This document explains the Privacy Policy for Kinwi Limited. Our marketplace is located at https://kinwi.co.nz (which we refer to as our “Platform”) and includes any associated mobile-optimised web applications.
In using our Platform, you acknowledge that your personal information will be handled as described in this policy. We respect your privacy, and this document provides transparency on how and why your personal information is collected, used, and protected.
We confirm that we comply with all applicable New Zealand privacy laws, including the Privacy Act 2020, any applicable privacy codes, and other relevant legislation when handling your personal information.
By accepting our Terms of Use, you confirm that you have read and understood our Privacy Policy. If you do not want us to collect or process your personal information in the ways described in this policy, please do not use our Platform. We are not responsible for the content or privacy practices of independent third-party sellers, or external websites and applications linked from our Platform.
When you visit our Platform, we collect certain information about your device, your interaction with the Platform, and details necessary to process your purchases. We use your personal information to provide our services to you, which includes: displaying products, processing payments, facilitating shipping and order fulfilment, and keeping you informed about new features, products, and announcements. We also collect information to improve our Platform and provide a better, more secure experience for our users.
In this policy, “Personal Information” refers to any information that can directly or indirectly identify an individual, consistent with the Privacy Act 2020. Below is a breakdown of the information we collect and why:
Device Information
• Examples collected: Web browser version, operating system, device identifiers, IP address, time zone, cookie information, pages or products viewed, search terms used, and how you interact with our Platform.
• Purpose of collection: To operate our Platform safely, efficiently, and reliably; to perform analytics to optimise our service; to prevent fraud and maintain security; to understand how visitors and sellers navigate the site; and to provide a customised browsing experience.
• Source: Collected automatically when you access our Platform using cookies, log files, and analytical tags.
Registration and Account Setup Information
• Examples collected: In order to create an account, you must provide a valid email address, account name, and password. The name associated with your account (Display Name) is publicly visible and linked to your Kinwi reviews and community activity. Additional information collected includes billing and postal addresses, telephone numbers, and store names for sellers. For sellers, identity verification documents and bank details are submitted directly to Stripe Connect to enable payouts. Payment card details for buyers are encrypted and securely processed by Stripe; Kinwi never stores full credit card numbers on its servers.
• Purpose of collection: To provide account functionality, deliver purchases, process payments, and verify seller identities to protect against fraud.
• Source: Collected directly from you when you register or edit your profile.
Guest Information
• Examples collected: IP address, device details, and checkout details (name, delivery address, email address, phone number, and payment status).
• Purpose of collection: Essential for fulfilling guest purchases, arranging shipping, and general security analytics.
• Source: Collected directly from you at checkout and automatically from your device.
Seller Information
• Examples collected: Proof of identity (verified via Stripe Connect), shop name, store policies, shop location (if shared), listing descriptions, and public feedback. We may confidentially request additional information about your store or products to ensure compliance with our policies.
• Purpose of collection: To verify seller identities, mitigate fraud, comply with the Fair Trading Act and Consumer Guarantees Act, enable buyers to find nearby stores, process payouts, and feature stores in marketplace promotions (as agreed under our Terms of Use).
• Source: Collected directly from you during seller onboarding and store management.
Location Information
• Examples collected: General location based on IP address, delivery addresses provided, or optional geolocation shared via your mobile browser.
• Purpose of collection: To calculate delivery rates, enable buyers to find local stores for item collection, provide localised search recommendations, and assist with fraud detection.
• Source: Provided by you in your address details or collected automatically via IP address or device location (with your permission). You can disable location sharing in your device settings at any time.
Order and Transaction Information
• Examples collected: Customer name, billing address, delivery address, order details, date and time of transaction, amount charged, email address, and phone number.
• Purpose of collection: To fulfil orders, process card payments via Stripe, arrange shipping, generate invoices, communicate order updates, and screen for potential transaction risks.
• Source: Collected directly from you at checkout and verified via our payment gateway.
Fraud and Safety Information
• Examples collected: Transaction history, verification logs, device identifiers, and location indicators. Kinwi never has access to your passwords.
• Purpose of collection: To maintain platform security and protect users against unauthorized access, card theft, and fraudulent activity. Where unlawful activity or unauthorized card use is detected, relevant transaction details may be disclosed to cardholders, banks, or law enforcement authorities.
• Source: Collected directly from you and generated automatically during transactions.
Customer Support Information
• Examples collected: Support ticket correspondence, email inquiries, survey responses, product reviews, and communications with our customer care team.
• Purpose of collection: To resolve user inquiries, assist with order disputes, improve marketplace functionality, and maintain community trust.
• Source: Collected directly from you when you contact us or leave a review.
Analytics Information
• Examples collected: Anonymised usage statistics, including pages viewed, time spent on site, referring URLs, browser types, and general demographic regions.
