Privacy Policy | Assembly Label NZ – Assembly Label

Assembly Label Privacy Policy - New Zealand

This Policy was last updated in May 2026.

1. Overview

1.1 Application

This Privacy Policy explains how Modern Standard Pty Ltd (ACN 605 705 520) ATF the Modern Standard Trust trading as Assembly Label and/or Modern Standard NZ Limited (NZBN: 9429047586123) (“Assembly Label”, “we”, “us”, “our”) collects, uses, discloses and stores personal information.

This policy (“Policy”) applies to individuals in Australia and New Zealand who interact with us, including in-store, online at our websites, through our social media pages, by email/SMS, and at events (together, our “Sites” and services).

Your privacy is very important to us. Please read this Policy carefully and contact us using the details below if you have questions.

1.2 Privacy laws we comply with (and how this Policy works across both countries)

We aim to comply with privacy laws that apply to us, including:

Australia: the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
New Zealand: the Privacy Act 2020 (NZ) and the Information Privacy Principles (IPPs).

1.3 What is personal information?

“Personal information” means information or an opinion about an identified individual, or an individual who is reasonably identifiable - whether the information or opinion is true or not, and whether recorded in a material form or not. Examples include your name, contact details, order details, online identifiers and account information.

2. Consent

By providing personal information, you consent to us collecting, using, storing and disclosing your personal information in accordance with this Policy or as required or permitted by law. If you continue using our services, then we will treat your use as your consent to us handling your personal information in accordance with this Policy.

Unless we collect personal information from third parties, we will generally obtain consent from the owner of personal information to collect their personal information.

Consent will usually be provided in writing; however, sometimes it may be provided orally or may be implied through a person’s conduct. We endeavour to only ask for your personal information if it is reasonably necessary for the activities that you are seeking to be involved in.

3. What personal information do we collect, why do we collect it and how do we collect it?

The table below outlines what personal information we collect, why we collect it and how we collect it.

Information Collected	Why we collect it	How we collect it
Name, date of birth, gender, contact details (email, phone, residential address)	To process and fulfil orders; manage your account; provide customer support; administer competitions, events and promotions; conduct direct marketing (where permitted); comply with legal obligations	Directly from you when you make a purchase in store or online, sign up for marketing, enter a competition, attend an event, or contact us
Payment and financial details (billing address, tokenised payment references)	To process payments for orders; detect and prevent fraud; process refunds and returns	Directly from you at point of sale (in store or online checkout). We do not store your full payment card details; payment processing is handled by our third-party payment processors
Order and transaction details (items purchased, order value, delivery address, returns/exchanges history)	To fulfil and deliver orders; process returns and exchanges; analyse purchasing trends to improve our products and services; comply with consumer guarantee and warranty obligations	Directly from you when you transact with us; from our e-commerce platform and ERP system (Indigo 8)
CCTV footage (image and, where applicable, sound recordings)	To maintain the safety and security of our stores, staff and customers; to deter and assist in the investigation of theft and other criminal activity	Captured automatically via CCTV cameras when you visit our retail stores. CCTV footage is retained for four weeks before automatic deletion.
Device and technical information (device ID, device type, browser type, operating system, IP address, approximate geo-location)	To operate and maintain our Sites; analyse site performance; detect and prevent fraud	Collected automatically via cookies, pixels and server logs when you visit our Sites
Browsing and interaction data (pages viewed, clickstream data, traffic source/referral URL, time on page, advertising interaction data)	To measure and improve site performance; understand customer preferences; deliver and measure advertising (including personalised advertising); conduct analytics	Collected automatically via cookies, pixels and similar technologies (including third-party analytics and advertising tools) when you use our Sites
Cookie and tracking technology data (strictly necessary cookies are enabled by default; other categories such as analytics, marketing and personalisation require your consent)	To remember your preferences; measure and analyse site usage; deliver, target and measure advertising	Via cookies, pixels and similar technologies placed by us and by third parties we work with
Marketing preferences and opinions (product preferences, survey responses, competition entries)	To personalise your experience; improve our products and services; conduct marketing and promotional activities	Directly from you when you enter competitions, respond to surveys, or provide feedback
Communications and customer support records (emails, live chat transcripts, support tickets)	To respond to and resolve enquiries and complaints; improve customer service; maintain records for quality assurance and training; comply with legal obligations	Directly from you when you contact us by email, phone, live chat or social media; via our customer support platform (Gorgias)
Product review and feedback data (review text, star ratings, photos submitted with reviews)	To display customer reviews on our Sites; improve our products and services	Directly from you via our review platform (Okendo); information may be shared with us by Okendo
Returns and exchanges data (reason for return, product condition, replacement preferences)	To process and manage returns and exchanges; analyse product quality; comply with consumer guarantee obligations	Directly from you via our returns platform (ReturnGO Returns & Exchanges); information may be shared with us by ReturnGO
Wishlist and saved preferences data	To allow you to save products for later; personalise product recommendations	Directly from you via our Sites (Wishlist Plus)
Marketing and advertising data received from third parties (lead form submissions, ad engagement data, audience segment data)	To conduct and measure the effectiveness of advertising campaigns; to reach prospective customers	Indirectly, from third-party marketing platforms including Meta (lead generation campaigns) and Klaviyo (CRM); from analytics providers including Elevar Conversion Tracking and Supermetrics
Affiliate and referral data (referral source, click/conversion data)	To manage and measure affiliate marketing partnerships; attribute sales to referral sources	Indirectly, from our affiliate marketing platform (impact.com)
Financial reconciliation and accounting data (aggregated sales values and invoice references synced to accounting systems)	To reconcile sales and financial records; comply with tax and accounting obligations	Via integration between our e-commerce platform and accounting systems (A2X – QuickBooks & Xero Sync; XERO SYNC Orders and Inventory)
Business analytics and reporting data (aggregated and individual-level commerce data)	To analyse business performance; manage inventory; optimise checkout experience; send transactional/order-related emails	Via our e-commerce platform integrations (Matrixify, Wayflyer, Orderly Emails, Checkout Blocks)
ERP and inventory data (order fulfilment data linked to customer records)	To manage order fulfilment, inventory and supply chain operations	Via our ERP system (Indigo 8)
Sensitive information (e.g. biometric data)	If it is reasonably necessary for our functions or activities (see other items in this column), or an exception applies under the applicable legislation. Where we do, it is only with your consent.	Directly or through third parties (e.g. CCTV service providers) but only where expressly required and with your consent
CV, Resume, Qualifications, Work History, Referees, address, & contact details (phone and email)	To manage recruitment, assess your suitability for a role, and contact you about your application	Directly from applicants via our recruitment platform (BambooHR) or our Sites
Social media interaction data (public profile information, social media handles, content you tag us in)	To interact with you on social media; to manage our social media presence. We do not separately collect or store social media data beyond what is captured by the relevant social media or advertising platform.	Directly from you or from social media platforms when you interact with our social media pages

