Privacy policy.

Who we are

StoreSmith provides specialist Google Ads management and ecommerce catalogue services. We are based in New Zealand and work with businesses internationally.

For the purposes of the New Zealand Privacy Act 2020, StoreSmith is the agency collecting and holding the personal information described in this policy.

What we collect

Information you give us

When you request an audit, contact us or work with us, we may collect:

• your name, work email address and any other contact details you provide;
• your store URL, approximate catalogue size and whether you are running Google Ads;
• messages, emails, call notes and other information you choose to share; and
• billing, contract and relationship information if you become a client.

Information from the website

When you use this site, our website and measurement providers may collect your IP address, browser and device information, approximate location, referring page, pages viewed and interactions such as clicks on booking or email links.

Information used to provide our services

If you authorise access to advertising, analytics, Merchant Center or ecommerce systems, we may view and use the account, product, sales and performance information available there. Some systems may include personal information about your staff, customers or other people. We use that information only to provide the agreed service and in line with your instructions and our agreement with you.

Information from other sources

We may collect relevant business and professional contact information from public websites, business directories, referrals or a service provider. If we collect personal information about you from someone else, we will take reasonable steps to make sure you know about the collection when required by New Zealand law.

How we use it

We may use personal information to:

• assess and respond to an audit request or enquiry;
• provide, manage and improve our services;
• communicate with clients and prospective clients;
• analyse account performance and prepare reports or recommendations;
• operate, measure, protect and improve this website;
• keep business, tax and contractual records; and
• meet legal obligations or protect our rights and the security of our systems.

We may send information about StoreSmith services where you have asked for it or where the law otherwise permits. You can ask us to stop at any time.

Website measurement and cookies

We use Google Tag Manager to run Google Analytics, Meta Pixel and LinkedIn Insight Tag. These tools help us understand visits to the site and whether our advertising leads to actions such as a booking-button click, an email click or a completed audit request.

These providers may use cookies, pixels or similar technology and may receive online identifiers, IP address, browser and device information, page visits, referring information and interaction events. The information typed into our audit form is submitted to StoreSmith through Netlify and is not intentionally included in the analytics or advertising events we configure.

You can block or delete cookies through your browser settings. Blocking them may change how some parts of the site work. You can also use the privacy and advertising controls offered by Google, Meta and LinkedIn.

Who may receive your information

We may share personal information only where reasonably necessary with:

• the people working with StoreSmith who need it to do their work;
• hosting, form-processing, email, analytics, advertising, document, accounting and other business-system providers;
• advertising, analytics or ecommerce platforms where this is part of the service you have asked us to provide;
• professional advisers, insurers or authorities where reasonably required; and
• another organisation if StoreSmith is sold or reorganised, subject to appropriate confidentiality and privacy protections.

Our current website providers include Netlify, Google, Meta and LinkedIn. Each provider handles information under its own terms and privacy practices. We do not sell personal information.

Storage, overseas providers and security

StoreSmith is based in New Zealand, but some of the service providers we use may store or process information in other countries. When personal information is disclosed outside New Zealand, we will take the steps required by the Privacy Act 2020 to make sure it is protected by comparable safeguards or another permitted basis.

We use reasonable technical and organisational safeguards to protect personal information from loss, unauthorised access, misuse or disclosure. No website or online system can be guaranteed completely secure.

How long we keep it

We keep personal information only for as long as it is reasonably needed for the purpose for which it was collected, to maintain necessary business records or to meet legal obligations. Retention periods vary by the type of information and the systems in which it is held. When information is no longer required, we take reasonable steps to delete it or remove identifying details.

Your rights

You can ask whether we hold personal information about you, request a copy and ask us to correct it if you think it is wrong. You can also raise a privacy concern or ask us to delete information we no longer need.

Email hello@storesmith.co.nz. We may need to confirm your identity before giving access to or changing personal information.

If we cannot resolve a privacy concern, you can contact the Office of the Privacy Commissioner.

Changes to this policy

We may update this policy when our services, providers or legal obligations change. The latest version will be published on this page with the date it was last updated.