• Purpose of collection: To evaluate marketplace performance, track traffic trends, improve usability, and enhance the overall experience for buyers and sellers.
• Source: Collected automatically through web analytics tools such as Google Analytics.
You understand and agree that the Kinwi Platform and Stripe share data in order to facilitate your use of Stripe Connect and online payment processing. Where Stripe receives your data from Kinwi, Stripe processes that data in accordance with the Stripe Services Agreement and the Stripe Privacy Policy.
Kinwi only uses Stripe Connect and connected account data in a manner consistent with our Terms of Use and this Privacy Policy. We will obtain explicit consent before using connected account data for any purpose other than providing platform services. Kinwi uses all reasonable, industry-standard safeguards to protect connected account data from unauthorised access or disclosure.
We respect your privacy and will never sell your personal information. We do not disclose your name, email address, or other personal details to third parties without your consent, except as outlined below:
Technical Infrastructure & Cross-Border Disclosure: To operate our marketplace, we rely on secure international infrastructure. For example, our web servers are hosted in Australia. In accordance with Information Privacy Principle 12 of the Privacy Act 2020, we take reasonable steps to ensure that all overseas providers and data centres are subject to privacy safeguards comparable to those under New Zealand law.
Buying and Selling: As part of the transaction process, you authorise Kinwi to share necessary order details between the buyer and seller (such as the buyer’s name, delivery address, email, and order status). This information may also be shared with our integrated delivery and shipping partners solely to fulfil orders and provide tracking updates. Sellers and delivery partners process this information under their own privacy obligations.
Independent Data Responsibilities: Both Kinwi and the independent sellers on our platform process buyer information to complete orders, and each acts as an independent entity responsible for the personal data under its control. Sellers are granted a strictly limited licence to use buyer contact information solely for Kinwi-related order fulfilment and communication. Sellers are strictly prohibited from using buyer information for unauthorised communications or sending unsolicited commercial messages.
Service Providers: We engage trusted third-party providers to help operate, secure, and improve our Platform. These include hosting providers, delivery couriers, payment processors (Stripe), email dispatch providers, technical developers, accountants, insurers, and legal advisors. These providers only receive the information necessary to perform their specific tasks and are contractually bound to keep your data confidential and secure.
Legal Compliance and Safety: We may disclose your personal information if required by New Zealand law, a court order, or a lawful request from a government or law enforcement agency; to collect statutory taxes; or where necessary to prevent a serious threat to public health or personal safety.
Analytics & Advertising Partners:
• We use Google Analytics to understand marketplace traffic. You can learn how Google uses data at https://policies.google.com/privacy and opt out using the Google Analytics Opt-out Browser Add-on at https://tools.google.com/dlpage/gaoptout.
• We may occasionally share aggregated or anonymised interaction data with advertising platforms (such as Facebook or Google) to display relevant marketing to prospective shoppers. You can manage your preferences or opt out directly through your Facebook Ad Settings (https://www.facebook.com/settings/?tab=ads) or Google Ad Settings (https://www.google.com/settings/ads).
Third-Party Plugins: Third-party features on our site (such as social sharing buttons or embedded maps) operate under the privacy policies of the respective providers. Connecting your social profiles (e.g. Facebook, Instagram, or Pinterest) to your Kinwi account is entirely optional.
External Links: Our Platform may contain links to external third-party websites or services (such as New Zealand legislation portals). We do not own, control, or endorse these external sites, and your interactions with them are governed by their respective privacy policies.
Embedded Content: Embedded content from external platforms (such as Google Maps or YouTube videos) behaves in the exact same manner as if you visited the third-party website directly. These services may collect information about your device, place cookies, and monitor your interaction with the embedded content.
Product Image Media (EXIF Data): When uploading product photos to your store, we recommend removing any embedded GPS location metadata (EXIF data) from your images prior to upload, as visitors may be able to view and extract image location data.
We follow industry-standard security practices to protect your personal information, both during transmission and once received.
All credit and debit card payments are handled by our payment partner, Stripe. Stripe Radar uses machine learning trained on millions of global transactions to monitor, score, and automatically block fraudulent payments. Stripe is fully certified to PCI Service Provider Level 1 (the highest standard in the payments industry). With Stripe Elements hosted input fields, your sensitive card data is sent directly to Stripe’s secure infrastructure without ever passing through or being stored on Kinwi servers. All connections enforce HTTPS using TLS encryption and HSTS, and card numbers are encrypted at rest with AES-256.
Your Kinwi account is protected by your personal password. We encourage you to choose a strong, unique password and keep it confidential.
While we apply rigorous physical, electronic, and administrative safeguards, no method of transmission over the internet or electronic storage is 100% secure. In the unlikely event of a privacy breach that poses a risk of harm, Kinwi will promptly notify affected individuals and the Office of the Privacy Commissioner in full accordance with the Privacy Act 2020.
