Privacy Policy

About this policy

Glue Guru Limited (company number 2413388) is an Auckland-based importer, distributor, wholesaler and manufacturer of adhesives, sealants and industrial products. This policy explains how we collect, use, store and share personal information when you shop with us online or in store, apply for a trade account, use our trade portal, contact us or visit glueguru.co.nz.

We handle personal information in line with the Privacy Act 2020, including the information privacy principles added by the Privacy Amendment Act 2025. In this policy, "we", "us" and "Glue Guru" mean Glue Guru Limited. "You" means anyone whose personal information we hold, including retail customers, trade account holders and their staff, guarantors, suppliers and people who get in touch with us.

What personal information we collect

The information we collect depends on how you deal with us. It may include the following.

• Contact details such as your name, email address, phone number, delivery and billing addresses, company name and job title.
• Order details such as the products you buy, your order history, delivery instructions, returns and warranty or product claims.
• Payment details. Card payments on our website are handled by our payment providers, and we do not see or store your full card number. For trade accounts paid by direct debit or bank transfer, we hold the bank account details you give us.
• Trade account details such as your business name, NZBN or company number, trading history, the names and contact details of owners and directors, photo identification, trade references, guarantor details, your credit limit and your payment history.
• Login details for your account on our website or trade portal.
• Enquiry details, meaning whatever you send us through our contact form, by email, over the phone or in store. This can include photos of your project and details of the materials and conditions you are bonding or sealing, so we can recommend the right product.
• Technical and usage information such as your IP address, device and browser type, the pages you view, how you found our website and the identifiers set by cookies.
• Marketing preferences, including whether you have subscribed to or unsubscribed from our emails.
• Event details you give us at trade shows or industry events, such as an entry into a giveaway.

You do not have to give us your personal information. If you choose not to, we may not be able to process your order, deliver your goods, open a trade account or answer your enquiry.

How we collect it

Most of the information we hold comes straight from you, when you place an order, fill in a form, apply for a trade account, call or email us, or visit our store at Penrose.

Sometimes we collect information about you from other people or organisations. This may happen in the following situations.

• A colleague or employer gives us your details, for example when they place an order for delivery to you or list you as a contact on a trade account.
• You apply for a trade account or stand as a guarantor, and we obtain information from credit reporting agencies, the trade referees you name, the Companies Office, the NZBN register and the Personal Property Securities Register (PPSR).
• Our couriers and freight companies send us delivery and tracking updates.
• Our payment providers tell us whether a payment went through or looks fraudulent.
• Advertising and analytics platforms such as Google and Meta give us information about how people interact with our ads and website.
• A debt collection agency acting for us updates us on an overdue account.

When we collect information about you from someone else, we take reasonable steps to make sure you know about it, as the Privacy Act requires. This policy is one of those steps. We may not notify you separately where an exception in the Act applies, such as where you already know about the collection because you signed our trade account application.

How we use your information

We use personal information for the purposes we collected it for, or for purposes directly related to them. These include:

• processing, packing and delivering your order, including giving couriers the contact details they need to carry goods classed as dangerous for transport
• sending order confirmations, invoices and delivery or tracking updates by email or text message
• giving you technical advice, product recommendations and Safety Data Sheets
• contacting you about a product recall, a safety notice or a change to a product you have bought from us
• assessing trade account applications, managing your account and credit limit, and collecting money owed to us
• handling returns, warranty claims and complaints, which may involve passing details of a claim to the manufacturer
• answering your questions and keeping a record of what we discussed
• sending you news and offers, where you have agreed to receive them
• understanding how people use our website, improving it and measuring how well our advertising works
• protecting our website and forms from spam and fraud
• meeting our legal, tax and accounting obligations.

We will ask for your permission before using your information for any purpose not covered here, unless the Privacy Act allows otherwise.

Trade accounts, credit checks and guarantors

A trade account lets your business buy on credit, so we need to check that credit can be offered safely. When you apply for a trade account, or agree to guarantee one, you authorise us to do the following.

