MAINSCAPE GARDEN

SHOP NOW

Privacy Policy

‌Effective Date: 17 October 2026‌

Welcome to the privacy policy of MAINSCAPE GARDEN SUPPLIES LIMITED. This policy applies to our website www.mainscapegarden.com and all related e-commerce services we provide to you. At MAINSCAPE GARDEN, we are a small, plant-loving team rooted in the heart of local gardeners, dedicated to providing well-made, budget-friendly gardening tools that fit small patios, windowsills, and backyard plots. We take your personal data privacy extremely seriously, and this document clearly outlines how we collect, use, store, share and protect your personal information when you interact with our platform, as well as the rights you hold over your personal data.

By accessing and using our website, placing orders for our gardening products, and interacting with any of our services, you acknowledge that you have read, understood, and agree to the terms laid out in this Privacy Policy. If you do not agree with any part of this policy, please do not use our website or submit any personal information to us.

1. Data Controller Information

The data controller responsible for your personal information under applicable privacy laws is:

  • Full Company Name: MAINSCAPE GARDEN SUPPLIES LIMITED
  • Registered Contact Address: C/O Ainger Tomlin Ltd, Level 1, Ainger Tomlin House, 136 Ilam Road, Ilam, Christchurch 8041
  • Contact Email Address: lumiw@mainscapegarden.com
  • Contact Phone Number: +64 22 417 1527

If you have any questions, concerns or requests related to your personal data processing activities covered by this policy, you can reach out to our dedicated data protection team at any time via the contact methods listed above.

2. How We Collect Your Personal Information

We strictly follow the core principle of “non-essential no collection, collection must be clearly notified” when handling your personal information, and only collect data that is necessary to deliver complete, compliant e-commerce services to you. We collect personal information from the following scenarios:

2.1 Information You Actively Provide to Us

  • ‌Account Registration Information‌: When you create a “My Account” profile on our website, we may collect your email address, chosen account password, and display name to manage your account membership, save your shopping preferences, and provide easier access to your order history.
  • ‌Order Fulfilment Information‌: When you place an order for our gardening products ranging from plant labels, hand trowels, pruning tools to watering cans, we only collect the core information required to complete your delivery: your full real name, valid contact phone number, and precise delivery address down to the street and house number level. We explicitly notify you that this information is only used for order distribution, courier exception contact, and after-sales return and exchange verification, and will never be used for unsolicited marketing push or cross-entity transfer without your separate explicit consent.
  • ‌After-sales and Service Enquiry Information‌: When you contact our customer service team to resolve order issues, product quality concerns, or general gardening tool consultation, we may collect information you voluntarily provide, including your order number, details of your enquiry, and any images or videos you submit to demonstrate product status.
  • ‌Optional Service Information‌: If you choose to participate in our loyalty program, exclusive member discount activities, new product pre-notification services, we will only collect the information you actively provide for these specific non-basic fulfilment services, such as your birthday for exclusive birthday rewards, or your preferred gardening categories for targeted service reminders. All these optional authorizations are collected via independent confirmation pop-ups, and are never bundled with the order checkout process.

2.2 Information Automatically Collected When You Use Our Website

When you browse our www.mainscapegarden.com website, we automatically collect non-sensitive technical information that is necessary to maintain service stability and security, including your device type, browser type and version, operating system, IP address, access time, page view records, and operation logs of your interactions with our store pages, shopping cart and checkout process. This data helps us optimize our website performance, identify potential security risks, and improve your overall shopping experience.

We also use cookies and similar tracking technologies to remember your shopping cart contents, save your preferred language and display settings, and understand which product categories of our gardening supplies attract the most user interest. You can adjust your browser settings to refuse cookie storage at any time, but this may affect part of the interactive functionality of our website.

2.3 Indirect Collection Compliance

In accordance with New Zealand’s Privacy Amendment Act 2025 which came into full effect on 1 May 2026, we fully comply with the new IPP 3A (Information Privacy Principle 3A) requirements for indirect personal information collection. If we receive your personal information from third-party channels such as our authorized payment service providers or logistics partners, we will take all reasonable measures to notify you of the source of this information, the type of data collected, and the processing purpose within a reasonable period, unless the situation falls under legal exceptions such as the information is already publicly available, the notification would obstruct legal enforcement, or pose a serious threat to public health and personal safety. We maintain complete data mapping records for all indirectly collected personal information, and clearly define transparent data provision obligations in all our third-party cooperation contracts.

