Privacy policy

Information we collect

When you request books, we collect your name, email address, selected courses, book types, quantities, delivery preference, preferred collection club and any optional notes. Stripe collects billing details, payment details and, for delivery orders, your shipping address during secure checkout. We retain order and payment references, payment status, confirmed delivery details and the information needed to fulfil and account for your order. We do not collect or store full card numbers or card security codes on this website.

Our hosting and domain providers process technical information such as IP addresses and request logs to operate and secure the service. Order submissions use a short time-bucketed hash of network information to help prevent abuse. Please do not put card details, identity documents, health information or unnecessary information about children in order notes.

Why we need it

We use this information to check the requested course edition, calculate prices, confirm delivery or collection, process payment, fulfil orders, resolve complaints and maintain necessary business records. Required fields are marked in the form. Without the necessary contact, order or delivery information, we may be unable to process your request. Optional notes are not required.

An order or enquiry does not subscribe you to marketing. We do not use your order details to send marketing without a separate appropriate basis or consent.

Who processes or receives it

Our website uses OpenAI Sites infrastructure with Cloudflare hosting and a hosted order database. Stripe handles checkout, payment processing and payment receipts under its own privacy practices. Enquiries sent to our contact address are processed through our email provider. Delivery providers and an agreed collection Pro shop receive only the information reasonably needed for the agreed fulfilment arrangement. A proposed club does not receive your full order merely because it appears in our directory.

Some providers may process information outside New Zealand. Where required, we assess applicable safeguards for overseas disclosures. We may also disclose information where required or permitted by law. We do not sell your personal information.

We currently rely on Stripe payment receipts and the private website order-status page. Separate XYARD order, approval and dispatch emails are not automatically sent by the website. A queued notification is not a delivered email.

Browser storage and external sites

The website saves book selections in local storage and a private order-access token in session storage to support the shopping and order-status experience. Clearing browser data may remove those local copies. Treat your saved private order link as confidential. We have not added advertising trackers, analytics scripts or marketing cookies. Hosting/security providers and Stripe may use storage or cookies necessary for their own services.

The custom enquiry form prepares a message in your email app; it is sent only if you choose to send it. Outbound video and social links take you to third-party websites with their own privacy practices. No external video player loads while you browse this site.

Group orders and young players

Please supply the organiser contact and order specification rather than unnecessary player lists or dates of birth. If an organiser provides personal information about another person, we consider the applicable notice requirements for indirect collection, including New Zealand Information Privacy Principle 3A. We will provide required notice unless a lawful exception applies. An organiser should have permission to provide any recipient details that are necessary for fulfilment.

Security and retention

Order access is restricted through private access tokens and operator authorisation. No online system is risk-free. We retain information only as long as reasonably needed for the purposes described or legal and accounting requirements; necessary tax records may need to be kept for at least seven tax years. Enquiry and technical information is reviewed for deletion when no longer needed. Tax-record storage arrangements must meet applicable Inland Revenue requirements.

Your rights and complaints

Email legendxu@gmail.com to request access to or correction of your information, ask about retention or deletion, or raise a privacy concern. We may need to verify your identity before providing private order information. Deletion may be limited by legal record-keeping obligations. If we cannot resolve a concern, you can contact the New Zealand Office of the Privacy Commissioner.

Changes

We may update this policy as the service changes. The date above identifies the current version. Material changes to how we handle existing customer information will be communicated where required.

Business address and correspondence

Spaces, 110 Carlton Gore Road, Newmarket, Auckland 1023, New Zealand. Correspondence is by email to legendxu@gmail.com. This is not a walk-in collection or returns location. Contact us first for return instructions.