Privacy and Security Policy

Last updated: 13 July 2026

Pumps Online Limited ("Pumps Online", "we", "us") respects your privacy. This policy explains what personal information we collect, how we use it, and who we share it with. We comply with the New Zealand Privacy Act 2020.

What we collect and why

To process your order we need your:

  • Name
  • Email address
  • Phone number
  • Delivery address
  • Billing address

We use this information to process and fulfil your order, notify you of your order status, arrange delivery, and provide customer support. If you create an account, you can view your order status by logging in.

We never sell, rent or trade your personal information, and we do not send marketing emails unless you have signed up to receive them.

Who we share information with

We use a small number of trusted service providers to run our store. They only receive the information they need to do their job, and only for that purpose:

  • Shopify — our website and checkout run on Shopify, so your order and account details are stored securely on Shopify's platform.
  • Payment providers — Shopify Payments, PayPal and Afterpay process online payments (see Security below). Phone and in-store EFTPOS payments are processed through Windcave.
  • Couriers and freight companies — we pass your name, delivery address and contact details to our delivery partners (via our shipping system) so your order can reach you.
  • Wholesale suppliers and fulfilment partners (direct dispatch) — some orders are dispatched directly to you by our wholesale suppliers or fulfilment partners rather than from our own stores. In those cases we give them your name, delivery address and contact details solely for delivering your order. Our suppliers don't sell to the public and aren't permitted to use your details for anything else.
  • Seal Subscriptions — if you set up a repeat-delivery subscription, this service manages your subscription schedule and holds your name, contact and address details for it (encrypted). It never sees your full card number — at most the last four digits, expiry and card type (see Security below).
  • Accounting software — order and invoice details flow to our accounting system for record-keeping and GST purposes.
  • Google — we use standard analytics tools to understand how our website is used, and Google displays our customer review ratings. Analytics data is about website usage, not your identity.

Some of these providers store information on secure servers overseas (for example in the United States, Australia or Canada).

Apart from these service providers, we do not disclose your information to anyone unless required by law.

Cookies and advertising

Like most online stores, our website uses cookies and similar technologies (including the Google tag and the Meta pixel) for three things:

  • Making the site work — essential cookies for your cart, checkout and login.
  • Understanding how the site is used — analytics that tell us which pages are visited and how customers find us, so we can improve the store.
  • Measuring and showing our ads — we advertise on Google and on Meta platforms (Facebook and Instagram). Advertising cookies and pixels record things like the pages and products you viewed on our site and whether a purchase was completed. Google and Meta use this to measure whether our ads work and to show our ads to people likely to be interested — including showing you our products again after you've visited (often called remarketing). We also share our product catalogue with Google and Meta so our products can appear in Shopping results and social ads.

This advertising data is collected by cookie or device identifiers, not by name, and it never includes your payment details. Google and Meta handle it under their own privacy policies.

Your choices: you can block or delete cookies in your browser settings at any time (the site will still work — you may just see less relevant ads). You can also control ad personalisation directly at Google's My Ad Center and Meta's ad preferences in your Facebook/Instagram settings.

How are my credit card details kept secure?

Pumps Online uses Shopify Payments for online card transactions. Shopify Payments processes payments securely for millions of merchants worldwide and is certified Level 1 PCI DSS compliant — the highest standard of card data security.

  • Payments are processed in real time.
  • Pumps Online never sees or stores your full card number.
  • For one-off purchases, your card details are not retained after the transaction.
  • For subscriptions (repeat deliveries), your card is stored as a secure encrypted token in Shopify's PCI-compliant payment vault — not by us, and not by the subscription app. You can cancel a subscription at any time using the link in your subscription emails.

We also accept PayPal and Afterpay, which process your payment on their own secure platforms under their own privacy policies.

Phone and in-store payments (Windcave). If you pay by card over the phone or on an EFTPOS terminal in store, your payment is processed through Windcave's PCI DSS-certified payment system.

Your rights

Under the Privacy Act 2020 you may ask us at any time to:

  • show you the personal information we hold about you;
  • correct it; or
  • delete it (where we're not legally required to keep it — e.g. tax records).

To do any of these, or if you have any privacy question, contact us at sales@pumpsonline.co.nz or 0800 473 414.