Privacy policy

Last updated: 24 September 2026

This policy explains what personal information Entrance Handles collects, why we collect it, who we share it with, where it is stored, and how you can see it, correct it or ask us to delete it. We follow the Privacy Act 2020 and its information privacy principles. If anything here is unclear, email us and we will explain.

1. Who we are

Entrance Handles sells architectural pull handles and smart locks online at www.entrancehandles.co.nz. We are responsible for the personal information described in this policy.

Email: sales@entrancehandles.co.nz
Postal address: 7 Neilpark Drive, East Tāmaki, Auckland 2013, New Zealand

We do not have a phone line. Everything is handled by email, so there is a written record, and we reply within one business day.

Entrance Handles is a trading name of Jaeco Industries Limited, which collects and holds the information this policy describes.

2. Our privacy officer

Our privacy officer looks after this policy and answers every privacy request and complaint. Email sales@entrancehandles.co.nz and put "Privacy" in the subject line so we can find it quickly.

3. What we collect, and why

We only collect what we need to sell you hardware, deliver it, stand behind it and run the store.

When you order. Your name, email address, phone number, delivery and billing addresses, what you bought, the options you chose (such as size and finish), any note you add, and whether your payment went through. We use this to make or pick your order, deliver it, keep you updated, and handle returns and warranty claims. Payments are processed by our payment providers through Shopify. We never see or store your full card number.

When you contact us. Our contact form asks for your name, email address, phone number, the reason you are getting in touch and your message. You can also give us your town or city, an order number, details of your door (material, thickness, size and where it is), the handle you are looking at, and photos. We use this to answer you and to check a handle suits your door. If you email us directly, we get whatever you put in the email.

When you apply for a trade account. Your name, business name and type, trading address, email address, phone number, NZ Business Number, GST number, website, what you install, your estimated annual spend on door hardware, how you heard about us, and anything else you tell us. We use this to check you are a building professional and to run your trade account.

When you join our email list. Your email address, and the fact that you asked to join. We use it for our 10% welcome offer and to tell you about new profiles and finishes. Every marketing email has an unsubscribe link, and we stop as soon as you use it.

When you have an account. If you sign in to see your orders, Shopify holds your email address, saved addresses and order history for you.

When you browse. Like most online stores, our website and the services in section 4 record information about your visit: your IP address, your device and browser, the pages and products you look at, what you search for, what you add to your cart, the checkout steps you reach, and which website or ad brought you here. They use cookies and similar technology to do it. We use this to keep the store working, to see which pages and products people use, to measure our advertising, and to show our ads to people who have visited.

For security and the law. Shopify checks orders for signs of fraud, and we may use order and payment details to prevent or look into fraud. We also keep records the law requires, such as order and invoice records for tax.

4. Who we share it with

We share personal information only with the services that help us run the store, with the courier that delivers your order, and where the law requires or allows it. These are the services we use today:

  • Shopify (a Canadian company; its privacy policy says information about people in New Zealand is received by its Singapore company). Runs our website, checkout, customer accounts and order records, sends order emails, processes payments with its payment partners, and checks orders for fraud. It receives everything you enter on the site and information about your visit. Shopify also uses some information for its own purposes, for example to run Shop Pay if you choose it, as explained at privacy.shopify.com.
  • Google Analytics (Google, United States). Measures how people use the site and records sales. It receives information about your visit, including a cookie ID, the pages and products you view, your searches and your checkout steps.
  • Google Ads and Google Merchant Center (Google, United States). Measure the visits and sales that come from our Google ads and product listings, and let us show ads to people who have visited. They receive information about your visit, and a click code if you arrived from a Google ad.
  • Google Fonts (Google, United States). Supplies some of the lettering on the site, so your browser contacts Google and shares your IP address.
  • Meta (Meta Platforms, United States). The Meta pixel tells Facebook and Instagram which pages and products you view, what you search for and what you add to your cart, so we can measure and show ads there. If you are signed in to Facebook or Instagram, Meta can link this to your account.
  • Findter Filter and Search (made by BSS Commerce, Vietnam). Installed for search and filters, but switched off on our pages since 24 September 2026. While it stays installed, Shopify can still pass it information about your visit, and BSS says it may use that for marketing and for what United States law calls a sale of data.
  • Appstle Bundles (Appstle, United States). Runs bundle offers and loads on every page, so it receives your IP address and basic information about your visit. The app can also read customer and recent order details in our store.
  • Judge.me (United Kingdom). Our product review app. Shopify passes it information about your visit, and if you leave a review it holds your name, email address and review. It may also email you after an order to ask for a review.
  • Chatty (Singapore). A live chat app. Its chat window is not switched on, but the app is installed, Shopify passes it information about your visit, and it can read customer and order details in our store.
  • Wholesale Helper (United Kingdom). A trade pricing app that is installed but switched off. It can read customer and recent order details in our store.
  • Cloudflare (United States). Stores the photos you attach to our contact form, in private storage in its Asia-Pacific region. Each photo opens only from its own long random link, and every photo is deleted automatically after 365 days.
  • Freeparking. Hosts our sales@entrancehandles.co.nz mailbox, so it holds every email you send us, including the messages our contact and trade forms send. Its mail servers sit on a network registered in Australia, so your emails may be stored there.
  • Our courier. Gets the delivery details it needs, such as your name, address and phone number, to deliver your order.
  • Tea Break Studio (New Zealand). Builds and looks after this website for us, and can see store records, including orders, when it checks or fixes the store. Some of that work uses AI tools, including Claude by Anthropic (United States).
  • iDigital (New Zealand). Our advertising agency, given access to our Google Ads, Google Analytics and Meta advertising accounts to run our ads.

