Privacy policy
About This Policy This Privacy Policy explains how Zappy (operated by Zappy Limited, Level 37, 10 Commerce Street, Auckland 1010, New Zealand) collects, uses, stores, and shares personal information. It applies to all users of our platform, website, and services, including business owners, their staff, and the end-customers whose shipping information is processed through our system. Zappy is bound by the New Zealand Privacy Act 2020 and its Information Privacy Principles (IPPs), including the requirements introduced by the Privacy Amendment Act 2025. If you have any questions about this policy, please contact us at customerservice@shipzappy.com or 0800 729 767.
1. What Information We Collect We collect personal information in two ways: Directly from you: When you register for a Zappy account, we collect your name, business name, email address, phone number, billing address, and payment details. Indirectly through your integrations: When you connect Zappy to an ecommerce platform such as Shopify, WooCommerce, or TradeMe, we access order and fulfilment data from your store. This includes the personal information of your customers: their name, delivery address, email address, phone number, and product details necessary to create a shipping booking. We also collect technical information automatically when you use our website and platform, including IP address, browser type, referring pages, and date/time stamps. We use log files, web beacons, and tracking pixels to collect this information (see Section 6).
2. Notification to End-Customers (IPP 3A) When your customers place an order through your store and their personal information is transmitted to Zappy to fulfil a shipment, that information is collected indirectly from your store rather than directly from your customer. In accordance with Information Privacy Principle 3A of the Privacy Act 2020 (in force 1 May 2026), we require that merchants using Zappy inform their customers, at or before the point of order, that: Their name, delivery address, email address, and phone number will be shared with Zappy Limited (Level 37, 10 Commerce Street, Auckland 1010) for the purpose of booking and completing courier delivery. Zappy will pass this information to the relevant courier provider (such as NZ Post, CourierPost, PostHaste, Castle Parcels, NOW Couriers, Aramex, or FedEx/TNT) to fulfil the shipment. Customers may contact Zappy at customerservice@shipzappy.com to request access to, correction of, or deletion of their personal information held by Zappy. We recommend merchants include this disclosure in their checkout process, terms and conditions, and privacy policy. Zappy provides template disclosure language to merchants on request.
3. How We Use Your Information We use the personal information we collect to: Create and manage your Zappy account Process shipping bookings and fulfilment on your behalf Transmit necessary delivery information to courier providers Generate shipping labels, booking confirmations, and tracking updates Communicate with you about your account, service updates, and support queries Send marketing communications where you have consented (you may opt out at any time) Improve and develop our platform Comply with our legal obligations
4. Sharing Your Information We share personal information only as necessary to deliver our services: Courier providers: We share shipment recipient details (name, address, phone, email) with the courier selected for each booking. Current courier partners include NZ Post, CourierPost, PostHaste, Castle Parcels, NOW Couriers, Pace Couriers, Aramex, FedEx/TNT, SF Express, and international freight carriers. Email and communications platforms: We use third-party platforms such as Mailchimp (United States) to send transactional and marketing emails. These services are bound by their own privacy policies and applicable data protection standards. Analytics tools: We use website analytics tools that may process IP addresses and browsing behaviour for the purpose of improving our service. Legal requirements: We may disclose information if required by law, in response to a court order or official request, or to protect our legal rights. We do not sell or rent personal information to third parties.
5. Overseas Transfers Some of our service providers are based overseas, meaning your personal information may be transferred outside New Zealand. This includes services hosted in the United States (email platforms and analytics tools) and, where international shipments are booked, courier and logistics providers in the destination country. Zappy also has operational staff in Shanghai, China. Some data may be accessed by staff in that location for platform development and support purposes. In accordance with IPP 12 of the Privacy Act 2020, before transferring personal information overseas we take reasonable steps to ensure the recipient is subject to comparable privacy protections or is subject to binding obligations that provide comparable safeguards.
6. Tracking Technologies We use the following technologies on our website and platform: Log files: Records of server activity including IP address, browser type, pages visited, and timestamps, used for security, debugging, and service improvement. Web beacons and tracking pixels: Small electronic files embedded in pages and emails that record whether an email was opened, which pages were visited, and for how long. Used to measure the effectiveness of our communications and improve our service. We do not use tracking technologies for selling advertising or profiling individuals for third-party use. If you wish to opt out of tracking in emails, you can adjust your email client settings.
7. Data Retention We retain personal information for the following periods: Order and shipment data: Retained for 7 years from the date of shipment, in accordance with NZ tax and accounting legislation. Account data: Retained while your account is active. If you request account closure, your account data will be deleted within 30 days, subject to the retention requirement above. Marketing contact data: Retained until you unsubscribe or request removal. You may request deletion of your personal information at any time by contacting customerservice@shipzappy.com. We will action requests within 20 working days, subject to any legal obligations requiring us to retain certain information.
8. Your Rights Under the Privacy Act 2020, you have the right to: Request access to the personal information we hold about you Request correction of any personal information that is inaccurate or incomplete Request deletion of your personal information, subject to legal retention obligations Make a complaint to the Office of the Privacy Commissioner (privacy.org.nz) if you believe we have breached your privacy rights To exercise any of these rights, please contact us at customerservice@shipzappy.com. We will respond within 20 working days.
9. Data Breach Notification In the event of a privacy breach that is likely to cause serious harm, Zappy will notify the Office of the Privacy Commissioner and affected individuals as soon as practicable, in accordance with the mandatory notification requirements of the Privacy Act 2020. Where a breach involves a merchant's customer data, we will also notify the relevant merchant.
10. Marketing Communications When you provide your email address or begin registration for our services, we may contact you to help complete your registration, provide service updates, and share relevant offers or credits. We comply with the Unsolicited Electronic Messages Act 2007 (NZ) and will not send commercial electronic messages without your consent. You may unsubscribe at any time by clicking the unsubscribe link in any email or by contacting us directly.
11. Changes to This Policy We may update this policy from time to time to reflect changes to our practices or legal requirements. We will post the updated policy on this page with a revised last updated date. Where changes are significant, we will notify registered users by email.
12. Contact Us Zappy Limited Level 37, 10 Commerce Street, Auckland CBD, Auckland 1010, New Zealand Email: customerservice@shipzappy.com Phone: 0800 729 767