Privacy Policy

1. Who We Are

Hyper Tyres Limited (trading as "Hyper Tyres", "we", "us" or "our") operates the website www.hypertyres.co.nz and related services. We are a New Zealand registered company and our principal place of business is in Auckland, New Zealand.

For any privacy-related enquiries, you can contact us at:

• [email protected]
• 09 580 2403

2. Information We Collect

We collect personal information when you:

• Create an account or sign in to our website
• Place an order for tyres or related services
• Book a tyre fitting appointment (installer or mobile fitting)
• Contact us by phone, email or through our online chat (Ask Charlie)
• Subscribe to our newsletter or promotional communications
• Browse our website (automatically collected technical data)

The types of personal information we may collect include:

• Identity information: your name and email address
• Contact information: phone number, delivery address
• Vehicle information: make, model, year, registration plate, tyre size
• Order information: products purchased, fitting bookings, order history
• Technical information: IP address, browser type, device type, pages visited, referring URL
• Communication records: chat transcripts with Ask Charlie, emails, phone call notes

We do not collect or store your full credit card or debit card numbers. All payment processing is handled securely by our payment provider, Stripe, which is PCI-DSS Level 1 certified.

3. How We Use Your Information

We use your personal information for the following purposes:

• Fulfilling orders: processing your tyre purchases, arranging delivery to your chosen installer or address, and coordinating fitting appointments
• Customer service: responding to your enquiries, providing tyre recommendations through Ask Charlie, and resolving any issues with your order
• Account management: maintaining your account, order history, and saved vehicle details
• Communications: sending order confirmations, booking reminders, shipping updates, and (with your consent) promotional offers
• Website improvement: analysing how our website is used to improve the user experience, product range, and service quality
• Legal compliance: meeting our obligations under New Zealand law, including tax and consumer protection requirements

We will only use your personal information for the purpose for which it was collected, or a directly related purpose, in accordance with Information Privacy Principle 10 of the Privacy Act 2020.

4. Who We Share Your Information With

We may share your personal information with the following third parties, only to the extent necessary to provide our services:

• Installer network: when you book a fitting, we share your name, phone number, vehicle details and booking date with your chosen installer so they can prepare for your appointment
• Payment processor (Stripe): your payment details are processed directly by Stripe. We receive only a transaction reference and confirmation of payment
• Delivery partners: your name and delivery address are shared with our courier partners to deliver your tyres
• Analytics services: we use privacy-respecting analytics to understand website usage. This data is aggregated and does not personally identify you

We do not sell, rent or trade your personal information to any third party for marketing purposes. We will not disclose your information to overseas recipients unless required to provide our services, and only with appropriate safeguards in place as required by the Privacy Act 2020.

5. Cookies and Tracking

Our website uses cookies and similar technologies to:

• Essential cookies: keep you signed in, remember your cart contents, and ensure the website functions correctly
• Analytics cookies: help us understand how visitors use our website so we can improve it
• Preference cookies: remember your settings such as preferred vehicle type or search filters

You can control cookies through your browser settings. Disabling essential cookies may affect the functionality of our website, including the ability to place orders.

6. Data Security

We take reasonable steps to protect your personal information from unauthorised access, use, modification, disclosure or loss. Our security measures include:

• SSL/TLS encryption on all pages of our website
• Secure, encrypted database storage
• PCI-DSS compliant payment processing through Stripe
• Access controls limiting who within our organisation can view personal information
• Regular security reviews of our systems and processes

In the event of a privacy breach that poses a risk of serious harm, we will notify the Office of the Privacy Commissioner and affected individuals as required by Part 6 of the Privacy Act 2020.

7. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected. Specifically:

• Account information: retained while your account is active, and for a reasonable period after closure
• Order records: retained for 7 years to comply with New Zealand tax and accounting requirements
• Booking records: retained for 2 years after the fitting date for warranty and service purposes
• Chat transcripts: retained for 12 months to improve our AI tyre advisor and customer service
• Analytics data: aggregated and anonymised data may be retained indefinitely

When personal information is no longer required, we will securely delete or de-identify it in accordance with Information Privacy Principle 9.

8. Your Rights

Under the Privacy Act 2020, you have the right to:

• Access: request a copy of the personal information we hold about you (Information Privacy Principle 6)
• Correction: request that we correct any inaccurate or incomplete personal information (Information Privacy Principle 7)
• Deletion: request that we delete your personal information where it is no longer needed for the purpose it was collected
• Withdraw consent: unsubscribe from marketing communications at any time by clicking the unsubscribe link in any email, or by contacting us directly

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 20 working days, as required by the Privacy Act 2020.

9. Third-Party Links

Our website may contain links to third-party websites (such as tyre manufacturer sites, our installer partners, or payment providers). We are not responsible for the privacy practices of these external sites. We encourage you to read their privacy policies before providing any personal information.

10. Children's Privacy

Our website and services are not directed at children under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us and we will promptly delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically. Continued use of our website after changes are posted constitutes acceptance of the updated policy.

12. Complaints

If you have a concern about how we have handled your personal information, please contact us first at [email protected] and we will do our best to resolve it. If you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Privacy Commissioner.