Privacy Policy

1. Information we collect

We collect personal information you provide and information generated as you use the Platform, including:

• Account information — your name, email address, phone number, password (stored securely by our authentication provider, never by us in plain form) and profile photo.
• Verification information — email and phone verification status, and any details you provide to verify your identity.
• Listings and content — items you list, descriptions, photos, prices, and messages you send to other users.
• Transaction and wallet information — purchases, sales, bids, offers, wallet balances, top-ups and withdrawals. Card and bank details are collected and processed directly by our payment providers, not stored by Haglox.
• Location information — an approximate location (for example, your city) to show relevant listings, and any location you enter on a listing.
• Device and usage information — device type, app version, log data, and how you interact with the Platform, collected automatically.
• Support information — messages you send to our support assistant or team, which may be retained to resolve your query.

2. How we collect your information

We collect personal information:

• Directly from you — when you register, create a listing, bid, make a payment, verify your account, or contact support.
• Automatically — through your use of the Platform (for example, device and usage data, and approximate location).
• From third parties — such as sign-in providers (e.g. Google) and payment providers, where you choose to use them.

Where it is reasonable and practicable, we collect personal information directly from you (IPP 2).

3. Why we collect and how we use your information

We collect and use your personal information to:

• Create and manage your account, and verify your identity.
• Operate the marketplace — publish listings, run auctions, process bids and offers, and connect buyers and sellers.
• Process payments, wallet top-ups, holds, payouts and withdrawals.
• Provide customer support and respond to your enquiries.
• Keep the Platform safe — detect, prevent and respond to fraud, abuse and security issues.
• Send you service messages and notifications about your activity (such as bids, offers, orders and wallet movements).
• Improve and develop the Platform, and comply with our legal obligations.

We only use your information for the purposes for which it was collected, for a directly related purpose, or as otherwise permitted by the Privacy Act (IPP 10).

4. Disclosure of your information

We may disclose your personal information to:

• Other users — where necessary to complete a transaction (for example, a buyer and seller can see each other's display name and, once engaged, contact details you have provided).
• Service providers who help us run the Platform — including payment processors (Stripe), SMS and email providers (Twilio, Brevo), cloud hosting and image storage (Google Firebase, Cloudinary), our database provider, and AI services used for listing assistance and support.
• Authorities or third parties where required or permitted by law, or to protect the rights, safety or property of Haglox, our users or the public.

We do not sell your personal information. Our service providers are only permitted to use your information to provide services to us.

5. Storage and overseas disclosure

Some of our service providers store and process information outside New Zealand — for example, our database is hosted in Australia, and authentication, hosting, payment and communication providers may process data in Australia, the United States, India or elsewhere.

Where personal information is disclosed to a party overseas, we take reasonable steps to ensure it is protected by comparable safeguards to those under the New Zealand Privacy Act (IPP 12), such as contractual protections and reputable providers with recognised security standards.

6. Keeping your information safe

We take reasonable technical and organisational steps to protect your personal information against loss, unauthorised access, use, modification or disclosure (IPP 5). These include encryption of data in transit (HTTPS), access controls, and using PCI-compliant payment providers so that your full card details never reach our servers. Passwords are managed by a dedicated authentication provider and are never stored by us in readable form.

No system is completely secure, so we cannot guarantee absolute security. Please keep your password and one-time codes confidential — we will never ask you for them.

7. How long we keep your information

We keep personal information only for as long as it is needed for the purposes described in this Policy, or as required by law (IPP 9). When information is no longer required, we take reasonable steps to delete or de-identify it. Some records (such as transaction records) may be retained longer to meet legal, accounting or fraud-prevention obligations.

8. Accessing and correcting your information

Under the Privacy Act you have the right to request access to the personal information we hold about you (IPP 6) and to request that we correct it if it is inaccurate (IPP 7). You can update much of your information directly in the app (for example, your profile, display name and contact details). To make an access or correction request, contact our Privacy Officer using the details below. We may need to verify your identity before actioning a request.

9. Cookies and analytics

We and our providers use cookies and similar technologies to keep you signed in, remember your preferences, and understand how the Platform is used so we can improve it. You can control cookies through your browser settings, though disabling them may affect some features.

10. Children

The Platform is not intended for children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can remove it.

11. Changes to this Policy

We may update this Policy from time to time. When we make material changes we will update the “Last updated” date above and, where appropriate, notify you through the Platform. Your continued use of the Platform after changes take effect means you accept the updated Policy.

12. Contact us and complaints

If you have any questions, wish to access or correct your information, or want to make a privacy complaint, please contact our Privacy Officer:

Privacy Officer, Haglox
Email: privacy@haglox.co.nz

We take privacy complaints seriously and will respond as soon as we can. If you are not satisfied with our response, you have the right to complain to the Office of the Privacy Commissioner (privacy.org.nz).