Privacy Policy

Mayer & Toye Limited  ·  Last updated: 1 July 2026

Introduction

Mayer & Toye Limited, trading as Mayer & Toye, complies with the New Zealand Privacy Act 2020 when dealing with personal information.

Personal information means information about an identifiable individual. This may include details such as your name, email address, phone number, delivery address, billing details, organization, job title, enquiry details, order information, and any other information you provide to us.

This Privacy Policy explains how we collect, use, disclose, store, and protect your personal information.

This policy does not limit or exclude any of your rights under the Privacy Act 2020. Further information about the Act is available from the Office of the Privacy Commissioner at www.privacy.org.nz.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time by uploading a revised version to our website. Any change will apply from the date the revised policy is uploaded.

Who we collect personal information from

We collect personal information about you from:

• you, when you provide information to us directly, including through our website, enquiry forms, email, phone calls, meetings, quote requests, orders, account applications, payment processes, or other communications with us
• your organisation, where your organisation provides your details to us for the purpose of an enquiry, quote, order, delivery, account, or communication
• third parties, where you have authorised this or where the information is publicly available
• service providers or platforms that support our website, enquiry process, payment process, accounting, customer communication, freight, or business administration

Where possible, we collect personal information directly from you.

How we use your personal information

We use your personal information to:

• respond to enquiries and communications from you
• provide quotes, estimates, proofs, products, and services
• process and manage orders
• prepare invoices, receive payments, and collect money owed to us
• arrange production, packaging, delivery, freight, and related order fulfilment
• communicate with you about current, past, or potential projects
• manage customer accounts and credit arrangements, including undertaking credit checks where necessary
• maintain accurate business, financial, and customer records
• improve our website, products, services, customer experience, and internal processes
• market our products and services to you, including by email, where this is permitted by law
• respond to complaints, questions, or requests
• protect and enforce our legal rights and interests
• meet our legal, tax, accounting, regulatory, and compliance obligations
• carry out any other purpose authorised by you or permitted by the Privacy Act 2020

Disclosing your personal information

We may disclose your personal information to:

• our staff, contractors, and professional advisers where reasonably required for business purposes
• businesses that support our website, IT systems, email, accounting, payment processing, customer management, marketing, storage, or other business operations
• suppliers, manufacturers, designers, freight providers, courier companies, and logistics partners where required to produce, package, ship, or deliver your order
• credit reference agencies or debt collection agencies where necessary for account management or debt recovery
• banks, payment providers, and financial service providers
• regulatory authorities, government agencies, law enforcement agencies, or any person who can require us to supply personal information under law
• any other person authorised by you
• any other person authorised by the Privacy Act 2020 or another law

Some businesses that support our services may be located outside New Zealand. This may mean your personal information is held or processed outside New Zealand. Where we disclose personal information overseas, we will take reasonable steps to ensure appropriate privacy safeguards are in place, where required by the Privacy Act 2020.

We may also transfer personal information as part of a sale, merger, consolidation, restructure, liquidation, or acquisition of our business or assets.

Protecting your personal information

We take reasonable steps to protect personal information from loss, unauthorised access, misuse, disclosure, alteration, or destruction.

We limit access to personal information to those who reasonably need it for business purposes. We also use reasonable technical, administrative, and physical safeguards to help protect the information we hold.

Retaining your personal information

We keep personal information only for as long as it is reasonably required for the purposes for which it was collected, or as required for legal, tax, accounting, business record, warranty, dispute, or compliance purposes.

When personal information is no longer required, we may securely delete it, anonymise it, or archive it in accordance with our normal business processes.

Accessing and correcting your personal information

You have the right to request access to personal information we hold about you, and to request correction of that information.

Before responding to a request, we may need to verify your identity and confirm that the information relates to you.

If you ask us to correct personal information and we consider the correction reasonable, and we are reasonably able to make the correction, we will do so. If we do not make the correction, we will take reasonable steps to note that you requested the correction.

To request access to, or correction of, your personal information, please contact us at paul@mayerandtoye.co.nz.

