AUTO CANDY PRIVACY POLICY

Last updated: 12 September 2026

​

Auto Candy Ltd, trading as Auto Candy (“Auto Candy”, “we”, “us” or “our”), is committed to protecting the privacy of our customers, website visitors and anyone who communicates with us.

This Privacy Policy explains how we collect, use, store, disclose and protect personal information when you visit our website, contact us, request a quote, send us photographs, book a service, use our services or otherwise interact with Auto Candy.

Auto Candy operates in Nelson, New Zealand, and handles personal information in accordance with the Privacy Act 2020 and the New Zealand Information Privacy Principles.

1. Personal information we may collect

We only collect personal information that is reasonably necessary for operating Auto Candy and providing our services.

Depending on how you interact with us, this may include your name, telephone number, email address, physical or delivery address, vehicle details, wheel details, photographs or videos you provide to us, registration number where visible or relevant, details of the services you require, quote and booking information, correspondence with us, invoice and transaction information, service history, warranty or repair information, reviews or feedback, and marketing preferences.

When you use our website, certain technical information may also be collected automatically, including your IP address, browser type, device type, pages viewed, approximate location derived from technical information, referring website, time spent on the website and interactions with website features.

We aim to collect only the information that is necessary for the purpose for which it is required, consistent with the data-minimisation requirements of the Privacy Act.

2. How we collect your information

We may collect personal information directly from you when you complete a website form, request a quote, use a Send Us a Photo feature, contact us by telephone, email or messaging service, communicate with us through social media, make a booking, visit our workshop, purchase a service, provide feedback or otherwise communicate with Auto Candy.

We may also receive information through service providers or online platforms that you use to communicate with us.

In limited circumstances we may obtain information from another person, a business referral, publicly available information or another legitimate source. Where the Privacy Act requires us to notify you about personal information obtained indirectly, we will take reasonable steps to do so. This reflects Information Privacy Principle 3A, which has applied in New Zealand since May 2026.

3. Why we collect and use your information

We may use personal information to respond to enquiries, assess wheel damage from photographs, prepare estimates and quotations, arrange bookings, provide wheel repair and refurbishment services, contact you regarding your vehicle or wheels, organise collection or delivery, process payments, issue invoices and receipts, manage warranties or follow-up work, maintain service records and provide customer support.

We may also use information to improve our website and services, understand how customers interact with Auto Candy, maintain website and business security, prevent fraud or misuse, comply with legal and accounting obligations, resolve disputes and communicate important information about your booking or service.

Where appropriate, and subject to your marketing preferences, we may contact you about Auto Candy services, promotions, new services or special offers.

Providing personal information is generally voluntary. However, if you do not provide information that we reasonably require, we may be unable to provide an accurate quote, contact you, make a booking, complete your requested service or provide certain website functionality.

4. Photographs and videos sent to Auto Candy

Auto Candy encourages customers to send photographs of their wheels so that we can assess damage and provide initial advice or pricing.

Photographs may contain personal information, including vehicle registration plates, surroundings or other identifying details. We may retain relevant images with your enquiry, quote or job record where reasonably necessary for assessment, quality assurance, repair documentation, warranty purposes or dispute resolution.

We may also take before, during and after photographs of wheels undergoing repair or refurbishment.

We will not intentionally publish photographs or videos that personally identify you for advertising, social media, portfolio or promotional purposes without your permission or another lawful basis for doing so.

Where practical, identifying information such as registration plates may be cropped, obscured or avoided when images are used publicly.

5. Marketing and customer communications

If you have asked to receive marketing communications from Auto Candy, or where we are otherwise permitted to contact you, we may send information about services, promotions, offers or business updates.

You can ask us to stop sending marketing communications at any time.

Service communications relating to an existing enquiry, quote, booking, repair, collection, delivery, payment or warranty are separate from promotional marketing and may still be sent where necessary to provide the service you requested.

6. Who we may share information with

We do not sell or rent customer personal information.

We may provide limited personal information to trusted third parties where reasonably necessary to operate our business or provide your requested service. These may include our website and hosting provider, IT providers, payment processors, accounting or bookkeeping providers, email or communication providers, freight or courier companies, tyre-related service providers, specialist contractors or repair providers, professional advisers and other suppliers involved in completing your job.

We may also disclose information where required or permitted by law, where necessary to protect the rights or safety of Auto Candy or another person, to investigate suspected fraud or unlawful activity, or in connection with a sale, restructuring or transfer of the business.

We will only disclose information for purposes that are consistent with the purpose for which it was collected, unless another disclosure is authorised or permitted by law.

7. Wix and website hosting

The Auto Candy website is built and hosted using the Wix.com platform.

Wix provides website hosting, data storage, website functionality, forms, analytics and other digital services. Information submitted through our website may therefore be stored or processed using Wix systems and infrastructure.

Wix advises website owners that information submitted through Wix websites may be stored through Wix data storage, databases and applications.

Other applications or services added to our Wix website may have their own privacy practices.

8. Overseas storage and processing

Some technology, hosting, communications, payment or software providers used by Auto Candy may store or process information outside New Zealand.

