impracticable for Needlecraft to seek the individual’s consent before that particular use; and
   1. Needlecraft will not charge the individual for requesting to not receive direct marketing communications; and
   2. the individual has not made a request to Needlecraft not to receive direct marketing communications; and
   3. in each direct marketing communication with the individual, Needlecraft directly advises the individual, or prominently displays a notice, that he or she may express their desire not to receive any further direct marketing communications; and
   4. each written direct marketing communication by Needlecraft with the individual (up to and including the communication that involves the use) sets out Needlecraft’s business address and telephone number and, if the communication with the individual is made by fax, telex or other electronic means, a number or address at which Needlecraft can be directly contacted electronically; or
4. Needlecraft has reason to suspect that unlawful activity has been, is being or may be engaged in, and uses or discloses the personal information as a necessary part of its investigation of the matter or in reporting its concerns to relevant persons or authorities; or
5. the use or disclosure is required or authorised by or under law; or
6. Needlecraft reasonably believes that the use or disclosure is reasonably necessary for one or more of the following by or on behalf of an enforcement body:
   1. the prevention, detection, investigation, prosecution or punishment of criminal offences, breaches of a law imposing a penalty or sanction or breaches of a prescribed law;
   2. the enforcement of laws relating to the confiscation of the proceeds of crime;
   3. the protection of the public revenue;
   4. the prevention, detection, investigation or remedying of seriously improper conduct or prescribed conduct;
   5. the preparation for, or conduct of, proceedings before any court or tribunal, or implementation of the orders of a court or tribunal.

Data quality

Needlecraft will take reasonable steps to ensure that the personal information we collect, use or disclose is accurate, complete and up-to-date. If you believe that the information held is inaccurate please do not hesitate to contact the Privacy Officer below.

Data Security

Needlecraft will take reasonable steps to protect the personal information we hold from misuse and loss and from unauthorised access, modification or disclosure. Needlecraft stores personal information in various secure electronic storage facilities and paper-based files.Needlecraft will also take reasonable steps to destroy or permanently de-identify personal information if it is no longer needed for any purpose for which the information may be used or disclosed.

Openness

Needlecraft policy on our management of personal information is set out in this document, as may be amended by Needlecraft from time to time. To ensure you have a copy of the most current version of Needlecraft’s privacy statement, please refer to Needlecraft’s website: https://www.needlecraft.co.nz/.

Access and Correction

If Needlecraft holds personal information about an individual, we will provide the individual with access to the information on request by the individual, except to the extent that:

1. in the case of personal information other than health information-providing access would pose a serious and imminent threat to the life or health of any individual; or
2. providing access would have an unreasonable impact upon the privacy of other individuals; or
3. the request for access is frivolous or vexatious; or
4. the information relates to existing or anticipated legal proceedings between the organisation and the individual, and the information would not be accessible by the process of discovery in those proceedings; or
5. providing access would reveal the intentions of Needlecraft in relation to negotiations with the individual in such a way as to prejudice those negotiations; or
6. providing access would be unlawful; or
7. denying access is required or authorised by or under law; or
8. providing access would be likely to prejudice
   1. an investigation of possible unlawful activity; or
   2. the prevention, detection, investigation, prosecution or punishment of criminal offences, breaches of a law imposing a penalty or sanction or breaches of a prescribed law; or
   3. the enforcement of laws relating to the confiscation of the proceeds of crime; or
   4. the protection of the public revenue; or
   5. the prevention, detection, investigation or remedying of seriously improper conduct or prescribed conduct; or
   6. the preparation for, or conduct of, proceedings before any court or tribunal, or implementation of its orders;by or on behalf of an enforcement body; or
9. an enforcement body performing a lawful security function asks Needlecraft not to provide access to the information on the basis that providing access would be likely to cause damage to the security of the country.

However, where providing access would reveal evaluative information generated within Needlecraft in connection with a commercially sensitive decision making process, Needlecraft may give the individual an explanation for the commercially sensitive decision rather than direct access to the information.

If Needlecraft is not required to provide the individual with access to the information because of one or more of the above paragraphs Needlecraft will, if reasonable, consider whether the use of mutually agreed intermediaries would allow sufficient access to meet the needs of both parties.

If Needlecraft charges for providing access to personal information, those charges:

1. will not be excessive; and
2. will not apply to lodging a request for access.

If Needlecraft holds personal information about an individual and the individual is able to establish that the information is not accurate, complete and up-to-date, Needlecraft will take reasonable steps to correct the information so that it is accurate, complete and up-to-date.

If the individual and Needlecraft disagree about whether the information is accurate, complete and up-to-date, and the individual asks Needlecraft to associate with the information a statement claiming that the information is not accurate, complete or up-to-date, Needlecraft will reasonable steps to do so.

Needlecraft is obliged to provide reasons for denial or refusal of access to correct personal information. If you would like to access any personal information held by Needlecraft about you, please do not hesitate to contact the Privacy Officer below.

Identifiers

Needlecraft does not use identifiers such as Tax File Numbers to identify individuals.

Anonymity

Where lawful and practicable, Needlecraft will provide individuals with the option of not identifying themselves when providing personal information.

