Last updated: 26 May 2026
This Privacy Policy explains how The Shine Collective Ltd (“we”, “us”, “our”) collects, uses, stores and discloses personal information when you visit or make a purchase from firstresponsecyber.co.nz (the “Site”). We are committed to protecting your privacy and complying with the Privacy Act 2020 and the 13 Information Privacy Principles (IPPs).
By using the Site or purchasing our products, you agree to the collection and use of your information in accordance with this policy.
The Shine Collective Ltd is a New Zealand based business operating firstresponsecyber.co.nz. If you have any questions about this Privacy Policy or how we handle your personal information, you can contact us at jacky@firstresponsecyber.co.nz and info@firstresponsecyber.co.nz.
We only collect personal information that is necessary for us to provide our products and services to you. The information we collect falls into the following categories:
Order information: your billing name, email address, billing address, and details of the digital products you purchase. Contact form submissions: your name, email address, phone number (if provided), and any message you send to us via our contact form. Communications: any correspondence you have with us by email or through the Site.
Technical information: IP address, browser type and version, device type, operating system, time zone, and referring URLs. Usage information: pages visited, time spent on pages, links clicked, and other interactions with the Site. Cookies and similar technologies: see Section 6 below for details on how we use cookies.
All payments are processed by Stripe. When you make a purchase, your payment card details are entered directly into Stripe’s secure payment form and are not stored on our servers. We receive limited information from Stripe such as the last four digits of your card, the card brand, the expiry date, and confirmation that your payment was successful. Stripe’s privacy practices are governed by their own privacy policy, which you can review here: https://stripe.com/nz/privacy.
We use the personal information we collect for the following purposes:
We will only use your personal information for the purposes for which it was collected, unless we reasonably consider that we need to use it for another related reason that is compatible with the original purpose, or where required or permitted by law.
We do not sell your personal information. We share your personal information only with the following third parties, and only as needed to provide our services to you:
Stripe — processes payments on our behalf. Stripe is based in the United States. More information: https://stripe.com/nz/privacy. Google Analytics — provides website analytics. Google may process this information in the United States or other countries. More information: https://policies.google.com/privacy. Email and communication providers — we use email service providers to send transactional emails (such as order confirmations).
If we are involved in a merger, acquisition, or sale of all or a portion of our assets, your personal information may be transferred as part of that transaction. We will notify you before your personal information is transferred and becomes subject to a different privacy policy.
Our Site uses cookies and similar tracking technologies to function properly and to help us understand how visitors use the Site. Cookies are small text files placed on your device when you visit a website.
We use the following categories of cookies:
You can control or delete cookies through your browser settings. Disabling cookies may affect your ability to use some parts of the Site.
We take reasonable steps to protect your personal information from loss, misuse, unauthorised access, disclosure, alteration or destruction. These include:
No method of transmission over the internet or electronic storage is 100% secure, so while we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.
If we become aware of a privacy breach that is likely to cause serious harm, we will notify the affected individuals and the Office of the Privacy Commissioner as required by the Privacy Act 2020.
We retain your personal information for as long as is necessary to fulfil the purposes outlined in this Privacy Policy, including for the purposes of satisfying any legal, accounting or reporting requirements. For example:
Under the Privacy Act 2020 you have the right to:
To exercise any of these rights, please contact us at jacky@firstresponsecyber.co.nz and info@firstresponsecyber.co.nz.
We will respond to your request within 20 working days as required by the Privacy Act.
Our Site and products are not directed at children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.
Our Site may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policy of any third-party site you visit.
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. If we make material changes, we will provide additional notice (for example, by email or a notice on the Site). We encourage you to review this policy periodically.
If you have any questions, concerns, or requests about this Privacy Policy or our handling of your personal information, please contact us:
Business name: The Shine Collective Ltd
Email: jacky@firstresponsecyber.co.nz and info@firstresponsecyber.co.nz.
Postal address: PO Box 873, ROTORUA 3010
Website: http://firstresponsecyber.co.nz/
If you are not satisfied with our response, you have the right to make a complaint to the Office of the Privacy Commissioner:
https://www.privacy.org.nz
Phone: 0800 803 909
Email: enquiries@privacy.org.nz
Home Page