Privacy & Cookie Policy

Last updated: 10 October 2026

This policy explains what personal information Printees Ltd ("Printees", "we", "us") collects and why. It also explains who we share it with, how long we keep it, and how you can see or correct it. It covers:

• our online store at printees.co.nz, including customer accounts, the Online Designer, the cart and checkout (the store runs on the DecoNetwork platform)
• the Upload page for transfer and gangsheet orders
• webstores we run for schools, kura, clubs, teams and businesses
• our Gangsheet Builder at build.printees.co.nz
• quotes, emails, messages, calls and pickups with our team.

The New Zealand Privacy Act 2020 applies to how we handle your information. If you have a question about this policy, email team@printees.co.nz.

The short version

• We collect what we need to quote, make, deliver and support your order.
• We don't sell your personal information.
• When you pay online by card, you enter your card details into our payment provider's secure payment form, not into Printees' systems.
• Some of the services we use store information overseas, mainly in the United States and Australia. See "Storing information overseas".
• You can ask for a copy of your information, or ask us to correct it, at any time.

Who is responsible for your information

Printees Ltd is responsible for the personal information described in this policy.

• Business: Printees Ltd (NZBN 9429051772352)
• Address: 12 Tamapahore Boulevard, Papamoa 3118, New Zealand
• Privacy officer: our Director
• Email: team@printees.co.nz

What we collect

We collect personal information mostly from you: when you order, create an account, use the Upload page or the Gangsheet Builder, send us artwork or get in touch.

When	What we collect
Quotes and enquiries	Your name, email, phone number, organisation, what you'd like made, any artwork you send, and your messages.
Orders	Your name, email, phone number, billing and delivery addresses, the products, sizes, colours and quantities you order, decoration details, artwork, production speed, delivery or pickup choice, and order history.
Payments	Your payment method, payment status and transaction references. See "Payments and checkout".
Customer accounts	Your username, email address and password, plus saved addresses, orders and saved designs. Accounts run on DecoNetwork's platform, which creates an account when you check out.
Upload page	Your first and last name, email, mobile number, business name (optional), your files or Canva link, sheet size or length, quantity, turnaround (including Rush) and notes.
Webstores	For store owners: your contact and organisation details, your store's settings, products and orders, and the payout details we need to pay your commission. For shoppers: the details you give when you order through a webstore.
Artwork and designs	Logos, images, text, names, numbers and other content you upload or create in the Online Designer, on the Upload page or in the Gangsheet Builder.
Gangsheet Builder	Your gangsheet projects, uploaded artwork and settings. See "Gangsheet Builder — Saved Artwork & Projects".
Customer support	What you tell us by email, phone, Facebook, Instagram or Messenger, and our notes about your order.
Technical information	Your IP address, browser and device type, and cookie and browser-storage identifiers. See "Cookies and browser storage".

Information we get from other people

Sometimes we receive your details from someone else, for example:

• a school, kura, club, team, workplace or community group that orders merchandise including your name, size, number or personalisation
• a parent or caregiver ordering for a child
• a webstore owner, when you order through their store
• someone ordering a gift or delivery for you
• our payment providers and couriers, about your payment or delivery.

We use this information for the purposes in this policy, mainly to make and deliver the order. If you give us someone else's details, please make sure they know, and point them to this policy.

Please don't send us sensitive information

We don't need health information, ID numbers or other sensitive details to make your order. Please leave them out of artwork, notes and messages.

How we use your information

We use personal information to:

• prepare quotes, proofs and print-ready artwork
• make, pack and deliver your order, or have it ready for pickup
• take payment, issue invoices and keep accounting and GST records
• run your customer account and any webstore you have with us, including commission payments
• keep your Gangsheet Builder projects
• answer questions and sort out problems with an order
• keep our website, accounts and builder secure, and prevent spam and fraud
• send marketing emails (see "Marketing emails")
• improve our products, website and service
• meet our legal obligations.

Payments and checkout

We accept credit and debit cards, Afterpay, Apple Pay, Google Pay, bank transfer, and account terms for eligible customers.

• Cards, Apple Pay and Google Pay: you enter your payment details into Stripe's secure payment form during checkout. Your full card number and security code go to Stripe, not to Printees. Our store receives a payment token, the card type and the last 4 digits, and the payment result.
• Afterpay: you pay through Afterpay, under its own terms and privacy policy. We receive the payment result and reference details.
• Bank transfer: we see the payer name and reference shown on our bank statement.
• Account terms: we invoice you, and keep the invoice and payment records.

