מדיניות פרטיות
Privacy Policy - New Zealand
Last updated 3 October 2026.
1. Who we are
The agency responsible for your personal information is TigerBestBrands LLC (a Wyoming limited liability company), 30 N Gould St, Ste R, Sheridan, WY 82801, United States, trading through the website tigerbrandsglobal.com ("we", "us", "our"). Contact: Email: support@tigerbrandsglobal.com. Phone: +1 307-500-7673. WhatsApp: +1 307-291-7842. Postal address: as above. We reply to emails as soon as we can. Privacy contact: our privacy contact (support@tigerbrandsglobal.com).
2. What we collect
- Order and account data: name, email, phone, delivery and billing address, items ordered, order history.
- Payment data: handled by Shopify Payments and the payment method you choose; we receive confirmation and the last digits, not the full card number.
- Support data: messages you send us by email, on-site chat, Messenger, Instagram or WhatsApp, and our replies.
- Technical data: IP address, device and browser data, pages viewed, cart and checkout activity, cookies (see the Cookie Policy).
- Reviews and testimonials: what you write and any photo or video you choose to upload.
3. Why we use it
To take and deliver your order and handle returns; to prevent fraud; to give support; to send order and shipping updates; to send marketing where you agreed or the law allows; to measure and improve our website and advertising; to publish reviews you submit; to comply with tax, accounting and consumer laws.
4. Who receives it (our service providers)
| Who | What they do for us | Data they handle | Where |
|---|---|---|---|
| Shopify (and Shopify Payments / its payment processor) | Runs our online store, checkout, payments, fraud checks, customer account | Name, email, phone, delivery and billing address, order details, payment data (card details go to the payment processor, not to us), device and browser data | |
| Cloudflare | Hosts the Worker application that runs our store tools, support desk, order and email systems, and the database and file storage behind them | Order, customer, support-message and (where used) verification-upload data, stored on our behalf | Global network; |
| CJ Dropshipping (our fulfilment partner) and the carriers it uses | Picks, packs and ships your order from our supplier's warehouse in China, provides tracking | Name, delivery address, phone number, email (if the carrier requires it), items ordered | China. Orders ship from our supplier's warehouse in China, so our fulfilment partner and its carriers receive your name, delivery address and phone number to deliver your order. |
| Resend | Sends our order, shipping and (where you agreed) marketing emails | Email address, name, email content, delivery and open/click events | USA |
| Meta Platforms (Facebook, Instagram, Messenger, WhatsApp) | Advertising measurement (Meta Pixel / Conversions API) and the messaging channels you may use to contact us | Browsing and purchase events, hashed contact identifiers, messages you send us | USA and other countries |
| Google and Microsoft (analytics tools) | Website analytics and session-quality tools | Pseudonymous browsing data, device data | USA and other countries |
| AI model providers (accessed through OpenRouter) | Help draft support replies and power the on-site assistant (see "AI-assisted support") | The text of your question and the order facts needed to answer it | USA and other countries |
We do not sell your personal information for money. Advertising and analytics providers in the table receive browsing and purchase events and hashed identifiers so they can measure advertising; you can limit this through the cookie settings (see the Cookie Policy).
5. How long we keep it
| Data | How long we keep it |
|---|---|
| Order, invoice and tax records | 7 years |
| Customer account and support conversations | No longer than needed to help you and meet legal duties |
| Marketing email data | Until you unsubscribe, then only a suppression record so we do not email you again |
| Verification photo (if used) | Deleted within 30 days at the latest |
| Website analytics and cookie data | See the cookie policy; up to 13 months |
| Messages on Messenger, Instagram, WhatsApp | No longer than needed to help you |
7. AI-assisted support
AI-assisted support. We use artificial-intelligence tools to help read and draft replies to your messages (email, on-site chat, Messenger, Instagram and WhatsApp). The tool sees your message and the order facts needed to answer (for example tracking status). Replies that involve refunds, health or safety questions, complaints or unusual requests are handled by a person. You can ask for a human at any time by writing "human" or "talk to a person" to support@tigerbrandsglobal.com. We do not use your messages to train our own models. We do not make decisions with legal or similarly significant effect about you solely by automated means.
8. Messaging apps
If you message us on WhatsApp, Messenger or Instagram, Meta processes the messages under its own terms and we use them to answer you. A message from you is not consent to marketing. We send marketing on WhatsApp only after a separate opt-in.
9. Reviews and testimonials
Reviews and testimonials. We may invite customers to review a product by email after delivery. We publish the genuine reviews we receive, positive and negative, removing only unlawful, abusive or off-topic content, and we do not edit what a review says. Every reviewer is offered a free item for a video review about their experience, whatever star rating they give and whatever they say; the offer is not conditional on positive content and we do not require before-and-after results videos. Reviews and videos from reviewers who received the free item are marked "Received a free product for this review".
New Zealand privacy law
We handle personal information in line with the Privacy Act 2020 and its 13 information privacy principles (IPPs). Our privacy officer is our privacy contact (support@tigerbrandsglobal.com) (every agency must have one).
Collection. We collect only what we need for the purposes above, directly from you or from your device, and explain it here. Since 1 May 2026 IPP 3A also requires us to tell you when we receive information about you from someone else (for example advertising platforms or fraud-check providers), unless you already know. Where that happens we tell you what we received, why, who it goes to and your rights of access and correction.
Disclosure outside New Zealand (IPP 12). We disclose personal information to overseas service providers (table above: mainly the USA, plus our fulfilment partner in China). Under IPP 12 we may do this only if the recipient is subject to comparable safeguards (for example a binding contract or a country or scheme the NZ Government recognises), or if you authorise it after we tell you it may not be required to protect your information as the NZ Privacy Act does. Providers that only handle information for us under our instructions are our agents, and sending them information is not a disclosure under the Act.
Access and correction (IPP 6-7). Ask at our privacy contact (support@tigerbrandsglobal.com); we respond within 20 working days. Complaints: contact us first, then the Office of the Privacy Commissioner (privacy.org.nz).
Breaches. If a privacy breach causes, or is likely to cause, serious harm to you we will notify the Privacy Commissioner and affected people as soon as practicable after we become aware of it (Privacy Act 2020, Part 6).
Marketing (Unsolicited Electronic Messages Act 2007). Outside Israel our practice is opt-in only: we send marketing email, text and WhatsApp messages only if you have chosen to receive them (for example by ticking an unticked box at checkout or on a sign-up form). Every marketing email includes an unsubscribe link and our postal address (30 N Gould St, Ste R, Sheridan, WY 82801, United States), clearly identifies us, and we act on an unsubscribe within 5 working days. Consent is not a condition of purchase. Order and delivery messages are not marketing.
AI. AI tools help us draft support replies (above). Tell us if you want a person to handle your request.
10. Security
We use access controls, encrypted connections and private storage. No system is perfectly secure; we will notify you of breaches as the law requires (IPP 5 requires reasonable safeguards).
11. Changes
We will post changes here and, if significant, tell you by email. Last updated: 3 October 2026.