Well Read Limited, NZBN 9429049108088, trading as Well Read Books (we, us or our), respects your right to privacy and understands that protecting your personal information is important. We comply with the New Zealand Privacy Act 2020 when handling personal information. This policy explains how we collect, hold, use, disclose and protect personal information in connection with our shop, website, customer accounts, orders and related services (our Services).
The information we collect
Personal information means information about an identifiable individual. Depending on how you deal with us, we may collect:
- your name and contact details, including your email address, telephone number, billing address and delivery address;
- customer account information, order and purchase history, products you have enquired about or purchased, delivery details, returns and refunds;
- payment-related and transaction information needed to complete a purchase. Full payment card details are supplied directly to our third-party checkout and payment providers and are not stored in this website’s source code;
- messages, enquiries, feedback, preferences or other information you provide when contacting us online, by email, telephone, social media or in person;
- technical and usage information produced when you use the website, which may include your IP address, browser, device and operating-system type, network information, referral source, pages viewed, events such as outbound-link clicks or form submissions, and approximate location derived from an IP address; and
- any other personal information you voluntarily provide, or that a third party provides with your authority.
How we collect personal information
We collect personal information:
- Directly from you when you create a customer account, place or manage an order, use our contact form, request help, arrange a return, or communicate with us by email, telephone, social media or in person.
- Automatically when you use the website, through our hosting, security, checkout and aggregate analytics services.
- From third parties involved in providing the Services, such as payment processors, couriers and social-media services where you choose to contact us through those services.
How we use personal information
We may collect, hold and use personal information to:
- provide and administer the website, customer accounts and our Services;
- accept payment, validate delivery addresses, process, dispatch and deliver orders, and manage cancellations, returns and refunds;
- respond to enquiries and communicate with you about products, orders and customer support;
- maintain business, tax, accounting, invoicing and transaction records;
- protect customers and our Services, prevent fraud, investigate misuse and resolve disputes;
- measure aggregate website use, diagnose problems and improve our website and Services; and
- comply with our legal obligations or otherwise act as required or authorised by law.
We do not sell personal information. We do not use website activity for behavioural advertising or retargeting.
Disclosure to third parties
We may disclose or provide access to personal information only where reasonably necessary to:
- Stripe and Afterpay, which provide secure checkout, card and buy-now-pay-later payment services for Well Read Books;
- Cloudflare, which provides website delivery, hosting, security, Workers, the D1 order/account database and, where enabled, Turnstile anti-spam services;
- Amazon Simple Email Service, which delivers contact-form, account and transactional order messages;
- Plausible Analytics, which provides aggregate, cookie-free website measurement;
- NZ Post and other couriers or delivery providers used to check delivery addresses, calculate delivery options and fulfil orders. If you use the optional NZ Post address finder, the address fragment you enter is sent through our Cloudflare Worker to NZ Post; you may instead enter the address manually;
- our staff, contractors, technology providers and professional advisers where they need the information to perform services for us;
- a prospective purchaser or successor if our business or assets are transferred; and
- courts, regulators, law-enforcement agencies or other parties where disclosure is required or authorised by law, or necessary to establish, exercise or defend legal rights.
Overseas processing and disclosure
Some of our service providers operate or store and process information outside New Zealand. Where a transfer is treated as a disclosure to an overseas person or organisation, we will take reasonable steps to comply with Information Privacy Principle 12, including by using providers subject to the New Zealand Privacy Act or comparable privacy safeguards, contractual protections, or informed authorisation where required.
Your rights and choices
Your choice
You do not have to provide personal information to us. However, if you do not provide information required for an account, order, delivery or enquiry, we may be unable to provide that part of the Services.
Information about another person
If you provide personal information about somebody else, such as a gift recipient or alternative delivery contact, you confirm that you are authorised to provide it and that they may receive this policy.
Access and correction
Subject to any lawful grounds for refusal, you may ask for access to personal information we hold about you or request that it be corrected. If we do not make a requested correction, you may ask us to attach a statement of correction to the information. We will respond in accordance with the Privacy Act.
Communication choices
You may ask us to stop optional communications at any time by using any unsubscribe facility provided or contacting us below. Transactional messages about an order, account, delivery, return or legal matter may still be necessary.
Retention
We retain personal information only for as long as it may lawfully be used for the purpose collected, or as required for tax, accounting, fraud prevention, dispute resolution or other legal obligations. We then delete, anonymise or securely dispose of it where reasonably practicable.
Complaints
If you have a privacy concern, contact our Privacy Officer using the details below and provide enough information for us to investigate. We will respond in writing with the outcome and any steps we propose to take. You may also complain to the Office of the Privacy Commissioner.
Storage and security
We use reasonable physical, technical and organisational safeguards designed to protect personal information from loss, misuse and unauthorised access, modification or disclosure. These include access controls, encrypted connections and reputable service providers. Contact-form submissions, customer sign-in links and order workflows are processed through Cloudflare Workers; order and account records are held in Cloudflare D1; and messages are delivered using Amazon SES. Our forms use a hidden anti-spam field and may use Cloudflare Turnstile.
No method of transmission or storage over the internet is completely secure. While we take reasonable steps to protect information, we cannot guarantee absolute security, and information transmitted online is provided at your own risk.
Analytics, cookies and browser storage
We use Plausible Analytics to understand aggregate website trends. Plausible does not use analytics cookies or persistent identifiers and does not store raw IP addresses. We measure page views and aggregate events such as outbound-link clicks, file downloads, form submissions, confirmed purchases and visits to missing pages. We do not send names, email addresses, order numbers, payment details or other directly identifying customer information to Plausible.
Our light/dark theme control, shopping cart and signed-in customer session use your browser’s local storage. Stripe, Afterpay and Cloudflare Turnstile may use cookies or browser storage required for checkout, payment, fraud-prevention and security functions. You can restrict cookies or clear browser storage through your browser, but doing so may clear your cart or prevent checkout and customer-account features from working correctly.
Links to other websites
Our Services contain links to websites operated by other organisations. We do not control those websites and are not responsible for their privacy practices. Personal information you provide on another website is governed by that organisation’s privacy policy.
Changes to this policy
We may update this policy by publishing a revised version on this website. The date at the top identifies the latest version. We recommend checking this page periodically.
Contact our Privacy Officer
Well Read Limited, trading as Well Read Books
NZBN: 9429049108088
Email: hello@raglanwellread.co.nz
Phone: 021 504 955
Address: 2 Wallis Street, Raglan 3225, New Zealand