At Napveil, accessible via www.napveil.com, we respect customer privacy and are committed to managing personal data in accordance with applicable data protection legislation, including the New Zealand Privacy Act 2020 and the General Data Protection Regulation (GDPR) applicable within the European Union and European Economic Area.
- Data Controller Information
The entity responsible for the collection, handling, and processing of your personal data (the Data Controller) is:SLEEP MODE NEW ZEALAND LIMITED
Company Registration Number: 6127696 / 9429043367733
Registered Office Address: 21 Puriri Street, Mount Maunganui, Tauranga 3116New Zealand
Contact Email: mask@napveil.com
Telephone: +64 225940052
- Information We Collect
We collect personal information necessary to execute commerce transactions, manage customer requests, and manage operational functionality. This information includes:
Identity & Contact Details: Full name, shipping address, billing address, email address, and contact telephone number.
Transaction Details: Information related to items ordered, order history, and customer communication records.
Technical Information: IP address, browser type, device information, standard log data, and navigation cookies collected during website access.
- Purpose & Legal Basis for Processing
We process personal data based on the following legal grounds:
Contract Performance: To process, fulfill, and deliver orders, and provide related customer support.
Legal Obligation: To comply with accounting, taxation, anti-fraud, and corporate record-keeping requirements under applicable laws.
Legitimate Interests: To maintain website operational functionality, enhance customer experience, and assist with fraud prevention.
- Payment Processing
Financial transactions conducted on www.napveil.com are processed through Stripe, our external payment processing service provider.
When you complete a purchase, your payment details (such as credit card numbers and account verification data) are provided directly to Stripe. SLEEP MODE NEW ZEALAND LIMITED does not process or retain full sensitive payment card credentials on its servers. The processing of payment data by Stripe is subject to Stripe’s own Privacy Policy and operational terms.
- Third-Party Data Sharing & International Transfers
To fulfill orders, we share necessary data with trusted operational partners, including courier services, hosting infrastructure providers, and payment processors (such as Stripe).
Because SLEEP MODE NEW ZEALAND LIMITED is located in New Zealand and serves customers residing in Europe, your personal information is transferred internationally to New Zealand and potentially other jurisdictions where service infrastructure is hosted. Transfers of European personal data to New Zealand rely on standard legal frameworks, including the adequacy decisions recognized by the European Commission regarding New Zealand’s privacy protection framework.
- Data Retention Policy
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as mandated by governing legal and regulatory standards:
Transaction & Accounting Records: Retained for 7 years following the completion of a transaction, in compliance with New Zealand tax law and European statutory accounting requirements.
General Customer Enquiries: Retained for up to 2 years after resolution of the enquiry to maintain consistent customer support history.
Technical Logs & Cookies: Retained in accordance with standard cookie expiration periods, generally not exceeding 13 months.
Upon expiration of the required retention period, personal data is either securely deleted or rendered permanently anonymous.
- Your Rights Under Privacy Legislation
Depending on your country of residence (including European Economic Area residents and New Zealand residents), you hold the following rights regarding your personal information:
Right of Access: Request a copy of the personal information held about you.
Right to Rectification: Request correction of inaccurate or incomplete personal records.
Right to Erasure: Request deletion of personal data when processing is no longer required, subject to mandatory legal retention duties.
Right to Restrict Processing: Request restrictions on specific processing activities.
Right to Data Portability: Request transfer of personal data to another party in a standard format.
Right to Object: Object to processing based on legitimate interests.
To exercise any of these rights, please submit your request to mask@napveil.com.
- Contact & Complaints
For questions, requests, or concerns regarding this Privacy Policy or your data, please contact:
Data Protection Enquiries: mask@napveil.com
Mailing Address: SLEEP MODE NEW ZEALAND LIMITED, 21 Puriri Street, Mount Maunganui, Tauranga 3116, New Zealand
If you are a resident of Europe and believe your data rights have been infringed, you also have the right to lodge a complaint with your local Data Protection Authority (DPA).