Privacy Policy
Magic Tyres Limited (Magic Tyres, we) is committed to protecting personal information and complying with the Privacy Act 2020 (the Act) and any applicable Codes of Practice. This Privacy Policy explains how we collect, use, disclose, store, and protect your personal information.
“Personal information” means information about an identifiable individual. This policy does not limit or exclude any of your statutory rights under the Privacy Act 2020.
1Purpose and Scope
This Privacy Policy explains how we collect, use, disclose, store and protect personal information about:
- Customers and members of the public;
- Individuals and businesses who interact with us (e.g., suppliers, contractors);
- Employees, candidates and prospective employees.
This Privacy Policy should be read alongside our CCTV Policy and any other relevant company policy.
2How We Collect Your Personal Information
We collect personal information from:
- You directly: in person, by phone or email, via our website, forms, or when you use our services and facilities;
- Premises and systems: your interactions with our premises, systems, and services (e.g., car-parking and CCTV footage);
- Authorised third parties: third parties you authorise to share information with us or where the information is publicly available;
- Service providers: partners and providers that support our operations (e.g., IT, payment, analytics, recruitment);
- Employment screening: in an employment context, referees and background screening providers (where lawful and applicable), and any information relating to a person’s right to work.
Where reasonable and practical, we will always collect personal information directly from you.
3Information We Collect
Depending on your relationship with us, the personal information we may collect includes:
- Identity and contact information: name, date of birth, address, email address, phone number;
- Enquiries and service details: information provided when you contact us or use our services and facilities (including enquiries, quotes, complaints, and forms);
- Billing and transactions: payment and transaction details, credit references where relevant;
- Communications: records of correspondence with us (including call or email records);
- CCTV footage: recorded footage at our premises (see our CCTV Policy);
- Public information: publicly available information and data provided by authorised third parties; and
- For employees and candidates: the additional categories set out in Clause 8.
4How We Use Your Personal Information
We may use personal information to:
We will only use personal information for the purposes for which it was collected or as otherwise authorised by you or the Privacy Act 2020.
5Disclosing Your Personal Information
We may disclose personal information to:
- Service providers and suppliers: partners supporting our operations, facilities, security, and IT systems (including web hosting and cloud data centres);
- Payment processors: financial institutions and credit reference agencies (where applicable);
- Professional advisers: auditors, accountants, legal counsel, and insurers;
- Law enforcement: police and regulatory authorities authorised by law to request information;
- Aggregated analytics: third parties where information is provided in de-identified or aggregated form; and
- Authorised parties: any other individual or entity authorised by you.
6Protecting Your Personal Information
We take reasonable steps to protect personal information from loss, unauthorised access, use, modification, disclosure, or other misuse.
Safeguards include physical security controls at our Whangārei workshop, role-based access limits, strict confidentiality obligations, and technical measures including encryption, firewall security, and active network monitoring.
We retain personal information only for as long as it is needed for the purposes for which it was collected or as required by law, after which it is securely deleted or permanently destroyed.
7Accessing and Correcting Your Personal Information
Subject to the grounds for refusal set out in the Privacy Act 2020, you have the right to request access to the personal information we hold about you and to request correction of that information.
- We may need to verify your identity before acting on your request.
- If we do not agree to a requested correction, we will take reasonable steps to attach a statement of correction to the information.
- We may charge reasonable costs of providing access where permitted under the Act.
To request access or correction, please contact us using the details in Clause 13.
8Employees and Candidates
We may collect and use the following information for recruitment and employment management:
- Application information, CVs, qualifications, employment history, and references;
- Right-to-work documents (passport information, birth certificates, valid driver’s licences);
- Pre-employment checks (where applicable);
- Interview notes, assessment results, and professional memberships;
- Contact details and emergency contact contacts;
- Payroll information (bank details, IRD number, KiwiSaver), time records, remuneration, leave, and entitlements;
- Copies of driver’s licence (mandatory if driving is part of the job description);
- Performance, training, conduct, and investigation records; health and safety information (including medical disclosures you choose to provide); and
- Security and access logs (including CCTV and building access records).
We collect and use this information to assess suitability for employment, manage the employment relationship, and meet legal obligations relating to Revenue Acts, the Health and Safety at Work Act 2015, and other employment legislation.
9Website and General Business Interactions
We may collect information through our website and general business interactions, including:
- Name, contact and business details provided through online quote forms or communications;
- Payment information processed via secure third-party platforms;
- Device, cookie, and analytics data as described in Clause 10; and
- Details of your enquiries and service interactions with us.
We use this information to identify you, communicate with you, provide requested tyre and rim services, process transactions, understand usage patterns, and improve our workshop operations.
11Consequences of Not Providing Information
If you choose not to provide certain personal information requested by us, we may be unable to provide quotes, supply specific tyre products or fitting services, process transactions, or evaluate employment applications.
12Changes to This Policy
We may update this Privacy Policy from time to time by publishing a revised version on our website. Changes apply from the date the updated policy is published online.
13How to Contact Us & Privacy Complaints
If you have questions about this Privacy Policy, wish to request access to or correction of your personal information, or wish to raise a privacy-related concern, please reach out to us:
Statutory Response Guarantee
We will acknowledge and respond to all privacy requests and complaints within the statutory timeframe of 20 working days.
You also have the right to complain to the Office of the Privacy Commissioner at www.privacy.org.nz.
14Policy Review & Governance
Policy Owner: Magic Tyres Limited
Effective Date: August 2026
Review Cycle: This policy is effective from August 2026 and will be reviewed every three years, or earlier if prompted by legislative changes.