Where personal information is disclosed overseas and New Zealand's cross-border privacy requirements apply, we will take reasonable steps to ensure that appropriate safeguards are in place.

Information Privacy Principle 12 places specific requirements on disclosures of personal information to overseas recipients, while particular arrangements involving overseas providers acting purely as storage or processing agents may be treated differently under the Act.

9. Cookies and website analytics

Our website may use cookies and similar technologies.

Cookies are small files stored on your browser or device that can help websites operate correctly, remember preferences, improve security and provide information about how a website is being used.

Our website may use essential cookies required for the website to operate, functionality cookies, analytics cookies that help us understand website usage and, if enabled, marketing or advertising cookies.

Because our website operates through Wix, Wix may also place cookies that support website functionality, security and platform performance. Wix provides website owners with tools to display a cookie banner and allow visitors to manage non-essential cookies.

You can generally control or delete cookies through your browser settings. Disabling some cookies may affect the way parts of the Auto Candy website function.

Where we use non-essential analytics or advertising technologies, information about them may also be provided through the website's cookie settings or consent banner.

10. Analytics and advertising platforms

Auto Candy may use website analytics to understand matters such as website traffic, page views, popular services, visitor interactions and website performance.

If we introduce third-party advertising or analytics tools such as Google Analytics, Meta advertising technologies or similar services, those providers may use their own cookies or tracking technologies and may process information in accordance with their own privacy policies.

We will review the privacy settings of these services and, where appropriate, provide visitors with cookie or tracking choices.

11. Social media

Auto Candy may operate pages or accounts on third-party platforms such as Facebook, Instagram, TikTok or other social media services.

If you contact us through one of these platforms, the platform may separately collect and process your information under its own privacy terms.

Messages, photographs or information that you send directly to Auto Candy through social media may also be retained by us where reasonably necessary to respond to your enquiry or provide services.

12. Payment information

If you make a payment through a third-party payment platform or online payment provider, your payment details may be processed directly by that provider.

Auto Candy does not intentionally store complete credit or debit card details unless necessary and lawfully permitted to do so.

We may retain payment-related information such as transaction references, amounts paid, invoice information and payment status for business, accounting and legal purposes.

13. How we protect your personal information

We take reasonable precautions to protect the personal information we hold against loss, unauthorised access, misuse, alteration or disclosure.

Measures may include password-protected systems, restricted account access, secure cloud services, access controls, device security, secure payment providers and limiting access to personal information to people who reasonably require it.

The Privacy Act requires businesses holding personal information to use security safeguards that are reasonable in the circumstances.

No internet transmission or electronic storage system can be guaranteed to be completely secure, but we take reasonable steps appropriate to the information we hold and the nature of our business.

14. How long we keep information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected or where retention is required for legitimate business, accounting, warranty, dispute-resolution or legal purposes.

Different types of information may therefore be retained for different periods.

When information is no longer reasonably required, we may securely delete, destroy or anonymise it.

15. Accessing your personal information

You have the right under the Privacy Act 2020 to ask whether Auto Candy holds personal information about you and to request access to that information.

There are limited circumstances under the Privacy Act in which access may legally be refused.

To request access, contact us using the details at the end of this Privacy Policy. We may need to verify your identity before releasing personal information.

16. Correcting your personal information

You may ask Auto Candy to correct personal information that you believe is inaccurate, incomplete, out of date or misleading.

If we do not agree to make a requested correction, you may have the right to provide a statement of the correction you sought and request that it be attached to the relevant information.

These access and correction rights are provided under Information Privacy Principles 6 and 7.

17. Privacy breaches

If Auto Candy becomes aware of a privacy breach, we will assess the circumstances and take appropriate steps to contain and address it.

Where a privacy breach has caused, or is likely to cause, serious harm, the Privacy Act may require us to notify the New Zealand Privacy Commissioner and affected individuals.

The Privacy Commissioner recommends notification as soon as practicable and ideally within 72 hours once a business becomes aware of a potentially notifiable breach.

18. Children's privacy

Auto Candy's website and services are not specifically directed at children.

We do not intentionally seek to collect personal information from children where it is unnecessary for our services.

If we become aware that personal information relating to a child has been provided in circumstances where it should not have been collected, we will take appropriate steps to address the matter.

19. Links to other websites

Our website may contain links to third-party websites, social media platforms or services.

Auto Candy does not control the privacy practices of third-party websites. Visiting another website is subject to that organisation's own privacy terms and policies.

20. Complaints

If you have a concern about how Auto Candy has collected, used, stored or disclosed your personal information, please contact us first so that we can investigate and try to resolve the matter.

You also have the right to make a complaint to the Office of the Privacy Commissioner, New Zealand if you are not satisfied with our response.

21. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business, website, services, technology or legal requirements.

The most recent version will be published on the Auto Candy website with the date of the latest update.

22. Contact Auto Candy

For privacy questions, requests to access or correct personal information, complaints or requests concerning your information, contact:

Auto Candy Ltd
Trading as Auto Candy
Nelson, New Zealand
Phone: 027 772 3757
Email: info@autocandy.co.nz