Transborder Data Flows

Needlecraft may transfer personal information about an individual to someone (other than Needlecraft or the individual) who is in a foreign country only if:

1. Needlecraft reasonably believes that the recipient of the information is subject to a law, binding scheme or contract which effectively upholds principles for fair handling of the information; or
2. the individual consents to the transfer; or
3. the transfer is necessary for the performance of a contract between the individual and Needlecraft, or for the implementation of pre-contractual measures taken in response to the individual’s request; or
4. the transfer is necessary for the conclusion or performance of a contract concluded in the interest of the individual between Needlecraft and a third party; or
5. all of the following apply:
   1. the transfer is for the benefit of the individual;
   2. it is impracticable to obtain the consent of the individual to that transfer;
   3. if it were practicable to obtain such consent, the individual would be likely to give it; or
6. Needlecraft has taken reasonable steps to ensure that the information that it has transferred will not be held, used or disclosed by the recipient of the information inconsistently with this Privacy Statement.

Sensitive Information

Generally Needlecraft does not collect sensitive information. In the event Needlecraft does wish to collect sensitive information however, we will not do so unless:

1. the individual has consented; or
2. the collection is required by law; or
3. the collection is necessary to prevent or lessen a serious and imminent threat to the life or health of any individual, where the individual whom the information concerns
   1. is physically or legally incapable of giving consent to the collection;
   2. physically cannot communicate consent to the collection; or
4. the collection is necessary for the establishment, exercise or defence of a legal or equitable claim.

Use and purpose of collected personal data

On our Web sites we only collect information relating to you with your permission. You may choose to reveal information to us if, for example, you register or complete a survey. Companies in the Needlecraft group may use the information internationally in connection with processing your inquiries and orders or to help improve our products and services. We would only share such information with third parties outside the Needlecraft group with your express permission or as required by law. It is used solely for the purposes described below.

Online security

Needlecraft supports secure online shopping using secure server technology, because we want your shopping experience to be simple and safe. There are state-of-the art security arrangements and facilities on Needlecraft sites to prevent security abuse. The secure server technology used on Needlecraft Store encrypts your personal financial information before it is transmitted over the Internet. This technology works best when the store site is viewed using a browser that supports secure server technology.

Privacy across the entire Needlecraft network

As a global company, Needlecraft operates a number of Web sites around the world. Any information that you submit to one of our sites in any one country or language may be sent electronically to a server for one of these sites in another country. As such, the information may be used, stored, or processed outside the country where it was recorded. We safeguard your privacy interests around the world by ensuring that the Needlecraft site adheres to our policies described in this statement.We bind our employees to observe your privacy and confidentiality rights.

Consent

By using our Web sites, you consent to the collection and use of the information as described here. If we decide to make changes to this privacy statement, we will post the changes on this page so that you will always know what information we collect, and how we use it.

IP addresses

We may use your IP address to help diagnose problems, to administer our Web site, or to gather general demographic information.

Cookies

We use cookies to make your use of our online offering more enjoyable and to deliver personalised content. Cookies help us give you information that interests you, they save you having to reenter your password every time you visit our site, and help to keep track of your shopping cart. Cookies also allow us to better analyse our site traffic patterns so that we can improve our Web offering. We do not follow your browsing path outside of the Needlecraft site; Web partners that serve ads onto our Web site may also use their own cookies.

User registration

You may choose to fill out a registration form on our Web site with contact information. This information is used to send you requested information or products, to contact you with other product information, news, or promotions, and to learn more about our Web visitors.

E-mail addresses

If you give us your e-mail address, we may communicate with you via e-mail. However, we will not share your e-mail address with others outside the Needlecraft group of companies without your consent. You can choose not to receive e-mails at any time - for more details, read the Choice/Opt-out section below. Depending how your e-mail application is set up, information about you may be transmitted automatically when you send e-mail to Needlecraft.

Registration for third-party services at Needlecraft

At Needlecraft you can register for third party services. Those services are available through Needlecraft, but are provided by a third party, which is typically not affiliated with Needlecraft. When you sign up for one of these services, it may be necessary to transfer some of your Needlecraft.com registration information to this service provider. Also, if the service you chose requires your e-mail address to fulfill this service, we will also give your e-mail address to the service provider. This means we will pass your e-mail address to a service provider only in the event that you specifically asked for this service and the service cannot be provided without your e-mail address. For privacy practices and opt-out procedures of those service providers, refer to the individual privacy policy of the respective service provider.

"Send this to a friend" service

You can choose to forward information, a Web page, or link to someone else using our "Send this to a friend" e-mail service. In order to do that, you provide us with your e-mail address, as well as that of the recipient. This information is used only in the case of transmission errors and, of course, to let the recipient know who sent the e-mail. The information is not used for any other purpose.

Shopping

Our site includes order forms that you fill out to request information, products, and services. These forms collect your financial information, such as your banking details or credit card. We will only use this financial information that you submit solely for billing and payment purposes.

Online surveys

Occasionally we conduct online surveys. Our surveys may ask you for demographic information, such as postal codes or your industry sector. If the online survey collects contact data, we may use that data to send you further information only if we specifically asked for your permission in the survey. You are free to opt out of receiving future mailings at any time. For more details, read the Choice/opt-out section below.

Demographic and user profile data

We may use demographic or user profile data we collect to tailor your Web experience, showcase content that we think may interest you, and display information that matches your preferences. This data also gives us an insight into your needs and interests.

Unsubscribe from Needlecraft newsletter

If you no longer wish to receive our free newsletter Needlecraft Newsletter, you can cancel your subscription at any time. Just send an e-mail message to sales@needlecraft.co.nz with “Unsubscribe” in the subject field.

Removal from our registration database

If you wish to be removed from the Needlecraft’s Web registration database, please contact:

Removal from other Needlecraft e-mail lists

If you no longer wish to receive other information or promotional e-mails from Needlecraft, follow the opt-out instructions on the last e-mail you received.