Privacy Policy

1. Who we are (data controller)

S&Y SAINI LIMITED (“Saini Living”), NZBN 9429048499491, 2 Faber Place, Rototuna North, Hamilton, 3210, New Zealand, is the controller of your personal information. Contact us at support@sysaini.com.

2. Information we collect

• Identity & contact details: name, email, phone, shipping and billing address.
• Order information: items purchased, amounts, order history.
• Payment information: processed by Stripe — we receive confirmation and limited details, never your full card number.
• Technical & usage data: device, browser, IP, pages viewed, set via cookies (see our Cookie Policy).
• Communications: messages you send us via the contact form or email.

3. How we use your information

• To process and deliver your orders and provide customer support.
• To prevent fraud and keep the site secure.
• To send service messages about your order.
• With your consent, to send occasional marketing you can opt out of at any time.
• To comply with our legal obligations.

4. Legal bases (GDPR)

We process personal data to perform our contract with you (orders), on the basis of our legitimate interests (fraud prevention, improving the shop), with your consent (marketing, non-essential cookies), and to comply with legal obligations.

5. Sharing & third parties

We share data only as needed with: Stripe (payments), our hosting and database providers, shipping carriers, and analytics providers (with consent). We require these processors to protect your data. We may disclose data where required by law.

6. International data transfers

As a New Zealand business serving customers worldwide, your data may be processed outside your country. Where required, we use appropriate safeguards for such transfers.

7. Data retention

We keep order records as long as needed for the transaction, support, and legal/tax obligations, then delete or anonymise them. Marketing data is kept until you unsubscribe.

8. Your rights (EU/UK — GDPR)

• Access, correct, delete, or restrict processing of your data.
• Data portability and the right to object to certain processing.
• Withdraw consent at any time, and complain to your local data-protection authority.

9. Your rights (California — CCPA/CPRA)

• Know what personal information we collect and how it is used and shared.
• Request deletion or correction of your information.
• Opt out of any “sale” or “sharing” — we do not sell your personal information.
• We honour Global Privacy Control (GPC) signals and will not discriminate against you for exercising your rights.

10. Your rights (New Zealand Privacy Act 2020)

You may ask to access and correct the personal information we hold about you.

11. Cookies

We use cookies as described in our Cookie Policy. Non-essential cookies load only with your consent.

12. Security

We use HTTPS across the site and rely on Stripe's PCI-compliant infrastructure for card data. No method is perfectly secure, but we take reasonable steps to protect your information.

13. Children

This website is not directed at children, and we do not knowingly collect data from them.

14. Changes

We may update this policy; the “last updated” date above shows the current version.

15. Contact & privacy requests

To exercise any right, email support@sysaini.com or call +64 1775096767.