Printees doesn't store full card numbers or card security codes. Please don't send card details by email or message.

Our DecoNetwork back office also has a feature that lets staff enter a card payment for a customer. We haven't used it. If we start using it, we'll update this policy first to explain how card details are handled.

DecoNetwork states that its platform is PCI DSS Level 1 compliant and doesn't store credit card details.

Delivery and pickup

We deliver with NZ Post, NZ Couriers, Post Haste and, when needed, other courier services. We give the courier the information needed to deliver your order and keep you updated: your name, delivery address, phone number or email, and parcel details. Couriers handle this information under their own privacy policies.

If you choose pickup, we use your name and contact details to let you know your order is ready and to hand it to the right person.

Marketing emails

We may send you promotional emails about our products, offers and news where the Unsolicited Electronic Messages Act 2007 allows it. That means when you've agreed to receive them, or when you're a customer and can reasonably expect to hear from us about related products.

Every promotional email will identify Printees and tell you how to opt out. You can opt out at any time by replying to the email or by emailing team@printees.co.nz. We'll stop within 5 working days.

Order confirmations, delivery updates, quotes, invoices and account or security emails aren't marketing. We'll still send them when they're needed for your order or account.

When Save & Email My Gangsheet launches, an email address given only to save a gangsheet won't be added to our marketing lists.

Webstores

We run DecoNetwork webstores for schools, kura, clubs, teams and businesses.

• If you order through a webstore: the store owner can see the orders placed through their store, including your name, what you ordered, the order status and totals. Depending on how the store is set up, they may also see the contact and delivery details for your order, and get an email when an order is placed. Store owners use this to run their store, for example to hand out orders.
• If you run a webstore: we use your details to set up and support your store and to pay your commission. Commission payments may be made through PayPal or paid directly.

Gangsheet Builder — Saved Artwork & Projects

The Gangsheet Builder at build.printees.co.nz lets you lay out DTF and UV DTF artwork on a gangsheet. You can use it without creating an account.

It's separate from your printees.co.nz account. The builder isn't signed into your DecoNetwork customer account, and the two don't share a login.

What we store. Your projects are saved on our server, hosted by DigitalOcean in Sydney, Australia. A project can include your original artwork, print-ready files, the layout, sizes and quantities, and editable text settings such as wording, fonts and colours. Original uploads and print-ready files are stored separately from the project details.

How we use it. We use your uploads to check print quality, prepare print-ready artwork and fulfil your order.

Your browser keeps your access. Your projects are linked to an anonymous identifier stored in a cookie in your browser. If you clear your cookies or browser data, or switch to another browser or device, you may no longer be able to open those projects, and we may be unable to tell which projects are yours.

Ordering. When you order, the builder sends you to the Upload page on printees.co.nz. There you give your name, email and mobile number and choose your turnaround. Your order details and files are then sent to us (see "Upload page orders").

Who can see it. Your artwork isn't made public by the builder. Authorised Printees staff can see the artwork and order information they need for production and support.

Security. We use access controls and secure (HTTPS) connections to protect your artwork.

Save & Email My Gangsheet

This optional feature isn't available to customers yet. We're testing it, and this section explains how it will work when it launches.

• You'll be able to give us an email address so you can open your gangsheets again later. We'll send a six-digit code to check it's yours. You'll need to enter the code before a gangsheet is saved to that email, or before saved gangsheets can be opened.
• After you verify your email, you'll be able to open every gangsheet saved to that address, on any browser or device. Gangsheets you've already ordered open read-only, with an option to edit a copy.
• An email sign-in will normally last 30 days. You'll be able to sign out on the device you're using, or sign out everywhere.
• The codes and confirmation emails are service messages, not marketing. We won't add an email you give only for saving gangsheets to any marketing list.
• Saving to your email isn't the same as creating a printees.co.nz customer account.
• You'll be able to ask us to remove the link between your email and your saved gangsheets, or ask about deleting them, by emailing team@printees.co.nz.
• We may need to keep records of gangsheets you've already ordered for business, accounting, legal or dispute-resolution purposes.

