Skip to content
Craftywitch

Privacy Policy

Last updated: 31 October 2026

Craftywitch Limited operates www.craftywitch.co.nz. This policy explains how we handle personal information when you browse our website, contact us, have an account or buy from us.

Who holds your information and how to contact us

Craftywitch Limited collects and holds the information described in this policy. For privacy questions, requests or complaints, contact Leisa at sales@craftywitch.co.nz, or write to Craftywitch Limited, 20 Martbern Crescent, Bishopdale, Christchurch 8053, New Zealand. Please contact us before sending any product returns.

Information you provide

We collect the details needed to respond to enquiries, supply products and manage our relationship with you. These can include your name, email address, phone number, billing and delivery addresses, account details, order information and messages or photos you send about an enquiry or return.

We use these details to arrange and fulfil orders, communicate about purchases, manage returns and refunds, support accounts, answer questions and maintain business records. For wholesale enquiries, we also use the business details you provide to assess your application and discuss supply.

Providing information is generally voluntary. If you do not provide details needed for an order, delivery or enquiry, we may be unable to provide that service. Please send only information relevant to your request.

Information about another person

If you give us another person’s delivery or contact details, please have their permission and make this policy available to them. When we collect information about someone indirectly, we will take reasonable steps to notify them as required by the Privacy Act, unless an exception applies.

Payments

The website does not currently process online payments. Contact sales@craftywitch.co.nz to discuss payment arrangements. Please do not email full card details or passwords. If we introduce an online payment provider, we will update this policy to explain the information it handles.

Website operation and cookies

Our website uses WordPress and WooCommerce. Cookies and similar browser storage support functions such as remembering basket contents and keeping authorised users signed in. You can manage or block cookies in your browser, although this may prevent some shop or account functions from working.

WooCommerce basket cookies generally last for a browser session, while its customer session cookie normally lasts two days. See WooCommerce’s cookie information for details.

We use Jetpack, provided by Automattic, for connected site management, login protection and site statistics. Depending on the feature and your interaction with the site, it can process technical information such as IP address, browser details, pages visited, referring website, visit time and login activity. We use statistics to understand visits and improve the website, and security information to protect it from misuse.

Jetpack also enables authorised management of the site through WordPress.com. This can involve access to account and order information needed for administration or support. More information is available in the Jetpack Privacy Center and Automattic’s visitor privacy notice, including its use of cookies and other technologies.

Who can receive information

Relevant information is available to authorised people working for Craftywitch and the service providers involved in operating and supporting the website, handling business email, arranging delivery and maintaining accounting records. We share what is needed for the relevant service. Information may also be disclosed with your authority or where the law permits or requires it.

Information processed overseas

Connected services such as Jetpack and WordPress.com may process information outside New Zealand. Automattic describes its international processing in its privacy notice linked above. Where we disclose personal information overseas, we will meet the applicable requirements of the New Zealand Privacy Act. Using this website does not itself give blanket consent to disclosure without appropriate protection.

Security and retention

We take reasonable steps to protect personal information against loss, misuse and unauthorised access or disclosure, and limit access to people who need it for their work.

We retain information for its lawful purposes, including order fulfilment, customer support, resolving issues and meeting legal record-keeping requirements. Our policy is to securely delete or anonymise information once it is no longer needed for a lawful purpose. You can contact us to request a review or removal of information; we may need to keep records that the law requires or that are still needed for a lawful purpose.

Access, correction and complaints

You can ask to access or correct personal information we hold about you by contacting sales@craftywitch.co.nz. We may need to confirm your identity. We will respond as soon as reasonably practicable and within the applicable legal timeframe, normally 20 working days.

If we do not make a correction you request, you can ask us to attach a statement of the correction sought. If you have a privacy concern, please contact us first. If it remains unresolved, you can complain to the Office of the Privacy Commissioner.

Changes to this policy

We may update this policy to reflect changes in our business or services. The date at the top shows when it was last updated. A change to this policy does not remove your rights or automatically authorise a new use of information already collected.