framewrk

1. Who We Are

framewrk (“we”, “us”, “our”) is a New Zealand legal document template service. We sell general-purpose legal document templates to New Zealand businesses through our website at framewrk.co.nz.

We are not a law firm and use of our website does not create a lawyer-client relationship. See our Terms of Use for details.

Privacy contact: info@framewrk.co.nz

2. What This Policy Covers

This Privacy Policy explains what personal information we collect when you visit framewrk.co.nz or purchase a template, how we use and store it, who we share it with, and your rights under the Privacy Act 2020 (NZ). It applies to all visitors and customers of framewrk.co.nz.

3. What Personal Information We Collect

We collect the following categories of personal information:

3.1  Information you give us directly

• Name and email address - when you create an account, purchase a template, or contact us.
• Billing address - required for payment processing.
• Business name and details - provided when you purchase a template.
• Any information you include when you contact us by email or through our website.

3.2  Information collected automatically

• Usage data - pages visited, time spent on pages, links clicked, and how you reached our site.
• Device and browser information - browser type, operating system, and IP address.
• Cookie and tracking data - see section 7.

3.3  Payment information

We do not store your payment card details. We receive only a transaction confirmation and the last four digits of your card for reference.

4. Why We Collect and Use Personal Information

We collect and use personal information for the following purposes, each of which is consistent with the Privacy Act 2020:

We will not use your personal information for any purpose that is materially different from those described above without first notifying you.

5. Who We Share Personal Information With

We do not sell your personal information. We share it only as follows:

1. Payment provider: to process your payment.
2. Email and communications platform: to send order confirmations and, where you have opted in, marketing emails.
3. Website hosting and platform provider: your data may be processed on servers operated by our website hosting provider.
4. Analytics provider: anonymised usage data to help us understand website traffic. We do not share identifiable personal information with analytics providers.
5. Professional advisers: lawyers, accountants, or insurers, in the ordinary course of operating our business, on a confidential basis.
6. Law enforcement or regulators: where required by law, court order, or to protect our rights or the safety of others.

6. How Long We Keep Your Information

We retain personal information for as long as is necessary for the purpose for which it was collected, or as required by law:

1. Account information: for as long as you hold an account with us, and for 2 years after account closure.
2. Purchase and transaction records: for 7 years from the date of purchase, as required for NZ tax and business record-keeping.
3. Marketing consent records: until you withdraw consent, and for a reasonable period thereafter as evidence of prior consent.
4. Enquiry records: for 2 years from the date of the enquiry, unless the matter requires longer retention.

When information is no longer required, we delete or anonymise it securely.

7. Cookies and Analytics

Our website uses cookies and similar tracking technologies. Cookies are small text files stored on your device that help our website function and help us understand how it is used.

We use the following types of cookies:

1. Essential cookies: required for the website to function (e.g. keeping you logged in, remembering items in your cart). These cannot be disabled.
2. Analytics cookies: used to understand how visitors use our site. This data is collected in aggregate and does not identify individual visitors.

You can control cookies through your browser settings. Disabling cookies may affect the functionality of the website.

Under New Zealand law, there is currently no requirement to obtain explicit cookie consent (unlike the EU). However, we are transparent about the cookies we use in this Policy.

8. Marketing Communications

We may send you email marketing communications about new templates, promotions, and relevant business updates if you have opted in to receive these. We comply with the Unsolicited Electronic Messages Act 2007. Every marketing email includes a clear and functioning unsubscribe link.

You can unsubscribe from marketing emails at any time by:

1. Clicking the ‘Unsubscribe’ link in any marketing email; or
2. Emailing us at info@framewrk.co.nz.

Unsubscribing from marketing does not affect transactional communications related to your purchases or account.

9. Overseas Data Storage and Processing

Some of the third-party service providers we use (including our payment provider and email platform) may store or process your personal information on servers located outside New Zealand. Before disclosing personal information to an overseas person or entity, we take reasonable steps to ensure that the overseas recipient handles that information in a way that is consistent with the Privacy Act 2020’s requirements for cross-border data flows (information privacy principle 12).

10. Security

We take reasonable steps to protect your personal information from loss, unauthorised access, use, modification, or disclosure. Our security measures include:

1. Secure (HTTPS) connections on our website.
2. Password-protected access controls to our systems.
3. Payment processing through a PCI DSS-compliant provider (we do not store card details).

Despite these measures, no system is completely secure. We cannot guarantee the absolute security of information transmitted to or from our website.

11. Privacy Breaches

We take privacy breaches seriously. If we become aware of a privacy breach that is likely to cause serious harm to any individual, we will notify the Privacy Commissioner and affected individuals as required by the Privacy Act 2020 (Part 6 — notifiable privacy breaches). We will also take immediate steps to contain the breach and prevent further harm.

12. Your Rights

Under the Privacy Act 2020, you have the right to:

To exercise any of these rights, contact us at: info@framewrk.co.nz. We will respond within 20 working days.

13. Complaints

If you have a concern about how we have handled your personal information, please contact us first so we have an opportunity to address it.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. We will post the updated Policy on this page with a new ‘Last updated’ date. For material changes, we will notify registered users by email. We encourage you to review this Policy periodically.

15. Contact Us

For any privacy-related enquiries, please contact:

This Privacy Policy is governed by New Zealand law and the Privacy Act 2020.