Privacy Policy

BookTrade is operated in New Zealand by Book Trade Ltd (NZBN 9429053578747). Book Trade Ltd collects and holds the personal information described in this policy.

Our Privacy Officer is Cameron Paulik and can be contacted at support@booktrade.co.nz.

Depending on how you use BookTrade, we may collect:

• your name, username and email address;
• your delivery address and information needed to fulfil an order;
• account preferences, listings, purchases, sales, refunds and support messages;
• payment references supplied by Stripe, such as Checkout Session and Payment Intent identifiers;
• courier, consignment and tracking information; and
• security and technical records such as IP address, request time, browser details and error logs.

Passwords are stored as one-way password hashes. Card details are entered on Stripe's hosted checkout and BookTrade does not receive or store your full card number or card security code.

We use personal information only where reasonably necessary to:

• create and secure your account;
• process purchases, refunds and seller records;
• arrange delivery and provide tracking;
• communicate about orders and support requests;
• prevent fraud, misuse and security incidents;
• maintain business, tax and accounting records; and
• comply with New Zealand law.

Providing account information is voluntary, but without the required email and delivery details we may be unable to create an account, complete an order or arrange delivery.

We disclose only the information reasonably required for the relevant service. Recipients may include:

• authorised BookTrade administrators and support providers;
• the seller fulfilling your order, including the delivery address needed to send it;
• Stripe and the banks or payment providers involved in processing or refunding a payment;
• NZ Post, Aramex or another courier used for address lookup, delivery or tracking;
• hosting, email and encrypted-backup providers acting for BookTrade; and
• regulators, courts or law-enforcement agencies where disclosure is required or permitted by law.

Some service providers may process information outside New Zealand. We select established providers and take reasonable steps to ensure that information handled on our behalf remains subject to appropriate privacy and security safeguards.

We use safeguards appropriate to the information we hold, including encrypted web connections, password hashing, access controls, security logging, restricted production access and encrypted backups. No internet service can guarantee absolute security.

We keep personal information only for as long as it is reasonably required for the purpose for which it was collected or to meet a legal obligation. New Zealand business and transaction records may need to be retained for seven years. Other profile, support and operational information is deleted or de-identified when it is no longer required. Backup copies expire under our backup-retention schedule.

You may request deletion of your account by contacting our Privacy Officer. We will verify the request and delete or de-identify information that is no longer required, while retaining transaction or other records where New Zealand law or an active dispute requires us to keep them.

You may ask for a copy of personal information BookTrade holds about you, ask for incorrect information to be corrected, or ask questions about how it is used. Contact our Privacy Officer at support@booktrade.co.nz. We may need to verify your identity before releasing information.

If a privacy breach occurs that has caused or may cause serious harm, BookTrade will notify the Office of the Privacy Commissioner and affected people as soon as reasonably practicable, unless a legal exception applies.