Please include enough detail for us to identify you and the information you are requesting.

Internet use

We take reasonable steps to maintain secure internet connections and protect information submitted through our website. However, if you provide personal information to us over the internet, you acknowledge that internet transmission is not always completely secure and is provided at your own risk.

If you follow a link from our website to another website, that website will have its own privacy practices and privacy policy. We are not responsible for the privacy practices of third-party websites. We recommend reviewing the privacy policy of any third-party website before providing personal information.

Cookies and website analytics

Our website may use cookies and similar technologies to help operate the website, improve user experience, monitor website performance, understand visitor activity, and support marketing or enquiry functionality.

Cookies are small files stored on your device. You may disable cookies through your browser settings, although some website features may not function properly if cookies are disabled.

We may also use website analytics or marketing tools to understand how visitors interact with our website and to improve our services, content, and customer experience.

Overseas customers

The following section applies where Australian privacy law applies to your personal information.

Overseas disclosure

Mayer & Toye Limited is based in New Zealand. If you are located in Australia, your personal information may be disclosed to, stored in, accessed from, or processed in New Zealand.

We may also disclose personal information to overseas recipients where reasonably required for our business operations. This may include suppliers, manufacturers, freight providers, IT providers, cloud storage providers, payment providers, marketing platforms, analytics providers, or other service providers located in countries including New Zealand, Australia, Singapore, Hong Kong, Vietnam, China, the United States, or other countries where our service providers operate.

Where required by Australian privacy law, we will take reasonable steps to ensure that overseas recipients handle personal information in a way that is consistent with the Australian Privacy Principles.

Security of personal information

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, unauthorised modification, and unauthorised disclosure.

We limit access to personal information to those who reasonably need it for business purposes.

We use reasonable technical, administrative, and physical safeguards to help protect the information we hold. These may include access controls, secure systems, internal procedures, staff awareness, and appropriate supplier management.

No method of electronic transmission or storage is completely secure. However, we take reasonable steps to maintain secure systems and protect the personal information we handle.

Data breaches

If we become aware of a data breach involving personal information, we will take appropriate steps to contain, investigate, and respond to the breach.

Where the Australian Notifiable Data Breaches scheme applies, we will notify affected individuals and the Office of the Australian Information Commissioner if we are required to do so.

Retaining personal information

We keep personal information only for as long as it is reasonably required for the purposes for which it was collected, or as required for legal, tax, accounting, business record, warranty, dispute, or compliance purposes.

When personal information is no longer required, we may securely delete it, anonymise it, or archive it in accordance with our normal business processes.

Accessing and correcting personal information

You may request access to personal information we hold about you.

You may also request that we correct personal information if you believe it is inaccurate, out of date, incomplete, irrelevant, or misleading.

Before responding to a request, we may need to verify your identity and confirm that the information relates to you.

If you ask us to correct personal information and we consider the correction reasonable, and we are reasonably able to make the correction, we will do so.

If we do not make the correction, we will take reasonable steps to note that you requested the correction.

To request access to, or correction of, your personal information, please contact us using the details below.

Complaints

If you have a concern or complaint about how we have handled your personal information, please contact us first so we can review and respond to your concern.

Please include enough detail for us to understand the issue and identify the information involved.

We will consider your complaint and respond within a reasonable time.

If you are not satisfied with our response, and Australian privacy law applies to your personal information, you may be able to contact the Office of the Australian Information Commissioner.

Internet use and third-party websites

We take reasonable steps to maintain secure internet connections and protect information submitted through our website.

However, if you provide personal information to us over the internet, you acknowledge that internet transmission is not always completely secure and is provided at your own risk.

If you follow a link from our website to another website, that website will have its own privacy practices and privacy policy. We are not responsible for the privacy practices of third-party websites.

We recommend reviewing the privacy policy of any third-party website before providing personal information.

Contacting us

If you have any questions about this Privacy Policy, our privacy practices, or if you would like to request access to, or correction of, your personal information, please contact us at: