Privacy Policy

1. Commitment to Privacy

Hotwood Limited ("we", "us", or "our") is committed to protecting the privacy of our customers. This policy outlines how we collect, use, and protect your personal information in accordance with the New Zealand Privacy Act 2020.

2. Information We Collect

To provide our firewood delivery services, we collect personal information that you provide directly to us. This includes your full name, email address, NZ phone number, and physical delivery address.

We also collect transaction-related data, such as order history, wood types purchased, payment method preferences, order totals, delivery details, and transaction reference data to facilitate delivery, accounting, and customer support.

We use browser storage on your device to support the checkout experience. This includes local storage for your cart contents and temporary session storage for payment return flows such as Stripe Checkout and Afterpay redirects.

3. How We Use Your Information

Your information is used strictly for operational purposes: to process your order, provide accurate quotes (including WINZ quotes), coordinate delivery logistics, and communicate regarding your purchase.

Where you choose to pay by card, we also use your information to create and manage a secure Stripe Checkout session, verify payment status, and reconcile your order with the payment provider.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

4. Third-Party Service Providers & Payments

We share specific personal information with trusted third-party providers only as necessary to fulfill your order:

• Stripe: If you choose to pay by card, your name, email address, phone number, order total, order reference, and billing or delivery-related details may be shared with Stripe to create and process your secure checkout session. Stripe handles card payment data under their own privacy and security standards. You can review Stripe’s privacy policy at https://stripe.com/privacy.

• Afterpay: If you choose to pay via Afterpay, your name, contact details, and order value are shared to process the transaction. Afterpay handles your payment data securely under their own privacy standards.

• Resend: Used to send automated order confirmations, quotes, and delivery notifications.

• PocketBase: Used for the secure storage and management of our business records.

5. Security and Storage

We take all reasonable steps to protect your data from unauthorized access, loss, or disclosure. All sensitive credentials and API keys are stored in server-side environment configurations.

Important: Hotwood Limited does not see or store your full credit card details or Afterpay login credentials. These are handled entirely by the secure encrypted portals of our payment providers, including Stripe and Afterpay.

Browser storage used for cart and checkout continuity remains on your device until it is cleared by you, replaced by a newer checkout session, or removed by the website after the relevant payment flow is completed.

6. Your Rights

Under the Privacy Act 2020, you have the right to request access to any personal information we hold about you, or to request a correction if you believe the information is inaccurate.

To make a request, or if you have any questions regarding your data, please contact Hotwood Limited directly via the phone number or email address provided on our website.