Our commitment to your privacy

DLM Wallace is committed to protecting your personal information. This policy explains what personal information we collect, why we collect it, how we use and store it, and your rights under the Privacy Act 2020 (New Zealand).

This policy applies to www.dlmwallace.co.nz (the "site") and all personal information collected in connection with your use of the site.

 

1. What personal information we collect

We collect personal information when you interact with our site or our business. This may include:

When you place an order:

  • Name, billing and shipping address

  • Email address and phone number

  • Payment details (processed securely via Shopify Payments — we do not store full card numbers)

  • Order history and transaction records

When you create an account:

  • Name, email address, and password (encrypted)

  • Saved addresses and order history

When you contact us:

  • Name, email address, phone number, and the content of your enquiry

When you sign up for marketing:

  • Email address and communication preferences

Automatically when you visit the site:

  • IP address, browser type, and operating system

  • Pages visited, links clicked, and time spent on site

  • Referring website

  • Device type and screen resolution

Some personal information is required to complete a transaction — for example, we cannot process or deliver an order without a name and shipping address. Other information, such as signing up for our newsletter, is entirely voluntary. Where collection is voluntary, you can decline without affecting your ability to browse or purchase.

 

2. How we collect personal information

We collect personal information directly from you when you make a purchase, create an account, contact us, or subscribe to our newsletter.

We may also collect personal information indirectly — for example, through our third-party service providers (such as payment processors, analytics platforms, or courier companies). Where we collect your information from a source other than you directly, we will take reasonable steps to make you aware of this, as required by IPP 3A of the Privacy Act 2020 (which came into force on 1 May 2026). Examples of indirect collection include browsing data gathered by Google Analytics, Facebook Pixel, and MailerLite's tracking tools when you visit the site.

 

3. Why we collect personal information

We collect and use your personal information for the following purposes:

  • Processing orders — fulfilling purchases, arranging delivery, and managing returns

  • Customer service — responding to enquiries, providing warranty support, and resolving issues

  • Account management — maintaining your account if you choose to create one

  • Marketing — sending newsletters, product updates, and promotions, but only if you have expressly opted in. You may unsubscribe at any time.

  • Site improvement — analysing usage data to improve the site's performance and user experience

  • Legal compliance — meeting our obligations under applicable law


We will not use your personal information for any purpose that is incompatible with the purpose for which it was collected without your consent.

 

4. Cookies and tracking technologies

Our site uses cookies and similar technologies. These help us operate the site, understand how visitors use it, and deliver relevant content.

Types of cookies we use:


  • Essential cookies — required for the site to function (e.g., shopping cart, checkout session). These cannot be disabled.

  • Analytics cookies — we use Google Analytics and Google Tag Manager to collect aggregated, anonymised data about site usage. This helps us understand user behaviour and improve the site.

  • Marketing and advertising cookies — used by Facebook/Instagram and Google/YouTube to show relevant advertising and measure campaign performance, based on your browsing behaviour.

  • Email marketing cookies — MailerLite may set cookies to track email campaign engagement and site visits linked to your subscription.

You can manage or disable non-essential cookies through your browser settings. Disabling cookies may affect some site functionality.

Google Analytics & Google/YouTube Ads: DLM Wallace uses Google Analytics and Google Ads (including YouTube). You can review how Google collects, processes and stores data at google.com/policies/privacy/partners. You can opt out of Google Analytics tracking or manage your Google Ads preferences by visiting Google Ads Settings.

Facebook/Instagram: We use the Facebook Pixel to measure the effectiveness of our advertising on Facebook and Instagram. Meta's data practices are governed by the Meta Privacy Policy. You can manage your ad preferences at facebook.com/ads/preferences.

MailerLite: We use MailerLite to manage our email newsletter and marketing campaigns. If you subscribe, your email address and communication preferences are stored by MailerLite. See MailerLite's Privacy Policy for more information.

 

5. Sharing your personal information

We do not sell your personal information. We may share it with third parties only where necessary to operate our business:

  • Shopify — our e-commerce platform provider, who hosts and processes our store data. Shopify Network Intelligence may also process transaction data for fraud detection purposes.

