Privacy Statement

1. Who We Are

This website (maulolotavita.com) is operated by ACA Consult NZ, which manages the website and its operations. ACA Consult NZ is the data controller responsible for your personal information. The products sold on this website are produced by Maulolo Tavita and purchased by ACA Consult NZ with his permission for resale.

2. Information We Collect

When you place an order, we collect:

• Your name and email address
• Your shipping address (for physical orders)
• Details of the products you purchase
• Payment confirmation from Stripe (we do not store your card details)

3. How We Use Your Information

We use your information to:

• Process and fulfil your orders
• Send you order confirmations and digital download links
• Ship physical products to your address
• Respond to your enquiries
• Keep records for accounting and tax purposes

4. Payment Processing

Payments are processed by Stripe, a third-party payment provider. Your card details are handled directly by Stripe and are never stored on our servers. We only receive confirmation that your payment was successful. Stripe's own privacy policy governs how they handle your payment data.

5. Digital Downloads

For digital products, we generate a time-limited download link that is sent to your email address and shown on the confirmation page. These links expire after 7 days. Please keep your email secure to protect access to your downloads.

6. Sharing Your Information

We do not sell or rent your personal information. We share your information only with:

• Stripe, for payment processing
• Postal or courier services, for shipping physical orders
• Service providers who help us operate the website, under confidentiality agreements

We may disclose information if required by law or to protect our rights.

7. Data Retention

We retain order records for as long as necessary for accounting, tax, and legal purposes. Download links expire after 7 days, after which the digital files are only accessible through your original confirmation email (while the link remains valid).

8. Cookies

This website uses essential cookies and local storage to remember the contents of your shopping cart and to operate the store. We do not use advertising cookies or track you across other websites.

9. Security

We take reasonable measures to protect your personal information. Payment data is handled by Stripe, which is certified to PCI DSS Level 1. Digital download files are stored in private storage and only accessible via time-limited signed links.

10. Your Rights

You have the right to access, correct, or request deletion of your personal information. You may also request a copy of the data we hold about you. To exercise these rights, please contact us through the website.

11. Updates to This Policy

We may update this Privacy Statement from time to time. Changes will be posted on this page with an updated date. We will notify you of significant changes where appropriate.

12. Contact

If you have any questions about this Privacy Statement or how your data is handled, please contact ACA Consult NZ through the website.