We may also share information when the law requires or allows it, for example with the Police, a court or Inland Revenue, or to prevent a serious threat to someone's safety. We do not share it with anyone else unless you agree.

Each of these companies has its own privacy policy. The main ones are at privacy.shopify.com, policies.google.com/privacy, facebook.com/privacy/policy and cloudflare.com/privacypolicy.

5. Sending information overseas

Most of the services in section 4 are run by companies based outside New Zealand, in Australia, Canada, Singapore, the United States, the United Kingdom and Vietnam, so your information is stored and processed overseas, often in more than one country. We use them because they are the systems that run our store, take payment, measure the website and show our ads.

Most of them only store or process information for us, on our instructions. In that case the Privacy Act 2020 treats the information as still held by us, and we stay responsible for it wherever it is.

Google and Meta also use some of the information for their own purposes, such as measuring and delivering ads across their services. Both carry on business in New Zealand, and we believe on reasonable grounds that they are subject to the Privacy Act 2020 for what they do with it.

If you do not want your visit shared with Google or Meta for advertising, section 7 explains how to switch it off.

6. How long we keep it

  • Orders and invoices: seven years, because New Zealand tax law requires it.
  • Photos attached to the contact form: deleted automatically after 365 days.
  • Emails and enquiries: 2 years after the last email.
  • Trade account applications and records: while the account is open, then 2 years.
  • Our email list: until you unsubscribe.
  • Google Analytics: visit-level data is kept for 2 months, Google's default setting. Summary reports that do not identify anyone are kept longer.
  • Shopify, Google, Meta and the apps in section 4 also keep information under their own policies.

When we no longer need information, we delete it or remove the details that identify you.

7. Your choices

  • Marketing email: use the unsubscribe link in any marketing email, or email us.
  • Cookies: you can block or delete cookies in your browser settings. The store will still load, but some things, such as your cart, need cookies to work.
  • Google: you can turn off personalised ads at myadcenter.google.com, and stop Google Analytics recording your visits with Google's browser add-on at tools.google.com/dlpage/gaoptout.
  • Meta: in your Facebook or Instagram settings, open Accounts Center, then "Your information and permissions", then "Your activity off Meta technologies", to see and disconnect what websites share with Meta.

8. Seeing, correcting or deleting your information

You have the right to ask for the personal information we hold about you, and to ask us to correct it. Here is how:

  1. Email sales@entrancehandles.co.nz with "Privacy" in the subject line, and tell us what you want: a copy, a correction, or deletion.
  2. Send it from the email address you used with us, or include your order number, so we can check it is you. We never give your information to someone else without checking.
  3. We will reply as soon as we reasonably can, and within 20 working days at the latest. There is no charge.
  4. If we correct something, we will tell you. If we decide not to change it, you can ask us to attach a note to your record saying what you think is wrong, and we will.
  5. If you ask us to delete your information, we will delete it everywhere we can, except records the law says we must keep, such as tax records.

9. Information we get from someone else

Sometimes we receive information about you from someone other than you. The main ways this happens:

  • A builder, architect or designer orders for you and gives us your name and delivery address.
  • Shopify and our payment providers tell us whether a payment went through, and flag possible fraud.
  • Our courier tells us when your parcel is delivered or if there is a problem.
  • Someone forwards us your email or photos of a door.

We use that information only for the order or enquiry it came with, and we handle it the way this policy describes. If we keep it and contact you, we will tell you that we have it and why when we first get in touch.

10. Keeping it safe

Your order and account details are held in Shopify, and card payments never touch our own systems. Contact form photos are kept in private storage and open only from their own random link. Only the people who run Entrance Handles and the studio that builds our website can see customer records. If a privacy breach is likely to cause someone serious harm, we will tell the people affected and the Privacy Commissioner, as the law requires.

11. Children

Our store is for adults. You need to be 18 or over to place an order.

12. Complaints

If you are unhappy with how we have handled your information, email our privacy officer first and we will try to put it right. If you are still not satisfied, you can complain to the Office of the Privacy Commissioner at www.privacy.org.nz.

13. Changes to this policy

We update this policy when we change the services we use or the way we handle information, and we change the date at the top when we do. The version on this page is the one that applies.