  • Payment processors — to securely process transactions (e.g., Shopify Payments, Stripe, PayPal)

  • Courier and freight providers — to fulfil and deliver your orders (your name, address, and contact details are shared with the relevant carrier)

  • Google / YouTube — for analytics (Google Analytics, Google Tag Manager) and advertising (Google Ads, YouTube). See section 4 above.

  • Meta (Facebook / Instagram) — for advertising and campaign measurement via the Facebook Pixel. See section 4 above.

  • MailerLite — our email marketing platform. If you have subscribed to our newsletter, your email address and communication preferences are stored by MailerLite. See section 4 above.

  • Rivyo — our product reviews platform. If you submit a product review, your name and review content may be displayed publicly on the site. We share only the information necessary to facilitate the review, and Rivyo is required to handle it in accordance with applicable privacy laws.

  • Professional advisers — accountants, lawyers, or consultants, where reasonably necessary

Where third parties act as our service providers (e.g., Shopify, MailerLite, courier companies), they are required to handle your information securely and only for the purposes we specify. However, advertising and analytics platforms such as Google and Meta also process data for their own purposes — including improving their advertising services — in accordance with their own privacy policies. We encourage you to review those policies using the links in section 4.

 

6. Overseas disclosure

Some of our service providers are based outside New Zealand. These include:


  • Shopify — Canada and USA

  • Google / YouTube — USA

  • Meta (Facebook / Instagram) — USA

  • MailerLite — Lithuania and USA

  • Rivyo — India

When we share your personal information with these providers, we take reasonable steps to ensure they provide comparable privacy protections to those required under the Privacy Act 2020.

 

7. How we store and protect your personal information

We take reasonable steps to protect your personal information from loss, unauthorised access, use, modification, or disclosure. Measures include:

  • Secure HTTPS encryption across the site

  • Secure, access-controlled data storage via Shopify's infrastructure

  • Restricted internal access to personal information on a need-to-know basis

We retain your personal information for as long as it is needed for the purposes for which it was collected, or as required by law. Order records are generally retained for seven years for accounting and legal purposes.

 

8. Notifiable privacy breaches

Under the Privacy Act 2020, we are required to notify the Office of the Privacy Commissioner and affected individuals if we experience a privacy breach that poses a risk of serious harm. If we become aware of such a breach, we will act promptly in accordance with our legal obligations.

 

9. Your rights

Under the Privacy Act 2020, you have the right to:

  • Access the personal information we hold about you

  • Correct any personal information that is inaccurate or out of date

In addition, while not a statutory right under the Privacy Act 2020, you may request that we delete your personal information. We will consider such requests and comply where we are not legally required to retain the information (for example, order records must be retained for seven years for tax purposes).

To exercise any of these rights, please contact us using the details below. We may need to verify your identity before processing your request.

 

10. Marketing communications

We will only send you marketing emails if you have expressly opted in. You can unsubscribe at any time by clicking the "unsubscribe" link in any marketing email, or by contacting us directly. Unsubscribing from marketing does not affect transactional emails related to your orders.

 

11. Links to other websites

Our site may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies.

 

12. Changes to this policy

We may update this policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

 

13. Contact us

If you have any questions, concerns, or requests relating to this privacy policy or your personal information, please contact:

DLM Wallace 55 Maurice Road, Penrose, Auckland 1061 Phone: 09 622 9100 Email: enquiries@dlmwallace.co.nz

 

14. Privacy complaints

If you are not satisfied with our response to a privacy concern, you may contact the Office of the Privacy Commissioner:

Website: www.privacy.org.nz Phone: 0800 803 909

The Office of the Privacy Commissioner can investigate complaints and take action where a breach of the Privacy Act 2020 has occurred.

 

This privacy policy has been prepared with reference to the Privacy Act 2020 (NZ) and the Privacy Amendment Act 2025, including the new indirect collection notification requirements under IPP 3A, effective 1 May 2026.