Privacy Policy

DND Den is an online store operated from New Zealand. This notice explains how we handle information for the store at dndden.com. For privacy questions, access or correction requests, contact the store owner at denmaster@dndden.com.

Information we collect and why

Orders: the items ordered, prices, order and payment references, payment status, name, email, delivery address and phone number. We use these details to process purchases, arrange delivery, send order updates and handle returns or disputes. Stripe collects checkout details and provides the information needed to manage your order.
Enquiries: your name, email and the information you send us, so we can respond to your question or discuss a custom requirement.
Newsletter: your email and a record of your choice to subscribe, so we can send the updates you requested. An order or enquiry does not automatically subscribe you.
Site operation: technical information such as IP address, request time and browser details may be processed by our hosting and security provider. The store also uses a protected identifier derived from an IP address to limit abusive requests.

You can browse without creating an account. Providing order and contact details is voluntary, but we cannot process or deliver an order, or answer an enquiry, without the details needed for that purpose. Newsletter sign-up is optional.

Overseas processing

Our service providers and suppliers may process information outside New Zealand. The location depends on the service and the supplier fulfilling your order. Contact us if you need more information about the recipients involved in your order. We must meet the applicable New Zealand Privacy Act requirements when sending information overseas.

Browser storage and external content

Your bag and any discount code you choose to save are stored in your browser’s local storage. Clearing site data removes these saved choices. An essential session cookie is used for store administration. Cloudflare and Stripe may use their own security or payment-related technologies. Some product images are loaded from supplier image services, which receive the technical information necessary to deliver the image. Google Analytics measures page visits and shopping actions using cookies and technical information such as your browser and device. We do not include your name, email, delivery address, payment details or checkout reference in our analytics events. Analytics starts automatically except for visitors identified as being in the EEA, UK or Switzerland, or where we cannot determine the region; in those cases it stays off unless you turn it on. We respect saved opt-outs and browser Global Privacy Control or Do Not Track signals. You can turn analytics off or on using “Analytics preferences” in the footer; turning it off does not affect shopping.

Our Google Analytics property is linked to Google Ads to measure campaign performance and purchases. When analytics is on, we include limited campaign information from landing-page URLs, such as the campaign source and aggregate campaign identifiers. We keep personalised advertising, remarketing, audience export, Google Signals and enhanced conversions off. Our website does not grant advertising storage or advertising user-data consent when you turn analytics on, so advertising attribution may be limited.

When analytics is on, completed-purchase measurements include the purchased products, quantities, amounts and an opaque purchase identifier that helps prevent duplicate counting. They do not include your personalisation text, artwork, contact details or payment-session reference. Recent purchase identifiers are kept in your browser for up to 180 days to prevent repeat measurements when you reload an order confirmation.

Newsletters and your choices

You can withdraw newsletter consent at any time by emailing denmaster@dndden.com with “unsubscribe”, or using the method included in a marketing email. We will action an unsubscribe request within five working days. Necessary order messages are separate from marketing.

Retention and security

We keep information for the purposes described here, including order support, accounting and legal obligations, and do not keep it longer than needed for a lawful purpose. Access is limited to people and services that need it for those purposes. You can ask us about retention or request deletion; some records may need to be kept for legal or accounting reasons.

Access, corrections and concerns

You can ask what personal information we hold about you and request access or correction. We may need to verify your identity. We will respond within the time required by applicable law, normally 20 working days for a New Zealand Privacy Act request, and explain any permitted extension. If we decline a correction, you can ask for a statement of the correction you requested to be attached to the record.