Privacy

1. Who we are and scope

In this privacy statement, Trade First, we, us, and our mean Trade First Limited. You means the person whose personal information we collect or hold, including a customer, supplier, delivery contact, site contact, company representative, or website user.

This statement applies to personal information handled through this website and our related quote, order, pickup, delivery, customer service, warranty, account, and payment processes. It should be read with our Terms of Service.

We manage personal information under the New Zealand Privacy Act 2020, including the information privacy principles that apply to collection, use, disclosure, storage, retention, access, correction, overseas disclosure, and privacy breaches.

2. Personal information we collect

We collect the information reasonably needed to respond to enquiries, prepare quotes, supply building products, arrange pickup or delivery, take payment, and keep proper business records. This may include your name, company, role, email address, phone number, and any contact details you provide.

For quotes and orders, we may collect product requirements, product selections, quantities, pickup or delivery preference, delivery address or suburb, site access information, delivery instructions, requested timing, messages, order history, delivery suburb and zone details, invoices, payment status, and customer service records.

For website and security purposes, our website, hosting provider, payment provider, or other technical providers may process technical information such as IP address, device and browser information, request logs, page URLs, timestamps, error logs, fraud signals, and security events.

We do not intentionally collect sensitive personal information through this website. Please do not include unnecessary sensitive information in quote requests or messages.

3. How we collect information

We usually collect personal information directly from you when you submit a quote request, contact us by email or phone, use checkout, arrange pickup or delivery, accept a quote, place an order, pay an invoice, or communicate with us about supply, returns, faults, warranties, or customer service.

Providing information is usually voluntary. If you do not provide information needed for an enquiry, quote, order, payment, pickup, delivery, account, warranty claim, or legal requirement, we may not be able to respond, supply goods, deliver to site, process payment, or provide support.

We may also collect personal information about you from someone else where it is lawful and necessary for a building supplies transaction. For example, a company, contractor, employee, customer representative, site contact, delivery provider, payment provider, supplier, manufacturer, or warranty contact may give us your contact details or delivery instructions for an order.

Where we collect personal information indirectly, we will take reasonable steps to make the person concerned aware of the collection, the purpose, intended recipients, Trade First's name and address, any law requiring or authorising the collection if relevant, and their access and correction rights, unless an exception applies.

If you provide personal information about another person, such as a site contact, employee, customer, contractor, or delivery recipient, you must have authority to provide it and, where reasonable, make them aware of this privacy statement.

4. How we use personal information

We use personal information to respond to enquiries, check product availability, prepare quotes, confirm prices, process orders, provide invoices or receipts, arrange pickup, quote and coordinate delivery, manage site access, provide customer service, and communicate about the relevant enquiry, quote, order, account, or delivery.

We may also use information to process payments, prevent fraud, maintain website and business security, manage stock and supplier communications, handle returns or faults, support manufacturer warranty or technical product enquiries, keep accounting and tax records, resolve disputes, enforce our terms, and meet legal or regulatory obligations.

We do not sell or rent personal information. We do not use personal information for unrelated marketing without permission where permission is required. If we send marketing communications in future, we will include a way to unsubscribe.

5. When we share personal information

We may share personal information where this is one of the purposes for which it was collected, where it is directly related to those purposes, where you authorise it, or where the law allows or requires it.

Recipients may include Trade First staff, contractors, advisers, accountants, insurers, website and email providers, Cloudflare, Stripe, payment providers, banks, card networks, delivery or freight providers, suppliers, manufacturers, warranty or technical support contacts, debt recovery providers, regulators, dispute bodies, law enforcement agencies, and other parties involved in the relevant quote, order, delivery, account, return, fault, warranty, legal, or security matter.

We may share delivery contact details, address information, access instructions, and order details with delivery providers or site contacts so goods can be delivered safely and efficiently. We may share product, batch, purchase, installation, or contact details with a supplier or manufacturer where needed for a product issue, warranty, technical support, or safety matter.

6. Payments, checkout, cookies, and online services

Online payments are processed by Stripe Checkout. Stripe may collect and process payment, billing, shipping, fraud-prevention, and authentication information. Trade First does not store full card numbers or card security codes on this website.

The site is built with Astro and intended to be hosted on Cloudflare Pages. It currently does not intentionally use advertising pixels or marketing analytics. Essential hosting, security, browser, font, map, payment, and checkout technologies, including Cloudflare, Google Fonts, Google Maps, StreetKit, and Stripe, may still process technical information needed to load the site, protect it, measure service reliability, prevent misuse, suggest addresses, or complete a checkout.

Address autocomplete may be provided by StreetKit using LINZ NZ Addresses data. StreetKit uses typed address text to fetch static address index files and returns selected address details in the browser. It is not an NZ Post, postal delivery, courier, identity, or address verification service.

Some service providers may process or store information outside New Zealand, including providers used for website hosting, email, payment, maps, fonts, security, or business systems. Where information is disclosed overseas and the Privacy Act requires it, we will take reasonable steps to ensure appropriate privacy safeguards apply, or otherwise rely on a lawful basis for the disclosure.

Third-party services, including Stripe and Google services linked or embedded from the website, may have their own privacy terms. You should review those terms when using those services.

7. Storage, security, and retention

We take reasonable steps to protect personal information from loss, unauthorised access, unauthorised disclosure, misuse, alteration, and other security risks. These steps may include using reputable service providers, access controls, secure payment processing, account security, business processes, and limiting personal information to what is reasonably needed.

No website, email system, payment system, or internet transmission is completely secure. If you believe personal information you have provided to us has been affected by a security issue, please contact us promptly.

We keep personal information only for as long as it is reasonably needed for the purpose it was collected, for a directly related purpose, or to meet customer service, accounting, tax, warranty, dispute, insurance, health and safety, security, or legal requirements. When information is no longer needed, we will take reasonable steps to securely delete, anonymise, or dispose of it.

8. Access, correction, and complaints

You can ask us to confirm whether we hold personal information about you. You can also ask to access or correct that information. We may need to verify your identity before responding, and we will handle requests in accordance with the Privacy Act.

If you think information we hold about you is wrong, incomplete, or misleading, contact us and tell us what needs to be corrected. If we do not make a requested correction, you may ask us to attach a statement of correction to the information where the Privacy Act allows.

For privacy questions, access or correction requests, complaints, or concerns, contact the Trade First Privacy Officer at info@tradefirst.co.nz, 027 346 0823, or 7B Canon Place, Pakuranga, Auckland.

If you are not satisfied with how we handle a privacy matter, you can contact the Office of the Privacy Commissioner at privacy.org.nz.

9. Privacy breaches

A privacy breach may include unauthorised or accidental access, disclosure, loss, destruction, alteration, or inability to access personal information. If we become aware of a privacy breach, we will take steps to contain, assess, and respond to it.

If a privacy breach has caused serious harm, or is likely to cause serious harm, we will notify the Office of the Privacy Commissioner and affected people as soon as practicable, unless an exception applies.

10. Changes to this statement

We may update this privacy statement from time to time by publishing an updated version on this website. The updated version applies from the date it is published unless it says otherwise.