4. What if you do not provide us with the personal information we need?

If you choose not to provide information as requested, we may not be able to service your needs. For example, it will not be possible for us to provide you with some of our services if you want to remain anonymous or use a pseudonym.

5. Unsolicited personal information

We sometimes receive unsolicited personal information. In circumstances where we receive unsolicited personal information we will usually destroy or de-identify the information as soon as practicable if it is lawful and reasonable to do so unless the unsolicited personal information is reasonably necessary for, or directly related to, our functions or activities.

6. Using and disclosing your personal information

6.1 Using

We will only use your personal information for a purpose for which it was collected (see column two of the table in section 3 above), or for a secondary purpose if an exception applies.

6.2 Disclosing

We may disclose your personal information to the following third parties:

(a) our related bodies corporate and our staff/contractors;

(b) payment processors and logistics/delivery partners;

(c)our dealers and agents;

(d) IT and e-commerce service providers;

(e) anyone to whom our assets or businesses (or any part of them) are transferred;

(f) customer support, CRM, ERP, marketing and analytics providers, including the third party service providers listed in the table in section 3 above;

(g) our sponsors or promoters of any competition that we conduct via the Sites;

(h) professional advisers (e.g., lawyers, accountants);

(i) any third parties authorised by you to receive information held by us; and

(j) other persons, including government agencies, regulatory bodies and law enforcement agencies, or as required, authorised or permitted by law.

If you are a contractor, we may also disclose your information to payment system operators.

7. Overseas disclosure

We may store, host or process personal information with service providers located outside Australia and/or New Zealand (for example, cloud hosting, customer support platforms and analytics providers).

We will take reasonable steps to ensure overseas recipients handle personal information in a manner comparable with the protections you get under applicable privacy laws (see section 1.2) or where we have informed you that no comparable protections may exist in the country of disclosure and you have consented to such disclosure.

Some of our service providers may be located in, or may store or access personal information from countries outside Australia and New Zealand. Currently, our ERP system and analytics platform are hosted in Australia.

Disclosure is made to the extent that it is necessary to perform our functions or activities.

By providing your personal information to us, you consent to the disclosure of your information outside of Australia and/or New Zealand and acknowledge that comparable protections to the applicable privacy laws might not apply to your information in the countries to which we disclose such information.