Upload page orders

When you send an order through the Upload page, including orders from the Gangsheet Builder, your files and order details go to temporary Cloudflare storage located in the Oceania region. The order details are emailed to our team through our email provider, Resend. Download links in those emails are private and expire after 14 days. Stored files and order details are deleted automatically 14 days after upload, and unfinished uploads after 7 days. We keep the order details we need in our own order and accounting records.

This temporary upload storage is separate from the Gangsheet Builder's own project and artwork storage, which is on our server in Sydney (see "Gangsheet Builder — Saved Artwork & Projects").

Your artwork

• We use the artwork you send us to provide the design, printing and production services you ask for.
• We may keep your original uploads and production files so we can support your order, answer questions about it and make reorders.
• Artwork in the Gangsheet Builder isn't publicly accessible by default.
• Please don't put unnecessary personal or sensitive information in artwork.
• You can contact us to ask about, or ask us to remove, stored artwork we're able to delete.

This policy doesn't change who owns your artwork or the permissions you give us to use it. Those are covered in our Terms & Conditions.

Cookies and browser storage

Cookies are small files your browser stores for a website. Browser storage (sometimes called local storage) works in a similar way. We use them to keep you signed in, run your cart and checkout, protect forms from spam, and keep your gangsheet projects. We don't use advertising or analytics tracking cookies.

On printees.co.nz

What	Set by	What it's for
Session and sign-in cookies, including c_rt_ppr	DecoNetwork	Signing you in, keeping your session and cart working, and keeping the site running smoothly. Essential.
__stripe_mid	Stripe	Fraud prevention for card payments.
_grecaptcha and Google reCAPTCHA cookies	Google	Protecting sign-in, sign-up and cart forms from spam and bots.
cc-cartroutes, cc-cartbridge (browser storage)	Printees	Remembering your cart's product links and display details.

On the Gangsheet Builder

Name	Type	What it's for
gsb_owner	Cookie	An anonymous, signed identifier that links your browser to the gangsheets you've made. Essential. Lasts about 13 months (400 days).
gsb_admin	Cookie	Staff sign-in only. Not set for customers. Lasts 12 hours.
gsb:doc:…	Browser storage	A copy of unsaved changes, so they can be recovered if your browser closes. Kept until saved or cleared.
gsb:last	Browser storage	Reopens the gangsheet you last worked on.
gsb:ui	Browser storage	Your workspace preferences, such as background and snapping.
gsb:welcomed, gsb:autosave-noted	Browser storage	Remember that you've seen the welcome and autosave notices.
gsb:text:…	Browser storage	Text settings saved by an older version of the builder, read when an older gangsheet opens.

Browser storage stays until you clear it, unless noted.

When Save & Email My Gangsheet launches, the builder will also use a sign-in cookie, __Host-gsb_email. It holds a random token (we keep only a scrambled copy, called a hash) and lasts 30 days from when you verify; it isn't extended by use.

Your choices

You can block or delete cookies in your browser settings. If you block essential cookies, sign-in, the cart, checkout and the Gangsheet Builder may not work. Clearing cookies can also stop you opening your gangsheet projects.

Who we share information with

We don't sell personal information. We share it only as described here.

Who	What they do	Where information may be held
DecoNetwork	Runs our online store: accounts, the Online Designer, cart, checkout, orders and webstores.	United States
DigitalOcean	Hosts the Gangsheet Builder, its database and stored artwork.	Australia (Sydney)
Cloudflare	Temporarily stores Upload page files and order details (deleted after 14 days), and delivers our website's images and scripts.	Upload storage: Oceania region. Website delivery: Cloudflare's global network
Resend	Sends our order notification emails and, once Save & Email launches, the builder's verification emails.	United States
Google Workspace	Our business email (team@printees.co.nz). Google also provides reCAPTCHA and website fonts.	Google's data centres, including overseas
Stripe (cards, Apple Pay, Google Pay) and Afterpay	Process payments under their own terms and privacy policies.	Their own systems, which may be overseas
NZ Post, NZ Couriers, Post Haste and other couriers	Deliver orders.	New Zealand
Webstore owners	Run the store you ordered from (see "Webstores").	With the store owner

We may also share information:

• with our professional advisers, such as our accountant
• where the law requires or allows it, for example to comply with a court order, or to prevent a serious threat to someone's health or safety
• to deal with a claim that artwork infringes someone else's rights, where the Privacy Act allows this
• with a buyer or successor if our business is sold or restructured. We'll let you know where required.

