PRIVACYPOLICY

KrispyGauge is operated by Krispy Workshop, Titirangi, Auckland, New Zealand.

For any question about your personal information, or to request a copy of what we hold, email [email protected]. We will respond within 20 working days.

When you place an order we collect your name, email address, phone number if you give one, and the delivery address you enter at checkout.

When you register a device on the firmware portal we collect its serial number and your email address.

Our web server keeps standard request logs, which include IP addresses, for security and troubleshooting.

We do not collect or store your card details at any point. Card payments are handled entirely by Stripe, and we only ever see the last four digits and the payment status.

We use your information to process and deliver your order, to send order confirmations and delivery updates, to provide warranty and technical support, to supply firmware updates for devices you own, and to meet our record-keeping obligations under New Zealand tax law.

We do not send marketing email unless you have asked us to, and we never sell or rent your information to anyone.

We share information only with the services needed to run the store:

Stripe processes payments and receives your name, email and billing details.
Amazon Web Services (SES) delivers our transactional email.
Our courier receives the name, address and phone number needed to deliver your parcel.
Cloudflare sits in front of the site and processes requests, including IP addresses.

Some of these providers store data outside New Zealand. We only use providers that offer comparable privacy safeguards, as required by the Privacy Act 2020.

Order records are kept for seven years, which is the retention period required for New Zealand tax records.

Device registrations are kept for as long as you own the device, so warranty and firmware access keep working.

Server logs are kept for a short period and then discarded.

You have the right to ask what personal information we hold about you, and to ask us to correct it if it is wrong. Email [email protected] and we will confirm your identity before releasing anything.

You can ask us to delete information we no longer need, though we cannot delete order records we are legally required to keep.

If you are not satisfied with how we have handled your information, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.

We use a small number of cookies that are necessary for the site to work: one to remember what is in your cart, one to keep you signed in to the firmware portal, and one for the admin login.

We use Google Analytics to count visits and see which pages are read. It sets cookies that measure whether you are a returning visitor and how you found us. We use it to understand the site, not to identify you, and we do not use advertising or cross-site tracking cookies.

Cloudflare may set a cookie to identify malicious traffic, and reCAPTCHA is used on our feature request form to prevent spam.

The site is served over HTTPS. Payment details never touch our servers. Stored secrets are encrypted, admin access requires two-factor authentication, and access to order data is limited to the store operator.