This policy explains what personal information One Stop Deal ("we", "us") collects through One Stop Deal, why we collect it, who we share it with and what your rights are. We follow the New Zealand Privacy Act 2020.
We only collect what we need to run your layby, deliver your goods and improve our store.
What we collect
Information you give us
- Your contact details: name, email address and phone number.
- Your date of birth. We use it to check that you are 18 or older.
- Your delivery address and any delivery notes.
- Your application and plan details: the goods you choose, your instalment, how often you pay and your payday.
- Your payment preference, and the payment details needed to collect instalments and pay refunds.
- Your signature, when you sign a layby agreement or a direct debit authority. We record the date, the time and the device and internet address (IP address) used.
- Messages you send us, and notes of calls with us.
Information we collect when you use our site
- Device and usage data, such as your browser type, the pages you view and how you move through the site.
- Advertising click identifiers and campaign tags. If you arrive from an ad or a link, we record details such as the Google click ID (gclid), the Meta click ID (fbclid) and UTM parameters. These tell us which ad or link brought you here.
- Cookies and similar technologies. See "Cookies and analytics" below.
Information from others
- Payment results from our payment providers, such as whether a payment went through or failed.
- Delivery updates from couriers.
You can browse our store without telling us who you are. If you choose not to give us the details we ask for in an application, we will not be able to set up a layby for you.
Applications you do not finish
If you start an application and enter your contact details, we may save what you have entered, even if you do not submit it. We do this so that we can help you finish it, for example by letting you pick up where you left off or by getting in touch to see if you need a hand.
We delete incomplete applications after 30 days. You can ask us to delete yours sooner.
Why we collect it
We use your information to:
- check that you can use layby, including your age
- set up, confirm and manage your layby agreement
- collect your instalments and pay your refunds
- deliver your goods and keep you updated
- send you service messages, such as receipts, payment reminders and delivery updates
- answer your questions and handle complaints
- prevent fraud and keep our site secure
- understand how our site and our advertising are performing, so that we can improve them
- send you marketing, but only if you have opted in
- meet our legal obligations, such as keeping tax and business records.
We do not run credit checks. We do not sell your personal information.
Who we share it with
We share your information only where we need to, with:
- Payment providers, to collect your instalments and pay refunds. Card details go straight to our payment provider. We never see or store your full card number.
- Couriers and freight carriers, who need your name, address and phone number to deliver your goods.
- Email and text message providers, who send our messages to you.
- Technology providers that host our website and store our data.
- Analytics and advertising platforms, such as Google and Meta. We share device and usage data and advertising click identifiers with them. To measure whether our ads led to an application or a layby, we may also send them your contact details in hashed form. Hashing scrambles your email address or phone number before it leaves our systems. The platform can only match it to an account you already have with them.
- Professional advisers, regulators and courts, where the law requires or allows it.
- A buyer of our business, if we ever sell it. The buyer would have to keep following this policy.
Some of these providers store or process information outside New Zealand. When we send information overseas, we take reasonable steps to make sure it is protected in a way that is comparable to the Privacy Act 2020.
Cookies and analytics
We use cookies that are needed to make the site work, for example to keep items in your cart and to keep you signed in.
We also use analytics and advertising cookies. They help us see which pages and ads are working. You can turn these off at any time. Use the Privacy choices link in the footer of our site. The site still works if you turn them off.
How we store and protect it
We take reasonable steps to keep your information safe from loss and from access, use, change or disclosure that is not authorised. These steps include limiting which staff can see your information, protecting data as it travels to and from our site, and using trusted providers to handle payments.
No system is perfectly secure. If a privacy breach happens that has caused, or is likely to cause, serious harm, we will tell you and the Office of the Privacy Commissioner as the Privacy Act requires.
How long we keep it
We keep your information only for as long as we need it for the purposes above, or as the law requires.
- Financial records, such as layby agreements, payments and refunds, are kept for 7 years.
- Incomplete applications are deleted after 30 days.
- Other information is deleted or made anonymous once we no longer need it.
Your rights
You have the right to:
- ask for a copy of the personal information we hold about you
- ask us to correct it if you think it is wrong.
To do either, contact us. We may need to check who you are first. We will reply as soon as we reasonably can, and within 20 working days as the Privacy Act requires. If we decide not to make a correction, you can ask us to attach a statement of the correction you asked for.
You can also ask us to delete information we no longer need to keep. We will do so unless the law requires us to keep it.
Marketing messages
We send marketing emails and text messages only if you have opted in. Every marketing message includes a way to unsubscribe, as the Unsolicited Electronic Messages Act 2007 requires. You can also change your preferences in your account, or ask us to stop.
If you unsubscribe from marketing, we will still send you service messages about your layby, such as receipts and payment reminders.
Children
Our store is for people aged 18 or older. We do not knowingly collect personal information from anyone younger.
How to contact us or complain
If you have a question or a concern about your privacy, please talk to us first.
- Online: Contact us
If you are not happy with our response, you can complain to the Office of the Privacy Commissioner. Its website is privacy.org.nz.
Changes to this policy
We may update this policy from time to time. The latest version is always on this page, with the date it was last updated. If we make a significant change, we will let you know on our site or by email.
Last updated: 24 October 2026