Privacy Policy

This policy explains how Spin & Rewards Limited collects, uses, stores and shares personal information under the Privacy Act 2020 (NZ). “Personal information” means information about an identifiable individual.

What we collect

• Account details: name/username, email, password (hashed), preferences, support messages.
• Usage/device data: IP address, device/browser info, pages viewed, referral URLs, timestamps, approximate location.
• Cookies/IDs: cookie identifiers, analytics identifiers, and advertising pixel events.
• Optional purchases: transaction reference, items, amount, and limited billing details. Payment card details are handled by our payment processor and are not stored by us in full.

How we collect it

Directly from you (registration, forms, purchases) and automatically via cookies, analytics tools, and advertising pixels.

How we use it

• Provide and maintain the site, accounts, rewards, and customer support.
• Security, fraud prevention, and service monitoring.
• Site analytics and performance.
• Marketing measurement and advertising (where enabled), including conversion tracking.
• Legal compliance and enforcing our terms.

Sharing and disclosures

We may share personal information with service providers who help us operate (hosting, analytics, advertising measurement, email/support tools, and payment processing). We may also disclose information where required by law, to protect rights/safety, or as part of a business restructure/transfer. We do not sell personal information as a standalone product.

Cookies, analytics and advertising pixels

We use cookies and similar technologies to keep you signed in, remember preferences, measure traffic, and understand ad performance. You can control cookies through your browser settings and may be able to limit personalised advertising through your device/account ad settings. Blocking cookies may affect site functionality.

International transfers

Some providers may process data outside New Zealand. We take reasonable steps to ensure overseas recipients protect information in a way that is comparable to NZ privacy protections (for example, via contractual safeguards and provider due diligence).

Retention

We keep personal information only as long as needed for the purposes above, unless a longer period is required or permitted by law (e.g., tax/accounting or dispute handling). We then delete or de-identify it where reasonable.

Security

We use reasonable safeguards (access controls, encryption in transit, and monitoring). No method of storage or transmission is completely secure.

Your rights (NZ)

You can request access to and correction of your personal information. If we decline a request, we will explain why (as required by the Privacy Act 2020). You can also complain to us or to the Office of the Privacy Commissioner (privacy.org.nz).

Contact

We may update this policy from time to time by posting a new version on this page.