Brownies Mattress Direct operates at brownies.co.nz and from our physical showroom. This policy explains how we collect, use, store, and protect your personal information, and what your rights are under the New Zealand Privacy Act 2020, including the Privacy Amendment Act 2025 (in force from 1 May 2026).

Information you give us directly

When you make a purchase, create an account, or get in touch with us — online or in-store — we may collect your name, email address, delivery and billing address, phone number, and payment details.

Information collected indirectly

We may receive information about you from third parties — for example, where a courier service provides updated delivery details, or where you interact with our store via a third-party platform. In line with IPP 3A of the Privacy Act 2020, where we collect personal information from a source other than yourself, we will take reasonable steps to make you aware of who we are, why we collected your information, what we intend to do with it, and your rights of access and correction.

Information collected automatically

When you browse our site, our platform collects standard technical data including your IP address, browser type, pages visited, and time on site. If you add items to your cart without completing a purchase, that information may also be retained (see Abandoned Carts below).

We collect personal information only for the purposes of:

• Processing and fulfilling your orders
• Coordinating delivery of your purchase
• Sending product information such as warranty documentation
• Communicating with you about your purchase or enquiry
• Sending marketing communications where you have opted in
• Improving our website and customer experience
• Complying with legal and accounting obligations

We won't use your information for unrelated purposes without your consent.

When you purchase from us in-store, we may collect your name, email address, and phone number. We use this information to:

• Coordinate delivery of your purchase
• Send product information such as warranty documentation
• Add you to our marketing communications, where you have provided consent at the time of purchase

Information collected in-store is held separately from our online store and is not processed through our Shopify platform.

You can withdraw your consent for marketing communications at any time by contacting us directly or using the unsubscribe link in any email we send you. Withdrawing consent for marketing will not affect delivery or warranty communications related to your purchase.

We use cookies — small data files stored on your device — to understand how people use our site and to ensure it works properly. Some cookies are essential to the store functioning; others help us improve your experience.

You can instruct your browser to refuse cookies, though some parts of our site may not function as intended if you do. We don't use cookies to build advertising profiles or track you across other websites without your knowledge.

We may use third-party analytics tools such as Google Analytics. These providers operate under their own privacy policies and may set their own cookies.

If you add items to your cart but don't complete a purchase, our store platform may retain that information and, where you have previously provided your email address, may send you a reminder. You can opt out of these emails at any time using the unsubscribe link included in the message.

We may use analytics tools to understand how customers browse our site — including which products are viewed and how people navigate between pages. This information is used in aggregate to improve our store and is not used to identify you personally without your consent.

Our online store is built on Shopify Inc., a Canadian e-commerce platform. Shopify processes customer data on our behalf — including order details, delivery addresses, and browsing behaviour on our site — as part of providing our store infrastructure. You can review Shopify's privacy policy at shopify.com/legal/privacy.

Payment transactions made online are processed by Shopify Payments (powered by Stripe). Your full card details are handled directly by these providers and are not stored by Brownies Mattress Direct. In-store payments are processed via EFTPOS and we do not retain your card details.

We also work with a number of other third-party providers in the course of running our business, who may have incidental access to systems or data that contain personal information. These include:

• IT support and infrastructure providers, who maintain and support our business systems and may access data in the course of that work
• Business software providers, including accounting, point-of-sale, and operational platforms
• Website development and maintenance providers, who may access our online store backend for development or technical support purposes
• Shopify-integrated apps, such as product review tools or email marketing platforms, which may collect limited data in order to function

All third-party providers are engaged on the basis that they use personal information only for the specific purpose for which it was shared, keep it confidential, and do not use it for any other purpose. We take reasonable steps to ensure these providers operate under appropriate privacy standards consistent with the Privacy Act 2020.

Where any of these providers are based outside New Zealand, we take reasonable steps to ensure your information is protected to a comparable standard, as required by IPP 12 of the Privacy Act 2020.

We take reasonable security precautions to protect your personal information from unauthorised access, loss, misuse, or disclosure. Our online store is hosted on Shopify's platform, which maintains industry-standard security practices including encrypted transactions (SSL/TLS). In-store customer records are held securely and accessed only by authorised staff.

No method of electronic transmission or storage is completely secure. While we do our best, we cannot guarantee absolute security and encourage you to take care with the personal information you share online.

We retain your personal information only for as long as needed to fulfil the purpose for which it was collected, or as required by law. Certain transactional records such as order history may be retained for legal or accounting purposes even after you request deletion of your account.

If you opt in to marketing emails — at checkout, via our website, or in-store — we may send you product updates, promotions, or other relevant communications. You can unsubscribe at any time using the link at the bottom of any marketing email, or by contacting us directly. Unsubscribing from marketing will not affect transactional or delivery-related communications.

Under the Privacy Act 2020, you have the right to:

• Access the personal information we hold about you, whether collected online or in-store
• Correct any information that is inaccurate or out of date
• Request deletion of your personal information where we no longer have a lawful reason to hold it, including requesting deletion of your online customer account
• Complain to the Office of the Privacy Commissioner if you believe we have interfered with your privacy

To exercise any of these rights, contact us at [your contact email]. We'll respond within 20 working days as required by law.

Our site may contain links to third-party websites. We have no control over those sites and are not responsible for their privacy practices. This policy applies only to brownies.co.nz and our in-store operations.

If Brownies Mattress Direct is acquired, merged, or its assets transferred, your personal information — whether collected online or in-store — may be included in what is transferred. Any successor will be required to handle your information in accordance with this policy or equivalent protections.

We may update this policy from time to time to reflect changes in our practices or applicable law. The date at the top of this page will always reflect the most recent version. Continued use of our site after any changes constitutes acceptance of the updated policy. For significant changes, we will make reasonable efforts to notify you directly.

For any privacy-related queries, access requests, or complaints:

Brownies Mattress Direct

03 366 5531

128 Moorehouse Ave, Christchurch

If you're not satisfied with our response, you can contact the Office of the Privacy Commissioner at privacy.org.nz or on 0800 803 909.