Privacy and Data Policy for Thump Sports Limited.

At Thump Sports we recognise your right to confidentiality and are committed to protecting your privacy. Our Privacy Policy sets out standards to enable personal information in our care to be managed in accordance with the Privacy Act 2020 ensuring your privacy is safeguarded in accordance with New Zealand legislation.

All payments via our website are processed securely by trusted credit card and internet banking gateways.

Under no circumstances is your credit card information retained or used for anything other than orders. We do not give, rent or loan any identifiable personal information to any third parties unless legally required to do so.

1. Objective:
Our privacy policy assists employees to understand their responsibilities in protecting personal information from unauthorised access or use and protecting people from any harm that could result. The policy sets out the principles used by Thump Sports to collect, use, disclose and store personal information, and forms the basis of how Thump Sports will handle, process, manage and destroy personal information.

2. Scope:
Privacy relates to personal information, defined as information about an identifiable individual. Personal information that we collect at Thump Sports is related to our customers.

3. Secure Transmission of Payment Card Details:
At Thump Sports, the security of our customer’s payment card details is out of utmost importance. This policy outlines the security capabilities and measures we have implemented to protect the transmission of payment card information.

To ensure the secure transmission of payment card details, we employ the following security measures:

• Encryption: All payment card details transmitted between your device and our web and payment servers are encrypted using industry-standard encryption protocols. This ensures that your information is protected during transmission.
• Secure Socket Layer (SSL)/Transport Layer Security (TLS) : Our website uses SSL/TLS technology to establish a secure connection between your browser and our website. This protocol encrypts the data being transmitted, making it difficult for unauthorised parties to intercept or access the information.
• Payment Gateway: We partner with reputable payment gateway providers ANZ Bank, Paystation and eway that comply with the payment Card Industry Data Security Standard (PCI DSS). These providers are contracted to provide the required payment infrastructure to securely process your payment card information.

4. Data Protection Measures:
In addition to secure transmission, we implement robust data protection measures to safeguard payment card details.

• Tokenization: When processing payments, we use tokenization to replace sensitive payment card information with a unique identifier or token. This token is used for transaction processing, reducing the risk of exposing actual card details.
• Access Controls: Access to payment card information is restricted to authorised personnel only. Our employees are trained on the importance of data security and are required to follow strict access control policies.
• Monitoring and Auditing: We continuously monitor our systems for any suspicious activity or potential security threats. Regular audits are conducted to ensure compliance with security standards and identify any vulnerabilities.
  
  

5. Compliance with PCI DSS
Thump Sports is committed to maintaining compliance with the payment Card Industry Data Security Standard (PCI DSS). This includes:

• Regular Assessments: We conduct regular assessments of our systems and processes to ensure compliance with PCI DSS requirements.
• Security Controls: Implementation of stringent security controls, including firewalls, intrusion detection system, and encryption protocols, to protect payment card data.
• Incident Response Plan: We have an incident response plan in place to address any potential security breaches or data incidents. This plan includes steps for immediate containment, investigation, and notification of affected parties.

6. Customer Responsibilities
While we take extensive measures to protect your payment card details, it is also important for customers to take certain precautions:

• Keep Credentials Secure: Ensure that your login credentials and payment card details are kept secure and not shared with unauthorized individuals.
• Report Suspicious Activity: Notify us immediately if you suspect any unauthorized activity or if your payment card details have been compromised.

7. Data Collection:
Thump Sports carefully manages the collection of personal information. We collect only the information necessary to carry out our functions and responsibilities. Thump Sports commits to making people aware of the collection of information. We will inform them of our purpose for collection and their rights to access and correct that information.

Irrelevant and unnecessary information will be returned or destroyed where practicable, in both cases as soon as possible.

8. Access:
Thump Sports commits to providing individuals with access to their personal information unless an exception under legislation applies. Requesters are verified and the information is provided to them as soon as possible and within legislative timeframes.

9. Correction:
Thump Sports respects the individual’s right to seek amendment of their personal information. Where information is unable to be corrected, we will invite the individual to submit a statement of correction and ensure that it is read together with the original document in future.