Storing information overseas

Several of the services we use store or process information outside New Zealand:

• DecoNetwork's servers are in the United States.
• The Gangsheet Builder is hosted in Australia.
• Resend stores email records in the United States.
• Upload page files are stored by Cloudflare in the Oceania region; Cloudflare delivers our website from data centres around the world.
• Google Workspace uses data centres around the world.

DecoNetwork, DigitalOcean, Cloudflare, Resend and Google Workspace hold information on our behalf to provide their service, and we remain responsible for it under New Zealand law. Payment providers and Google reCAPTCHA also use information under their own privacy policies. Overseas laws may give different protections from New Zealand law.

When information goes to an overseas organisation for its own use, we only share it as the Privacy Act allows.

How we protect your information

• Our website, checkout, Upload page and Gangsheet Builder use secure HTTPS connections.
• Upload page download links are private and expire.
• We limit access to staff who need it for their work. Staff sign-ins to the Gangsheet Builder expire after 12 hours, and staff access to print files and originals is logged.
• Our servers keep technical logs, such as IP addresses and the pages requested, for security and troubleshooting.
• We consider security when choosing providers.

No system is completely secure. If a privacy breach has caused, or is likely to cause, serious harm, we'll tell the people affected and the Privacy Commissioner as soon as practicable.

How long we keep information

We keep personal information only as long as we need it for the purposes in this policy, or as the law requires.

• Business and accounting records (orders, invoices, payments): at least 7 years, as New Zealand tax and company law requires. This doesn't mean we keep all artwork, unused designs or website information for 7 years.
• Upload page files and order details in Cloudflare storage: deleted automatically 14 days after upload (see "Upload page orders").
• Email records at Resend: generally kept by Resend for about 30 days, under its terms.
• Save & Email security records (once that feature launches): verification code requests are deleted after 24 hours, ended sign-in sessions 30 days after they end, and daily email counts after 90 days. These clean-ups are built into the builder and run automatically. Your email address stays linked to your saved gangsheets until you ask us to remove it.

Gangsheet Builder projects

Automatic deletion of gangsheet projects and artwork isn't switched on yet. For now, they aren't deleted on a fixed schedule. You can ask us to remove them, but we may need to keep some records (see above).

We plan to introduce these retention periods:

Information	Planned period
Gangsheet drafts not saved to an email	6 months after the last edit
Gangsheets saved to a verified email (once that feature launches)	At least 12 months after the last change
Uploads that were never used	30 days
Production files and the original artwork needed for ordered gangsheets	3 years, subject to legal and business needs

We'll update this policy when these periods start.

Your rights

You can ask us to:

• tell you whether we hold personal information about you, and give you a copy
• correct information that's wrong
• tell you how long we keep your information, or delete information we no longer need
• help you find or recover a gangsheet project.

Email team@printees.co.nz. We may need to confirm your identity first. We'll respond as soon as we can, and within 20 working days unless the law allows more time. If we need longer, we'll tell you why.

Some information can't be deleted straight away, for example business and accounting records we have to keep by law.

Raising a concern

If you're unhappy with how we've handled your information, please contact our privacy officer first so we can try to put it right. If you're still not satisfied, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.

Children and young people

We take extra care with information about children and young people under 16.

We make merchandise for schools, kura, sports clubs, teams and community groups. These orders can include students' or members' names, sizes, numbers or personalisation. That information usually comes from the school, organisation, a parent or a caregiver. We use it only to make, deliver and support the order.

If you provide details about children or members, please make sure they, or their parents or caregivers, know you're sharing them with us and can read this policy.

There's no minimum age to browse our website. If you're under 16, we recommend asking a parent or caregiver to help you order.

Other websites

Our website links to other sites, such as Facebook, Instagram, Messenger, Google Maps and NZ Post. Their own privacy policies apply when you use them. If you message us on Facebook, Instagram or Messenger, Meta also handles those messages under its own policy.

Changes to this policy

We may update this policy from time to time, for example when Save & Email My Gangsheet launches or new retention periods start. We'll change the "Last updated" date at the top. If a change is significant, we'll also put a notice on our website and, where practical, tell affected customers.

Contact us

Email team@printees.co.nz, or write to the Privacy Officer, Printees Ltd, 12 Tamapahore Boulevard, Papamoa 3118, New Zealand.