• Ask one or more credit reporting agencies for a credit report on you and your business. The agency may keep a record of our enquiry and include it in reports it gives to other businesses, as allowed under the Credit Reporting Privacy Code 2020.
• Contact the trade referees you name and ask about your payment history with them.
• Search the Companies Office, the NZBN register and the PPSR.
• Register a financing statement on the PPSR to record our security interest in goods supplied on credit. The PPSR is a public register, so anyone searching it can see the details recorded there.
• Give information about an overdue or defaulted account to credit reporting agencies, debt collection agencies and our lawyers, so the debt can be recovered and the default recorded.

If you name someone else on your application, such as a director, a guarantor or an accounts contact, please make sure they know you have given us their details and that they can read this policy.

We use credit information only to assess, manage and enforce trade accounts. We do not use a credit report for marketing.

Marketing and opting out

We send marketing emails, and any marketing text messages, only to people who have agreed to receive them or where the Unsolicited Electronic Messages Act 2007 otherwise allows it. Every marketing message includes a working unsubscribe link or instructions for opting out.

We may give a secure, scrambled (hashed) version of your email address or phone number to Google or Meta so we can show our ads to existing customers or leave them out of ads meant for new customers. These platforms match the scrambled details against their own users and do not receive your details in readable form.

You can stop marketing at any time by clicking unsubscribe, or by emailing us and asking to be removed. Opting out of marketing does not stop order, account or safety messages, because we need to send those to look after your orders and account.

Cookies, analytics and advertising tools

Our website uses cookies and similar technologies. Some are needed for the site to work, such as keeping items in your cart. Others help us understand how the site is used and show our ads to people who have visited it.

• Shopify runs our online store, cart, checkout and customer accounts.
• Google Tag Manager loads our analytics and advertising tools onto the website.
• Google Analytics 4 shows us how visitors find and use our website.
• Google Ads measures sales from our ads and shows our ads to people who have visited our website.
• Meta Pixel measures sales from our Facebook and Instagram ads and shows those ads to people who have visited our website.
• Google reCAPTCHA protects our contact form from spam.

You can block or delete cookies in your browser settings, although the cart and checkout may not work without them. You can also manage your Google ad settings, install the Google Analytics opt-out add-on and change your Facebook ad preferences.

Who we share information with

We do not sell or rent your personal information. We share it only where we need to, with the following people and organisations.

• Couriers and freight companies that deliver your order.
• Payment providers and our bank, to process payments and refunds.
• The providers of our website, trade portal, email, accounting and IT systems, who store and process information on our behalf.
• The marketing agency that manages our website, search and advertising.
• Manufacturers and brand suppliers, where we need their help with a warranty claim, product fault or recall.
• Credit reporting agencies, trade referees, the PPSR, debt collection agencies and lawyers, as set out in the trade accounts section above.
• Our accountants, auditors, insurers and other professional advisers.
• Government agencies, regulators and the Police, where the law requires or allows it.
• A buyer or prospective buyer of our business, if Glue Guru is sold or restructured, on the basis that they keep your information confidential.

Our service providers may use your information only to provide their services to us.

Storing and sending information overseas

Some of the services we use store information outside New Zealand. Shopify, Google and Meta process data in the United States, Canada and other countries, and some of our other software providers may store data in Australia or elsewhere.

The privacy laws in some of those countries may not protect your information in the same way as New Zealand law. Before we use an overseas provider, we take reasonable steps to make sure your information will be protected to a comparable standard, for example by using established providers that are bound by contract to keep it secure and use it only for our purposes.

Keeping your information safe

We limit access to personal information to staff and providers who need it for their work. We use password-protected systems, secure encrypted checkout and reputable providers with their own security controls. Paper records, such as signed trade account applications, are kept in secure storage at our premises.

How long we keep it

We keep personal information only for as long as we need it for the purposes in this policy or to meet our legal obligations.

• Orders, invoices and payment records are kept for at least 7 years, to meet New Zealand tax requirements.
• Trade account applications, credit checks and guarantees are kept while the account is open, then for 7 years after it closes or the debt is paid.
• Enquiries and technical advice are kept for up to 7 years after our last contact with you.
• Marketing subscriptions are kept until you unsubscribe. After that we keep only a record that you opted out.
• Job applications are kept for up to 12 months after the role is filled.

