Privacy Policy
Maintaining your privacy is really important to us. You entrust us with your information, and we take that responsibility seriously.
We may modify or update this Privacy Policy from time to time to reflect changes in our business and practices, and so you should review this page periodically. When we change the policy in a material manner we will let you know and update the 'last updated' date below.
This Privacy Policy was last updated on 21 June 2026.
1. General Information
Gavey Art takes security and privacy seriously. This Privacy Policy explains how we collect, store and use personal data when you browse Gavey Art or otherwise provide your personal data to us. Please read this Privacy Policy carefully to understand how we will treat your personal data.
2. What information we collect about you
Your personal data
When we say your "personal data", we mean any information that identifies any person that you provide to us.
Your personal data may also be contained in information that we collect about you in connection with your order, or when you otherwise interact with us, for example by email.
When it comes to your personal data, we comply with our obligations under applicable data protection legislation.
Your personal data includes the information you provide on the Gavey Art website (including any forms you complete), or during an email enquiry.
Examples of this personal data include your name, email address, and delivery address, which you provide when you go to checkout or contact us.
We do not knowingly collect or solicit any personal data from anyone under the age of sixteen, or knowingly allow such persons to purchase goods from us. In the event that we learn we have collected personal data from a child under age sixteen without verification of parental consent, we will delete that information as quickly as possible.
Information we collect — We collect information about your website usage to improve our site and understand trends. Here is the information we collect and how we use it:
- We monitor patterns of usage, such as abandoned cart data, so we can understand what people are interested in buying from Gavey Art and improve our products and customer experience.
- Gavey Art does not store any credit card data. When payments are processed via credit card, Gavey Art uses third-party vendors that are PCI-DSS compliant. At no point does Gavey Art have access to your credit card information. For further information visit https://freewebstore.com/PCI_compliance.html.
3. How we use the information we collect
We use your personal data for legitimate business reasons, for example to email you when your order has been received or dispatched. It will also enable us to contact you where necessary concerning Gavey Art or an order you have placed, to record your personal preferences, and to personalise our services to you.
Contacting you for marketing purposes — We may use your personal data to let you know about our products, offers, or ranges which may be of interest to you. We will only use your data in this way where you have provided consent, we have legitimate business reasons for doing so, or where we are otherwise entitled by law to do so. If you would like us to stop, please contact us using the details at the end of this policy.
Legal requirements — We may use your personal data to comply with any legal obligations to which we are subject.
4. Why do we use your personal data?
We collect and use your personal data for a variety of reasons. We need some data to enter into and perform our contract with you. The lawful basis for processing your personal data is consent, as you have consented to provide your personal details to allow us to provide a service to you.
Other information we collect because we have legitimate business interests, for example in:
- Fulfilling your order and providing updates on the order.
- Understanding how our customers use our products, services, and website.
- Understanding and responding to customer feedback.
- Researching and analysing the services our customers want.
- Improving our products and better understanding how our customers use them.
5. How we share information we collect
Except as described in this policy, Gavey Art does not divulge any personal information gathered via its services to third parties.
We may share your personal data with third parties in certain circumstances:
- In the event that our business or substantially all of its assets are acquired by a third party, personal information about customers will be one of the transferred assets.
- If we are under a duty to disclose or share your personal data in order to comply with any legal obligation, to cooperate with law enforcement officials, or in order to enforce or apply any contract with you, or to protect our rights, property, or safety.
We also use a number of carefully selected third parties to help provide our services. Examples include website hosting, handling credit card transactions, and email. No ownership rights to the data will be transferred to any third party.
Sub-processors we use:
| Name | Service Provided | Link |
| Freewebstore | eCommerce provider for website design, hosting and data storage. | https://freewebstore.com/privacy.htm |
| Google Analytics | Anonymous website usage tracking. | https://policies.google.com/privacy |
6. How long do we store your data for?
We only store your data for as long as necessary for the purposes of processing set out in this policy.
Data Retention Policy
| Category | What personal information is kept? | How long is it kept for? |
| Order Data | Name, email, address | 7 years (in line with NZ tax record requirements) |
| Invoices | Name, email, address | 7 years (in line with NZ tax record requirements) |
| My Account | Name, email, address | Active until user unsubscribes or makes an individual request |
| Newsletter subscriptions | Email address | Active until user unsubscribes |
7. How to access and control your information
You are free to change your personal details in the My Account section of your account at any time, if you have set up an account with us. You can also ask us for a copy of the personal data we hold about you. We may ask for proof of identity before providing any information.
Your individual rights
7.1. Access to your personal data: You can ask us to confirm if we are processing your personal data and request a copy by contacting us (see "How to Contact Us" below).
7.2. Right to change or withdraw your consent: Where you have given us consent to use your personal data, you may withdraw that consent at any time by contacting us. If you no longer wish to be contacted for marketing purposes, use the unsubscribe link in any email or get in touch.
7.3. Right to Rectification: You may ask us to update inaccurate information we hold about you. To do so, log in to your Gavey Art account and update your information, or get in touch.
7.4. Right to Erasure: In certain circumstances you may ask us to erase your personal data. Please get in touch using the details at the end of this policy.
7.5. Right to Data Portability: In certain circumstances you may ask us to provide your personal data in a structured, commonly used, machine-readable form, or ask us to send it to another data controller.
7.6. Right to object: In certain circumstances you may object to our processing of your personal data. Please get in touch using the details at the end of this policy.
7.7. Right to restrict processing: You can ask us to restrict the processing of personal data we hold about you in certain circumstances. Please get in touch using the details at the end of this policy.
7.8. Make a complaint: You may make a complaint about our data processing activities by contacting us (see "How to Contact Us" below).
8. Use of cookies
Gavey Art uses Google Analytics to understand how visitors use this website. Google Analytics collects anonymous usage data (such as pages visited and time on site) using cookies. This data helps us improve the website and understand customer behaviour. No personally identifiable information is collected through Google Analytics.
You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on.
9. Data security
We take security and privacy seriously. We will endeavour to take all reasonable steps to keep your personal data secure once it has been transferred to our systems. We adopt appropriate, industry-standard data collection, storage, and processing practices to protect against unauthorised access, alteration, disclosure, or destruction. For more information on how we keep online data safe, visit https://freewebstore.com/privacy.html.
10. How to Contact Us
If you have any queries relating to this Privacy Policy or Gavey Art's use of your personal data, please contact [email protected].