3. How We Use Your Personal Information

We only process your personal information for the explicit, clearly stated purposes notified to you at the time of collection, and will not further process the data in a way that is incompatible with these purposes. The main usage scenarios include:

  1. ‌Order Fulfilment and Delivery‌: To process your payment, arrange courier distribution for your purchased gardening tools, resolve delivery exceptions, and complete the entire transaction process smoothly.
  2. ‌Account Management‌: To maintain the normal operation of your member account, save your order history, shopping preferences, and provide convenient one-click checkout services for your future purchases.
  3. ‌Customer Service and After-sales Support‌: To respond to your consultation requests, handle product return and refund applications, resolve disputes, and provide follow-up technical guidance for using our gardening products.
  4. ‌Service Optimization‌: To analyze anonymous aggregate user behaviour data, optimize our website product display layout, improve product assortment, and develop new gardening tools that better meet the needs of local gardeners.
  5. ‌Security Protection‌: To prevent fraud, unauthorized account access, malicious transaction attacks, and protect the personal and property safety of all our users as well as the normal operation of our website platform.
  6. ‌Legal Compliance‌: To fulfil our legal and regulatory obligations, including tax declaration, financial audit, and responding to lawful official requests from competent government authorities.

We will never use your sensitive personal information for any purposes that are not explicitly agreed by you. We strictly prohibit the collection of a 100% blacklist of unnecessary sensitive information including your religious belief, medical history, complete financial payment card number, full real-time travel track, complete mobile phone contact list, and non-public social media browsing records. If you accidentally upload this type of non-necessary sensitive information in our customer service chat window, our system will automatically shield and delete the message immediately without leaving any storage traces, and our customer service team will promptly remind you not to provide irrelevant sensitive information.

4. Sharing and Disclosure of Your Personal Information

We will never sell, rent, or trade your personal information to any third parties for commercial marketing purposes without your separate explicit written consent. We may only share your necessary personal information with the following types of trusted third parties, and all these third parties will be required to sign a dedicated personal information protection agreement with us to ensure that your data is fully protected:

  • ‌Logistics and Courier Partners‌: We will only share your name, contact phone number and delivery address that are strictly necessary for the delivery of your ordered products, to ensure that your gardening tools can be accurately delivered to your designated address.
  • ‌Authorized Payment Service Providers‌: We will share necessary transaction information with our payment processing partners to complete payment verification, prevent payment fraud, and ensure the security of your transaction funds. We never store your complete full bank card payment information on our own servers.
  • ‌Regulatory and Law Enforcement Authorities‌: We may disclose your personal information only when we are required by mandatory legal provisions, court orders, or official requests from competent regulatory authorities to fulfil our legal obligations.

All third parties that process personal data on our behalf are restricted from using your information for any purposes outside the scope we explicitly authorize, and are required to adopt equivalent data security protection measures that meet the requirements of applicable privacy laws.

5. Data Storage and Security Protection

We implement multi-level technical and management measures to fully protect the security of your personal information:

  • ‌Data Encryption‌: All user personal data transmitted between your browser and our website is encrypted through HTTPS protocol, and sensitive personal data stored on our server is encrypted using industry-standard AES-256 encryption technology to prevent unauthorized access.
  • ‌Strict Access Control‌: Our internal team members have strictly divided data access permissions: our operation team can only access desensitized aggregated user behaviour statistical data, and cannot retrieve full personal information of any single user. Our warehouse team will never have access to the complete fields of user contact information, and the express waybill is automatically desensitized by the system before printing, only displaying the user’s last name, the last 4 digits of the mobile phone number, and the house number part of the delivery address is masked with asterisks. Our technical team responsible for the operation of the data encryption system does not have independent permission to access decrypted user information.
  • ‌Data Retention Principle‌: We only retain your personal information for the period necessary to achieve the stated service purpose. After the service is completed and the statutory data retention period expires, we will permanently delete or desensitize your personal information in an irreversible manner. For the historical user transaction data generated before 1 January 2023 that has no new transaction records for 24 consecutive months, we have completed the first stage of desensitization processing: the middle 4 digits of the user’s mobile phone number are automatically hidden, the house number field of the address is completely erased, and only the user’s platform nickname and the administrative region information of the city where they are located are retained, without any identifiers that can locate a natural person.