10. Use and Disclosure:
Personal information is used and disclosed for the purposes consistent with the reason it was obtained, and the core purposes of Thump Sports. Reasonable steps will be taken to ensure personal information is complete, relevant, and up to date.

Personal information is disclosed to other trusted parties only where there is legal authority to do so. Thump Sports will take reasonable steps to ensure third parties protect the personal information we share with them in line with legislation (within New Zealand), and, if offshore, with the same care Thump Sports gives to it. Thump Sports holds the right to email and or text any and all Thump Sports competition entries or catalogue subscribers the latest Thump Sports news and/or deals.

11. Storage:
Thump Sports stores information with reasonable safeguards against loss and disclosure. Reasonable safeguards include using physical and technological protections against unauthorised access. Thump Sports will not keep information for longer than is necessary.

We may collect any of the following information from you:

• Name
• Address
• Email Address
• Phone Number
• Company Name
• Date of Birth
• Gender
• Credit card details (Credit card details are not stored).
• Enquiry details

12. Incident management:
Thump Sports has clear processes for containment, evaluation, notification and prevention of privacy breaches or incidents. When a privacy breach is discovered, quick action will be taken to stop any damage from becoming worse. Affected parties will be notified as appropriate and breaches will be reported externally according to the standards set by the Office of the Privacy Commissioner and legislation.

13. Privacy at Stores:
Thump Sports operates 3 stores and an online ecommerce website (www.thumpsports.co.nz). Our privacy policy is applicable to every store and managed by appointed store managers.

14. Staff Training:
Thump Sports will train its employees and contractors in personal information management and the information privacy principles.

15. Customer information:
Thump Sports will protect the privacy of Customers. Customer information is treated with the utmost care and respect, in accordance with good practice and legislated privacy requirements.

Thump Sports does not sell, trade, or otherwise transfer to outside parties your personally identifiable information. Information may be used to personalise your shopping experience, support the development and marketing of products and services, run competitions, conduct surveys, process payments and refunds, maintain and update our records, or verify your identity. We may not be able to do these things, deliver your online orders or respond to your enquiries without your personal information. In some cases, we may incorporate third party information for these purposes.

Sensitive information is only collected in specific circumstances and for defined and required purposes. Additional information will only be gathered after gaining your consent.

Our website uses “cookies”, which are small data files that are stored on your computer when you visit a website. Cookies enable you to shop on our website and may be used in a variety of ways to enhance or personalise your online browsing and shopping experience.

To make full use of the online shopping features of the Thump Sports website, your computer, tablet or mobile phone will need to accept cookies to enable certain features. If cookies are switched off, you may not be able to make a purchase on the Thump Sports website.

16. Employee information:
Thump Sports will protect the privacy of employees. Personal information is treated with the utmost care and respect, and in accordance with legislative privacy requirements.

When is use Closed Circuit Television (CCTV) footage/images may be used to investigate employment related issues. These will only be accessed where there is a clear purpose for doing so, viewed by select staff and used in a way that is compliant with the Privacy Act

17. Process review:
Thump Sports commits to retaining up to date privacy processes. Thump Sports processes relating to the collection, recording, access, use, storage and destruction of personal information are regularly reviewed to ensure they remain relevant and accessible to employees.

18. Responsibilities:
The business owners / General Manager will act as the Thump Sports Privacy Officer to oversee investigations into privacy-related complaints lodged with the Privacy Commissioner and Thump Sports. All Thump Sports employees have individual responsibility to report all privacy breaches and near misses to a Privacy Officer, comply with privacy policies, actively participate in privacy training, and identify privacy risks.

19. Consent:
Please note that by visiting our website, or retail stores you are consenting to our Privacy Policy.

20. Contact Us:
If you have any questions regarding our Privacy Policy please contact us using the information below.

• Thump Sports Ltd, 55 Delhi Crescent, Khandallah, Wellington 6035
• Email: info@thumpsports.co.nz, Phone 04 891 0176