When we no longer need information, we securely delete or destroy it, or remove the details that identify you.

Privacy breaches

If a privacy breach occurs that is likely to cause someone serious harm, we will notify the people affected and the Office of the Privacy Commissioner as soon as practicable, as the Privacy Act requires.

Accessing and correcting your information

You have the right to ask for a copy of the personal information we hold about you, and to ask us to correct it if you think it is wrong. To make a request, contact our Privacy Officer using the details at the end of this policy. We may need to confirm your identity before we release anything.

We will respond as soon as we can, and no later than 20 working days after we receive your request. We do not charge for making a request. If providing the information involves a large amount of work, we may charge a reasonable fee, and we will tell you the amount before we go ahead.

If we decide not to change information you have asked us to correct, you can ask us to attach a statement of the correction you wanted, and we will do so.

Customers in Australia

We supply customers in Australia, and their information is handled under this policy through the same systems we use in New Zealand. Where the Privacy Act 1988 (Cth) applies to us, we also comply with the Australian Privacy Principles. Australian customers who are not satisfied with how we have handled a complaint can contact the Office of the Australian Information Commissioner.

Job applicants

If you apply to work with us, we collect the information in your application and anything you tell us during interviews. We will contact the referees you name, and we will ask for your consent before carrying out any other checks. We use this information only to assess your application.

Children

Our products are made for trade, industrial and adult use. We do not knowingly collect personal information from anyone under 16.

Changes to this policy

We may update this policy from time to time, for example when the law changes or we start using a new service. The current version will always be on our website with the date it was last updated.

Contact us or make a complaint

If you have a question about this policy, want to access or correct your information, or want to make a complaint, please contact our Privacy Officer.

Privacy Officer, Glue Guru Limited

1016E Great South Road, Penrose, Auckland 1061

Email enquiries@glueguru.co.nz (please put "Privacy Officer" in the subject line)

Phone +64 9 444 4878

We will look into your complaint and let you know the outcome. If you are not satisfied with our response, you can contact the Office of the Privacy Commissioner at privacy.org.nz or on 0800 803 909.

Notes for Melia (delete before publishing)

The current page at /pages/privacy-policy is a four-line placeholder that only mentions name and contact details, so this draft replaces it in full.

• Confirm the legal entity. The Terms of Trade name Glue Guru Limited (company number 2413388), while other material refers to Glue Guru International. Check the Companies Office and use whichever entity runs the website.
• Name a Privacy Officer and consider a dedicated address such as privacy@glueguru.co.nz. The old policy points to info@glueguru.co.nz, which doesn't appear anywhere else on the site.
• Update the Terms of Trade. Clause 18 still cites the Privacy Act 1993, which was repealed in 2020, and bundles marketing consent into the credit authorisation. It should reference the Privacy Act 2020, link to this policy and include a notice for guarantors.
• Check the tracking stack. The site loads two Google Tag Manager containers (GTM-WB7ZBH5H and GTM-5XX3HCM7). Confirm what sits inside them, and whether customer lists are uploaded to Google or Meta. Remove the hashed-list paragraph if not.
• Confirm the email and SMS platforms (Shopify Email, Klaviyo or other) and the platform behind portal.glueguru.co.nz.
• Australia. Confirm whether there's an Australian entity and whether annual turnover is over A$3 million. If the Australian Privacy Act doesn't apply, that section can be cut down to one line.
• Premises. If there's CCTV at the Penrose store or warehouse, add a line covering it.
• Publish in two places. Paste into the /pages/privacy-policy page and into Shopify Settings > Policies > Privacy policy so checkout links to the same wording.
• Legal review. Worth having their lawyer look over the trade account and guarantor section before it goes live.

Site errors spotted while reviewing:

• The FAQ and shipping pages list enquires@glueguru.co.nz (missing an "i") and +64 9 4444 4878 (an extra 4).
• Question 8 on the shipping page still has the placeholder "[company phone number]" in it.
• The shipping page says delivery is NZ only, which doesn't match the Australian customers the store serves.