Privacy Policy
This Privacy Policy explains how TurretDecks by Sterling Thames Media (“we”, “us”, “our”) collects, uses, stores, and discloses personal information when you use our website, place an order, subscribe to our newsletter, or contact us. We are committed to protecting your privacy in line with the New Zealand Privacy Act 2020 and applicable privacy principles.
1. Who we are
TurretDecks by Sterling Thames Media is an online retailer and content platform focused on collectible playing cards. For privacy-related questions, contact us at support@turretdecks.co.nz or via the form on our Contacts page.
2. Information we collect
2.1 You provide directly
- Name, email address, phone number, and delivery address when you create an account, place an order, or contact us.
- Payment information is processed by our payment providers; we do not store full card numbers on our servers.
- Marketing preferences and newsletter subscription details when you opt in.
- Messages you send through contact forms, email, or messaging apps (e.g. WhatsApp, Telegram).
2.2 Automatically
- Device type, browser, approximate location (e.g. country or region), IP address, and pages visited.
- Cookies and similar technologies as described in Section 6.
3. How we use your information
We use personal information to:
- Process and deliver orders, handle payments, and provide customer support.
- Send transactional emails (order confirmations, shipping updates, account notices).
- Send marketing communications where you have consented, including newsletters and early access offers; you may unsubscribe at any time.
- Improve our website, products, and services; analyse traffic and usage patterns in aggregate form.
- Detect and prevent fraud, abuse, and security incidents.
- Comply with legal obligations and respond to lawful requests from authorities.
4. Legal bases (where applicable)
Depending on your location, we rely on: performance of a contract (fulfilling your order); legitimate interests (security, analytics, improving our service); consent (marketing emails and non-essential cookies where required); and legal obligation.
5. Sharing and disclosure
We may share information with:
- Shipping and logistics partners to deliver your purchases.
- Payment processors to complete transactions securely.
- IT, hosting, and email service providers who process data on our behalf under appropriate safeguards.
- Professional advisers (e.g. lawyers, accountants) when necessary.
We do not sell your personal information. We may disclose information if required by law or to protect our rights, users, or the public.
6. Cookies
We use cookies and similar technologies to operate the site, remember preferences, measure performance, and (where you agree) support marketing. You can control cookies through your browser settings; disabling some cookies may limit site functionality. For a dedicated explanation of types, storage, and the cookie banner, see our Cookie Policy.
7. International transfers
If we use service providers outside New Zealand, we take steps that are reasonable in the circumstances to ensure your information receives a comparable level of protection, in accordance with the Privacy Act 2020.
8. Retention
We retain personal information only as long as needed for the purposes above, including legal, accounting, and dispute resolution requirements. Order and tax records may be kept for the period required by New Zealand law.
9. Security
We implement appropriate technical and organisational measures to protect personal information against unauthorised access, loss, or misuse. No method of transmission over the internet is completely secure; we encourage you to use strong passwords and protect your account credentials.
10. Your rights
Under the Privacy Act 2020, you may request access to and correction of your personal information held by us. You may also complain to the Office of the Privacy Commissioner (New Zealand) if you believe we have interfered with your privacy. Contact us first so we can try to resolve your concern.
If you are in the European Economic Area or UK, you may have additional rights (e.g. erasure, restriction, portability, objection). Contact us to exercise those rights where applicable.
11. Children
Our services are not directed at children under 16. We do not knowingly collect personal information from children. If you believe we have done so, please contact us and we will take steps to delete it.
12. Changes
We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Material changes may be communicated by email or a notice on our website.