Where you consent to overseas disclosure in circumstances where comparable protections may not apply, you acknowledge that we may not be required to take additional steps to ensure that the overseas recipient handles your personal information in accordance with Australian or New Zealand privacy laws.

8. Using your personal information for direct marketing

From time to time, and in support of our future development and growth, we may use your personal information to contact you (for example, by email or SMS) to promote and market our products and services.

We only use personal information for direct marketing in circumstances where we have collected the information directly from the individual and that individual reasonably expects to receive direct marketing material from us (for example, where an individual has signed up to receive direct marketing material from us).

You can opt-out from being contacted for direct marketing purposes by contacting us at enquiries@assemblylabel.com or by using the unsubscribe link included in each direct marketing communication we send.

Once we receive a request to opt out from receiving marketing information, we will stop sending such information within a reasonable amount of time.

9. Automated decision-making and profiling

We may use automated tools and systems to help us run our business efficiently (for example, to detect suspected fraud, to personalise product recommendations, and to measure and optimise advertising). These automated processes do not produce decisions that have legal or similarly significant effects on you.

If you have questions about how we use automated tools, you can contact our Privacy Officer using the contact details below.

10. Security and retention

10.1 Security

We take reasonable steps to protect personal information under our control from misuse, interference and loss and from unauthorised access, modification or disclosure. We hold your personal information electronically in secure databases operated by us or our third-party service providers.

We protect the personal information we hold through a combination of technical and organisational security measures.

While we take reasonable steps to ensure your personal information is protected from loss, misuse and unauthorised access, modification or disclosure, security measures over the internet can never be guaranteed and, as such, we cannot guarantee the security of your personal information.

We encourage you to play an active role in keeping your personal information secure, by maintaining the confidentiality of any passwords and account details used on our website.

10.2 Retention

We will retain personal information only for as long as needed for our business purposes and legal requirements, and then securely delete or de-identify it where appropriate.

11. Accessing or correcting your personal information

We take all reasonable steps to ensure that the personal information we collect, use and/or disclose is accurate, complete, up to date and relevant.

You have the right to ensure that your personal information which is held by us is accurate. To make a request to access and/or correct your personal information, please contact Assembly Label’s Privacy Officer using the contact details provided below. We may need to verify your identity before responding.

While we will always endeavour to give access to personal information free of charge, we reserve the right to charge individuals for access to personal information to cover reasonable costs associated with:

(a) searching for, locating and retrieving personal information and deciding which information to provide to the individual;

(b) using an intermediary; and

We are entitled to refuse to give access to personal information in certain circumstances permitted by law.

12. Destroying or de-identifying personal information

We destroy or de-identify personal information when we no longer need it unless we are otherwise required or authorised by law to retain the information.

13. Anonymity and pseudonymity

Individuals have the option of dealing anonymously or by pseudonym with us, unless it is impracticable to do so or we are required, by law or a court or tribunal order, to deal with identified individuals.

14. Third Party Links

The Sites may contain links to websites or products operated by third parties.

Those links are provided for convenience and may not remain current or be maintained. Unless expressly stated otherwise, we are not responsible for the privacy practices of, or any content on, those linked websites or products, and have no control over or rights in those linked websites.

The privacy policies that apply to those other websites may differ substantially from this Policy, so we encourage individuals to read them before using those websites or products.

15. Making a complaint

If you believe your privacy has been breached or you have a complaint about our handling of your personal information, please contact our Privacy Officer using the details below.

We take privacy complaints seriously. If you make a complaint, we will respond within five (5) calendar days to advise you of who is responsible for managing your complaint. We will try to resolve your complaint within ten (10) calendar days. When this is not possible, we will contact you within that time to let you know how long we will take to resolve your complaint.

We will investigate your complaint and, where necessary, consult with third parties about your complaint. We will make a decision about your complaint and write to you to explain our decision.

If you are not satisfied with our decision, you can:

(Australia) refer your complaint to the Office of the Australian Information Commissioner (OAIC) by phone on 1300 363 992 or online at www.oaic.gov.au; or
(New Zealand) refer your complaint to the Office of the Privacy Commissioner (OPC) via the means set out on the OPC’s website at https://www.privacy.org.nz/tuhono-connect/contact-us/.

16. Changes

We may, from time to time, amend this Policy. Any changes to this Policy will be effective immediately upon the posting of the revised Policy on our website.

By continuing to use the services following any changes, you will be deemed to have agreed to such changes. As such, you should regularly check the Sites to see if there have been any recent changes.

17. Contact us

All questions or queries about this Policy and complaints should be directed to:

Privacy Officer

Email: enquiries@assemblylabel.com