Kinwi retains your personal information only for as long as is necessary to fulfil the purposes set out in this policy, keep your account active, or meet legal and regulatory requirements.
If you choose to close your account, we will delete or anonymise your personal information, except where we are required to retain it to comply with our legal obligations. Under the New Zealand Tax Administration Act 1994, businesses must retain financial and transaction records for at least seven years. We also retain minimal log files and records necessary to resolve ongoing disputes, enforce our agreements, and maintain site security.
Product listing content may remain in our database after an item is sold or removed to assist with dispute resolution, fraud prevention, and accounting records. Search engines (such as Google) may also retain cached copies of public listings for a period until their web indexes refresh.
Service-Related Messages: Kinwi will contact you regarding transactional and operational matters. Every registered account must maintain an active, valid email address. Service-related messages include order confirmations, delivery notifications, dispute updates, account security alerts, and replies from our customer care team. If you request phone support, we may contact you by telephone.
Order Communication: To fulfil orders, Kinwi facilitates communication between the buyer and seller. Relevant details (such as names, delivery addresses, and tracking numbers) are shared between both parties and the courier service.
Marketing Messages: When you register an account, subscribe to our newsletter, or opt in during checkout, you may receive promotional updates and news about Kinwi. You can easily opt out of marketing emails at any time by clicking the “Unsubscribe” link at the bottom of any marketing message, in accordance with the Unsolicited Electronic Messages Act 2007.
Kinwi uses cookies and similar technologies (such as web beacons, local storage, and analytical tags) to ensure the Platform functions smoothly, securely, and seamlessly. We never sell your personal information.
What are cookies?
A cookie is a small data file stored in your browser’s cache when you visit a website. It allows the website to recognise your browser and remember key preferences (such as your login state and items in your cart) so you do not need to re-enter details as you browse between pages.
Types of cookies we use:
• Essential / Functional Cookies: Required for core marketplace operations, including user authentication, cart management, checkout security, and fraud prevention.
• Analytics & Performance Cookies: Help us understand how visitors interact with the site, measure traffic, and improve website speed and design.
• Preference Cookies: Remember your settings, such as whether you selected “Remember Me” at login.
Managing Cookies:
Most browsers accept cookies by default, but you can adjust your browser settings to decline or delete cookies. Please note that disabling essential cookies will prevent you from logging in, adding items to your cart, or completing purchases on the Platform. To learn more about managing cookies across different browsers, visit https://www.allaboutcookies.org.
Kinwi gives you the choice of accessing, editing, or updating your account information at any time. You can review or modify your personal details directly within your Account Settings. If you require any assistance, please get in touch with our team.
Please note that only your chosen Display Name is visible to other users on the Platform (for example, when you post a review on a product or seller).
Right to Withdraw Consent: Where we rely on your consent to process information, you can withdraw that consent at any time:
• You can opt out of promotional emails by clicking the “Unsubscribe” link at the bottom of any marketing message.
• If you have shared device location details, you can revoke permission at any time through the location settings on your mobile device or browser.
Account Closure & Deletion: You can request to close your account and delete your personal information at any time, except for records that Kinwi is legally required to retain by law (such as financial transaction records required under tax legislation) or to maintain marketplace security and dispute history.
For your security, we may verify your identity before processing any request to modify or delete personal data.
We may use relevant transaction and account records to help mediate disputes between buyers and sellers. We will obtain your consent before sharing contact information with another party involved in a dispute, unless permitted or required under the Privacy Act 2020 or other applicable laws.
You have the right to request access to the personal information we hold about you under Information Privacy Principle 6 of the Privacy Act 2020. You also have the right to request the correction of any information that is inaccurate, out of date, or incomplete under Information Privacy Principle 7.
In certain circumstances permitted by law, we may redact or withhold specific information where releasing it would compromise an ongoing investigation by a law enforcement agency, create a security risk, breach another individual’s privacy, or prejudice Kinwi’s commercial position.
Examples of information Kinwi may hold about your account include:
• Your username, display name, account holder name, email address, phone number, and delivery/billing addresses (including edit histories).
• Account creation dates, login timestamps, and device session logs.
• Financial and order records, including dates of purchase, amounts paid, items listed, items purchased, and buyer/seller usernames.
• Customer support messages and dispute ticket histories.
If you wish to make an official request to access or correct your personal information, please contact our team at customercare@kinwi.co.nz or through our Contact Us page.
We may update this Privacy Policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal, or regulatory reasons. We encourage you to check back regularly and review any updates. If there are significant changes we may notify you directly via email.
If we undertake or are involved in any merger, acquisition, reorganisation, sale of assets, bankruptcy, or insolvency event, then we may sell, transfer or share some or all of our assets. In this event, we will notify you before your personal information is transferred and becomes subject to a different privacy policy.
If you have any questions or require further information about our Privacy Policy, you are welcome to contact us at customercare@kinwi.co.nz or fill in our contact form here.
