Privacy Policy

Last updated: 15 January 2026

1. Who we are and how this policy applies

This Privacy Policy explains how Never Forgetti LTD, collects, uses, discloses, and protects personal information when you use our services or visit neverforgetti.com (the Site). We comply with New Zealand’s Privacy Act 2020 and the Information Privacy Principles (IPPs). By using our services or the Site, you agree to this Policy.

Controller/Agency: Never Forgetti
Contact: hello@neverforgetti.com |

If you do not agree with this Policy, please do not use our services or the Site.

2. The services we provide

Never Forgetti is a 12‑month gifting concierge for individuals. Your subscription covers occasion management, reminders, gift sourcing, curated recommendations, and coordination of premium wrapping and delivery. Gifts are purchased separately when you approve them.

3. The information we collect

We collect the minimum information needed to deliver our service and operate the Site:

• Customer details: name, contact information, login credentials, preferences, budgets, and communication settings.

• Recipient details you provide: names, relationships, occasion dates, delivery addresses, preferences (used only to deliver your selected services).

• Transaction & service data: recommendations, approvals, orders, delivery updates, support communications, and payment metadata (we do not store full payment card numbers).

• Technical data: IP address, device/browser type, referring URLs, pages viewed, time and date of visits, cookie identifiers, and similar diagnostic data.

• Marketing preferences: your consent choices for email/SMS and cookies.

We also collect any information you choose to provide to us (e.g., in a support request).

4. How we collect information

• Directly from you: during signup, onboarding forms, approvals, payments, and support.

• Automatically: via cookies and similar technologies when you use the Site (see Cookies below).

• From service providers: delivery status and payment confirmations.
  

5. Why we collect and use personal information

We use personal information to:

1. Provide and operate the service: intake, reminders, curation, approvals, purchase, wrapping, delivery, account administration, and customer support.

2. Process payments: using secure third‑party payment processors.

3. Communicate: send transactional/service messages (reminders, approvals, updates).

4. Improve and secure the Site and services (analytics, troubleshooting, fraud prevention, audits).

5. Marketing (with consent): send offers, updates, and content you opt‑in to receive; you can opt out at any time.

6. Legal and compliance: record‑keeping, tax, responding to lawful requests, and enforcing our terms.

6. Our legal approach (Privacy Act 2020)

We collect and use personal information fairly and lawfully, for the purposes described above, and only to the extent reasonably necessary. Where we need information from you about other people (e.g., gift recipients), you confirm you are authorised to supply that information and have informed them, where appropriate, about our collection and use.

We keep information accurate, up‑to‑date, and secure; and we allow access and correction requests (see Your privacy rights below).

7. Email and SMS marketing (UEMA)

We follow New Zealand’s Unsolicited Electronic Messages Act 2007. We only send marketing messages if you’ve consented. Every marketing message identifies us and includes a functional unsubscribe mechanism. Service messages (e.g., reminders, approvals, receipts, delivery updates) are transactional and may be sent without marketing consent.

You can change your marketing preferences at any time via the unsubscribe link or by contacting us.

8. Cookies and similar technologies

We use cookies and similar technologies to operate the Site and improve your experience.

• Required cookies: enable core features (security, sessions, forms, checkout).

• Analytics/performance cookies: help us understand how the Site is used so we can improve it.

• Marketing cookies: used with your consent for measurement and relevance.

You can manage cookies in your browser settings and through our cookie banner/controls (where available). Blocking some cookies may impact the Site’s functionality. For more detail, see our Cookie Policy.

9. Payments

We use a secure payment processor (e.g., Stripe) to handle payments. We receive confirmation and metadata (e.g., payment status, last four digits, card brand) but do not store full card numbers or CVV codes on our servers. Please review the processor’s privacy policy for more information.

10. When we share personal information

We do not sell personal information. We disclose information only as needed to provide and improve our services, or where the law requires it:

• Delivery and fulfilment partners (couriers, packaging providers) to deliver gifts and provide tracking updates.

• Payment providers to process transactions securely.

• IT and cloud vendors that host, maintain, or support our systems (e.g., hosting, email, analytics, customer support tools).

• Professional advisers (legal, tax, accounting) under duties of confidentiality.

• Authorities if required by law or necessary to protect rights, property, safety, or to investigate fraud or misuse.

All third parties must protect personal information and use it only for the purpose we specify.

11. International disclosures (cross‑border)

If we store or process personal information outside New Zealand (for example, with reputable cloud providers), we take reasonable steps to ensure the overseas recipient is subject to comparable privacy safeguards (contractual clauses/model terms, reputable jurisdictions, or providers doing business in New Zealand). Where comparable safeguards are not in place, we will seek your informed consent before making the disclosure, unless an exception under the Privacy Act applies.

12. How we protect information (security)

We use reasonable technical and organisational safeguards, including encryption in transit, access controls, least‑privilege principles, secure development practices, logging/monitoring, and vendor risk management. While no method is 100% secure, we work to protect personal information against loss, unauthorised access, disclosure, or misuse.

13. Retention

We retain personal information only as long as needed for the purposes outlined, to provide the service, and to meet legal, tax, and accounting obligations. When no longer required, we securely delete or anonymise the information.

Indicative examples:

• Account & service records: retained for the subscription term and a reasonable period afterward for support and record‑keeping.

• Transaction records: retained for the period required by tax and financial record laws.

• Cookie/analytics data: retained per our cookie schedules and vendor settings.
  

14. Children

Our service is intended for adults (18+). If you believe a child has provided us personal information without appropriate authorisation, please contact us so we can take appropriate steps.

15. Your privacy rights

Under New Zealand law, you have the right to:

• Access the personal information we hold about you.

• Request correction of any personal information that is inaccurate or incomplete.

• Withdraw consent for marketing at any time (does not affect transactional/service communications).

• Raise a concern or complaint with us, and if unresolved, with the Office of the Privacy Commissioner (OPC).

How to make a request:
Email hello@neverforgetti.com and describe your request (access, correction, or other). We may need to verify your identity. We will respond within a reasonable time and explain any lawful grounds if we must refuse a request (in whole or in part).

Office of the Privacy Commissioner: privacy.org.nz | 0800 803 909

16. Data about other people (recipients)

Our service relies on the recipient information you provide. You confirm you have authority to provide that information and, where appropriate, you have informed those individuals that we will use their details to recommend and deliver gifts on your behalf. We will only use recipient data to deliver your selected services and as otherwise permitted by law.

17. Links and third‑party services

The Site may contain links to third‑party sites or use third‑party integrations (e.g., payment, analytics, embedded video). Those sites and services operate under their own privacy terms. We encourage you to review their policies before providing personal information.

18. Changes to this Policy

We may update this Policy from time to time. Significant changes will be notified on the Site and/or by email. The “Last updated” date at the top shows when the Policy was last revised. Your continued use of the service after changes take effect means you accept the updated Policy.

19. Contact us

If you have questions, want to exercise your rights, or wish to make a complaint, please contact:

Never Forgetti
Email: hello@neverforgetti.com

We aim to respond promptly and fairly.