Privacy Policy

1. Information We Collect

At Mango Zealand, we collect minimal information necessary to provide our hardware wallet products and support services. We adhere to data minimization principles, collecting only what is essential for our business operations.

1.1 Information You Provide

• Contact information when you inquire about our products (name, email, phone number)
• Shipping and billing information for product orders
• Communication preferences and support inquiries
• Feedback and testimonials (with your explicit consent)

1.2 Information Automatically Collected

• Website usage data through analytics (anonymized)
• Device and browser information for technical support
• IP addresses for security and fraud prevention
• Cookies and similar technologies (see our Cookie Policy)

2. How We Use Your Information

We use your information solely for legitimate business purposes related to providing secure hardware wallet solutions:

• Processing and fulfilling product orders
• Providing customer support and technical assistance
• Communicating about product updates and security advisories
• Improving our products and services
• Complying with legal and regulatory requirements
• Protecting against fraud and security threats

We never:

• Sell your personal information to third parties
• Use your data for advertising or marketing by third parties
• Share your information with cryptocurrency exchanges or trading platforms
• Track your cryptocurrency transactions or wallet activities

3. Information Sharing and Disclosure

We maintain strict controls over information sharing, consistent with our security-first approach:

3.1 Service Providers

We may share information with trusted service providers who assist in our operations, including:

• Shipping and logistics partners (for product delivery)
• Payment processors (for secure transaction processing)
• Cloud infrastructure providers (with encryption and security controls)
• Security audit firms (for compliance and verification)

3.2 Legal Requirements

We may disclose information when required by law or to:

• Comply with legal processes and regulatory requirements
• Protect our rights, property, or safety
• Investigate potential fraud or security incidents
• Enforce our terms of service

4. Data Security

We implement institutional-grade security measures to protect your personal information:

• End-to-end encryption for data transmission and storage
• Multi-factor authentication for system access
• Regular security audits and penetration testing
• Employee security training and background checks
• Secure data centers with physical access controls
• Incident response procedures for security events

5. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal requirements)
• Portability: Request transfer of your information to another service provider
• Objection: Object to certain processing of your information
• Restriction: Request restriction of processing in certain circumstances

To exercise these rights, contact us at privacy@mangozealand.com or call +64 24 683 5702.

6. International Transfers

As a New Zealand-based company, we primarily process data within New Zealand. When international transfers are necessary, we ensure appropriate safeguards are in place:

• Adequacy decisions by relevant data protection authorities
• Standard contractual clauses for data protection
• Certification schemes and codes of conduct
• Additional security measures for sensitive data

7. Data Retention

We retain personal information only as long as necessary for the purposes outlined in this policy:

• Customer information: Retained for the duration of our business relationship plus 7 years for legal compliance
• Support communications: Retained for 3 years for quality assurance
• Website analytics: Anonymized data retained for 2 years
• Security logs: Retained for 1 year for incident investigation

8. Third-Party Services

Our website may contain links to third-party services or integrate with external platforms for specific functions:

• Payment processing services with their own privacy policies
• Shipping and logistics providers for order fulfillment
• Security services for fraud prevention and protection
• Analytics services for website performance monitoring (anonymized data only)

We carefully vet all third-party services to ensure they meet our security and privacy standards. However, we are not responsible for the privacy practices of these external services.

9. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information promptly.

Parents or guardians who believe their child has provided personal information to us should contact us immediately at privacy@mangozealand.com.

10. Changes to This Policy

We may update this privacy policy to reflect changes in our practices or legal requirements. We will:

• Notify you of material changes via email or website notice
• Provide at least 30 days' notice before changes take effect
• Maintain previous versions for your reference
• Seek additional consent for significant changes to data processing

11. Regulatory Compliance

We comply with applicable data protection laws and regulations, including:

• New Zealand Privacy Act 2020
• General Data Protection Regulation (GDPR) for EU residents
• California Consumer Privacy Act (CCPA) for California residents
• Other applicable regional privacy laws

Our compliance program includes regular audits, staff training, and continuous monitoring of regulatory changes to ensure ongoing compliance.

12. Contact Information

For questions about this privacy policy or our data practices, contact us: