MUSE NZ operates the website at www.musenz.com. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website or purchase from us.
This policy is written in plain English. We are bound by the New Zealand Privacy Act 2020 and its Information Privacy Principles (IPPs), which set out how organisations must handle personal information. Where relevant, we reference these principles directly.
By using our website or placing an order, you agree to the practices described in this policy.
We collect personal information that you give us directly or that is generated by your use of our website. Under Privacy Act 2020 IPP 1, we only collect information that is necessary for one of the purposes described in Section 3.
When you place an order:
When you browse our website:
When you contact us:
When you sign up for marketing:
Under Privacy Act 2020 IPP 10, we use personal information only for the purposes for which it was collected, or for directly related purposes.
Processing your order: We use your name, email, address, and order details to fulfil your purchase, dispatch your item, and send you order confirmation, dispatch notifications, and tracking information.
Customer support: We use your contact details and order information to respond to your questions, resolve issues, and handle returns or exchanges.
Marketing (with your consent): If you have opted in, we may email you about new drops, promotions, and product updates. You can unsubscribe at any time using the link in any email we send.
Website improvement: Anonymised browsing data helps us understand how people use our site so we can improve it.
Legal and compliance: We may use or retain information where required by law, including for tax, fraud prevention, or in response to a lawful request from a government agency.
We do not sell your personal information. We share it only with the service providers listed below, and only to the extent necessary to run our business. Under Privacy Act 2020 IPP 11, we do not disclose information to third parties except for the purposes described.
Each of these providers is contractually obligated to handle your data securely and only for the purpose we have engaged them for.
| Provider | Purpose | Location | Privacy policy |
|---|---|---|---|
| Stripe | Payment processing. Stripe handles all card transactions. We do not see or store your full card number. | USA | stripe.com/nz/privacy |
| NZ Post | Delivering your order. We share your name and delivery address with NZ Post to arrange delivery. | New Zealand | nzpost.co.nz/about-us/privacy |
| Medusa Cloud and Medusa Emails | Commerce hosting and email delivery for order communications and, where you have consented, MUSE marketing emails. | Cloud infrastructure may process data outside New Zealand | medusajs.com/privacy-policy |
| Google Analytics | Anonymised website analytics. Helps us understand how visitors use our site. No personal order data is sent to Google. | USA | policies.google.com/privacy |
| Meta (Facebook / Instagram) | Advertising. We use Meta Pixel to measure the effectiveness of our advertising. You can opt out via Meta's Ad Preferences. | USA | facebook.com/privacy/policy |
We may also disclose information to law enforcement or government agencies if required by law, or where we believe disclosure is necessary to protect our rights or the safety of others.
Some of our service providers, including Stripe, Medusa Cloud, Google, and Meta, may process information outside New Zealand. When we send your data to them, it is transferred outside of New Zealand.
Under Privacy Act 2020 IPP 12, we take steps to ensure that personal information transferred overseas receives comparable protection to what is required under NZ law. We do this by using providers who are subject to Standard Contractual Clauses or equivalent data protection frameworks, and by selecting providers with strong, publicly available privacy commitments.
By using our website and providing your information, you acknowledge and agree to this transfer as described in this policy.
Cookies are small files stored on your device by your browser. We use them to make our website work properly and to understand how it is being used.
Essential cookies — required for the site to function. These include your shopping bag, login session, and currency preference. You cannot turn these off without affecting how the site works.
Analytics cookies — used by Google Analytics to collect anonymised data about how visitors use the site. No personal information is included.
Marketing cookies — used by Meta Pixel to measure the performance of our advertising and to show relevant ads. You can opt out of these through your browser settings or via each provider's opt-out tools.
Under Privacy Act 2020 IPP 9, we do not keep personal information for longer than necessary for the purposes for which it was collected.
You can request deletion of your personal data at any time. See Section 8 for how to do this.
Under the NZ Privacy Act 2020, you have the following rights regarding your personal information:
To exercise any of these rights, email support@musenz.com with the subject line matching your request ("Access Request," "Correction Request," or "Data Deletion Request"). We will respond within 20 working days as required by the Privacy Act 2020.
Under Privacy Act 2020 IPP 5, we take reasonable steps to protect the personal information we hold from loss, misuse, unauthorised access, modification, or disclosure.
Our website uses HTTPS (TLS encryption) throughout. Payment data is handled exclusively by Stripe and never passes through or is stored on our servers. Access to customer data within our systems is restricted to the people who need it to do their jobs.
No system connected to the internet is completely secure. If we become aware of a privacy breach that is likely to cause serious harm, we will notify the Privacy Commissioner and affected individuals as required by the Privacy Act 2020 (sections 112-120).
Our website and services are intended for people aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe a person under 18 has provided us with their information, please contact us at support@musenz.com and we will delete it promptly.
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated version will be published on this page with a revised "last updated" date. We will notify you of any material changes by email where we hold your address and the change is significant.
Continued use of our website after a policy update constitutes your acceptance of the revised policy.
For any questions about this Privacy Policy, or to make an access, correction, or deletion request, contact our Privacy Officer:
Email: support@musenz.com
Subject line: include "Privacy Request" or "Privacy Complaint" so we can route it correctly
Response time: within 20 working days as required by the Privacy Act 2020
If you are not satisfied with our response to a privacy complaint, you have the right to escalate to the Office of the Privacy Commissioner:
privacy.org.nz · 0800 803 909