For any collection of biometric information such as face verification data, which we will only carry out for orders of high-value gardening equipment with a unit price of more than 20,000 Euros, we will obtain your separate explicit written consent including electronic signature confirmation in advance. The collected biometric information will be fragmented, split and encrypted for storage, the full data will not be uploaded to public cloud servers, and the fragments will only be stored in the local hardware partition. The keys are kept separately by two of our dedicated information protection staff, and no single person can retrieve all fragments to restore the complete biometric features. The biometric data will be automatically and permanently deleted within 72 hours after the verification work is completed, without retaining any backups.

We fully comply with the requirements of New Zealand’s Biometric Processing Privacy Code, and carry out full necessity assessment and risk prevention and control for all biometric information processing activities, while paying full attention to the potential cultural impact of data processing on indigenous groups in accordance with local regulatory requirements.

6. Your Rights Over Personal Information

Under applicable privacy laws including New Zealand Privacy Act 2020 and its 2025 amendments, you enjoy the following complete rights over your personal information:

  1. ‌Right of Access‌: You can submit a request to us to obtain a copy of all your personal information we hold, as well as detailed information about our processing purposes, data types, shared third-party parties, and retention period.
  2. ‌Right of Correction‌: If you find that the personal information we hold about you is inaccurate or incomplete, you can contact us at any time to require us to update and correct your data free of charge.
  3. ‌Right to Withdraw Consent‌: You can unilaterally withdraw your authorization for optional non-basic services at any time. After you submit the withdrawal operation, it will take effect within 1 hour, and we will not charge you any fees or set any additional restrictions.
  4. ‌Right to Erasure‌: You can request us to permanently delete all your personal information under specific circumstances such as our processing of data exceeding the necessary scope, the service purpose has been achieved, or you withdraw your consent. We will complete the deletion process within 15 working days after verifying your identity.
  5. ‌Right to Data Portability‌: You can request us to provide your personal data in a structured, commonly used machine-readable format, or directly transmit the data to the data controller you designate, under the conditions permitted by law.
  6. ‌Right to Objection‌: You can object to our processing of your personal information for direct marketing purposes or legitimate interest related scenarios at any time, and we will stop the corresponding processing activities immediately after receiving your objection request.

To exercise these rights, you can send an email to lumiw@mainscapegarden.com from your registered account email address, or contact us via phone at +64 22 417 1527. We will verify your identity before processing your request, and we will not charge any handling fee for your legitimate request within the scope stipulated by law. For any complex request that requires a longer processing period, we will inform you of the progress within 30 days at the latest.

7. Minor Privacy Protection

Our website is a general e-commerce platform for gardening tool sales, and our services are not specifically targeted at users under the age of 16. We will not actively collect personal information of users under the age of 16. If we find that we have inadvertently collected the personal information of a minor under 16 without the verifiable consent of their parent or guardian, we will take measures to delete the relevant information from our system as soon as possible. If you are a parent or guardian and find that your child has provided us with personal information, please contact us immediately, and we will properly handle the relevant data in accordance with legal requirements. This policy also fully complies with the provisions of New Zealand’s Social Media (Age Restricted Users) Act 2025 on the protection of underage users, and we strictly restrict any unauthorized collection of minor user information.

8. Policy Updates and Notification

We may appropriately update the content of this Privacy Policy according to changes in our business operation adjustment, new regulatory requirements, and actual service iteration. When we make major changes to the terms of this privacy policy, we will prominently post the update notification on the homepage of our www.mainscapegarden.com website, and notify you via registered email before the new version takes effect. The updated privacy policy will take effect on the date specified in the new version. Your continued access to our website and use of our services after the effective date of the new policy will be deemed that you agree to the terms of the updated privacy policy.

9. Contact Information

If you have any questions, comments, complaints or relevant requests about this Privacy Policy and our personal information processing practices, please contact us through the following methods:

  • Mail Address: C/O Ainger Tomlin Ltd, Level 1, Ainger Tomlin House, 136 Ilam Road, Ilam, Christchurch 8041
  • Email: lumiw@mainscapegarden.com
  • Phone: +64 22 417 1527

We will respond to your enquiry within a maximum of 7 working days after receiving your message. If you feel that our data processing activities have violated relevant privacy laws, you also have the right to submit a complaint to the local data protection supervisory authority.