Privacy policy

Privacy Policy

Last updated: 30 August 2026  |  VortX-AI Automations NZ Limited trading as VortX TapNGo

This policy explains how VortX TapNGo collects, uses, stores and discloses personal information through its Shopify store, orders, support and related business activities.

1. Who we are and scope

VortX-AI Automations NZ Limited, trading as VortX TapNGo ('VortX TapNGo', 'we', 'us' or 'our'), operates vortxtapngo.com and the related store, products, order, fulfilment and support services.

This Privacy Policy applies when you visit the website, create or use an account, subscribe for updates, place or receive an order, supply configuration information, request support or a return, or otherwise communicate with us.

We handle personal information in accordance with the New Zealand Privacy Act 2020 and its information privacy principles, including the indirect-collection notification requirements that apply from 1 May 2026.

2. Shopify and our respective roles

Our online store is hosted by Shopify. Shopify provides the website, checkout, account, security, payment integration, order, analytics and customer-privacy infrastructure used by the store. Information submitted through the website is processed by us, Shopify and relevant service providers for the purposes described in this policy.

Shopify also explains its independent processing in the Shopify Consumer Privacy Policy and provides a Shopify Privacy Portal for applicable privacy choices and requests.

3. Personal information we collect

The information collected depends on how you interact with us and may include:

  • identity and contact details, including name, business name, billing and delivery address, email address and phone number;
  • order and configuration details, including products, quantities, supplied Google review destination, business profile information, artwork, branding instructions, proof approvals and delivery preferences;
  • transaction and payment information, including order value, currency, payment status, payment method, limited payment metadata, refunds, chargebacks and fraud-screening results. Complete card details are generally processed by Shopify and the payment provider rather than stored by us;
  • account information, including account identifier, preferences, saved addresses and authentication information managed through Shopify;
  • communications, including contact-form submissions, emails, support requests, return requests, complaints, call notes and any photographs or files you provide;
  • marketing information, including newsletter subscription, consent, unsubscribe status and communication preferences;
  • device and usage information collected through Shopify, including IP address, browser and device type, cookie identifiers, pages viewed, interactions, cart activity, referral information, approximate location, and dates and times of access;
  • delivery and fulfilment information from carriers, such as tracking events, delivery status and address issues; and
  • security and compliance information reasonably needed to prevent fraud, investigate misuse, enforce our terms or meet legal obligations.

4. Where personal information comes from

We may collect personal information:

  • directly from you when you browse, order, create an account, subscribe, supply a review destination or artwork, contact us, or request support or a return;
  • automatically through Shopify, cookies and similar store technologies when you use the website;
  • from Shopify, payment providers, fraud-prevention services, carriers and other providers involved in an order or request;
  • from another person, such as a colleague who places an order, a person who gives us a recipient's details, or an authorised representative; and
  • from a public source where reasonably necessary to verify the business or review destination you asked us to configure, such as a public Google Business Profile.

5. Indirect collection and notification

If we collect personal information about someone from another person or a public source, we will take reasonable steps to make the individual aware of the collection and the matters required by Information Privacy Principle 3A, unless an exception applies or the individual has already been appropriately informed.

If you provide another person's personal information, including a recipient, staff member or business contact, you confirm that you are authorised to provide it and will direct them to this Privacy Policy where appropriate.

6. Why we collect and use personal information

We collect and use personal information only where reasonably necessary for a lawful function or activity, including to:

  • operate, secure and improve the website and Shopify store;
  • create accounts, process payments, accept and fulfil orders, configure products, arrange delivery and maintain order records;
  • verify a supplied destination or artwork, provide proofs, troubleshoot NFC or destination issues, and provide customer support;
  • process cancellations, returns, refunds, repairs, replacements, complaints and disputes;
  • send transactional messages about accounts, orders, delivery, security, support and policy changes;
  • send marketing messages where we have the consent or other lawful basis required, and record or honour an unsubscribe request;
  • understand store performance and customer interactions using Shopify's built-in analytics and commerce features;
  • detect, investigate and prevent fraud, abuse, security incidents and unlawful activity;
  • comply with tax, accounting, company, consumer, privacy and other legal obligations;
  • establish, exercise or defend legal claims and enforce our agreements; and
  • manage a genuine financing, sale, merger, restructuring or transfer of all or part of the business, subject to appropriate safeguards.

7. Whether you must provide information

You may choose not to provide personal information. However, some information is required to process payment, configure a product, deliver an order, create an account, investigate a fault, provide a refund, meet legal duties or respond to a request. If it is not provided, we may be unable to complete that activity.

Optional fields, such as a phone number marked optional or a newsletter subscription, can be left blank without preventing unrelated use of the store.

8. Cookies and Shopify analytics

Shopify uses cookies and similar technologies to operate checkout and account functions, remember preferences, protect the store, measure traffic and performance, and provide enabled commerce and enhanced services. Some technologies are essential; others depend on store settings, your choices and applicable law.

At the date of this policy, we do not use a separate Google Analytics property, Meta Pixel, Klaviyo, Mailchimp or another external advertising or email-marketing platform on the store. We do use Shopify's platform, which includes built-in analytics, security, customer privacy and potentially Shopify Network Intelligence or Enhanced Services where enabled in our Shopify settings.

You can manage cookies through available store controls and your browser. Blocking some cookies may stop checkout, account or preference features from working correctly. We will update this policy if we add a separate analytics, advertising or marketing tool.

9. Marketing communications

We send commercial electronic messages only where permitted by law. Marketing messages will identify the sender and include a clear, functional and free way to unsubscribe. We will action unsubscribe requests as required.

Unsubscribing from marketing does not stop transactional messages that are reasonably necessary for an order, account, delivery, return, support request, security matter or legal notice.

10. When we disclose personal information

We may disclose personal information only for a purpose connected with why it was collected, where you authorise it, or where another legal basis applies. Recipients may include:

  • Shopify and its related companies and infrastructure providers;
  • payment processors, banks and fraud-prevention providers;
  • carriers and fulfilment providers that need delivery details;
  • technology, hosting, communications, backup, security and professional service providers acting for us;
  • accountants, insurers, lawyers, auditors and other professional advisers;
  • government agencies, regulators, courts, tribunals, law-enforcement bodies or other parties where disclosure is required or authorised by law;
  • a buyer, investor, lender or adviser involved in a genuine proposed or completed business transaction, subject to confidentiality and appropriate safeguards; and
  • another person where you direct or authorise us to disclose the information.

We do not sell personal information for money. Shopify may independently process customer data for enabled services as explained in its privacy terms and the store's Shopify privacy settings.

11. Overseas processing and disclosure

Shopify and some service providers may store or process personal information outside New Zealand, including through entities and infrastructure in other countries. Overseas privacy laws may differ from New Zealand law.

Where Information Privacy Principle 12 applies to an overseas disclosure, we will use a permitted basis, such as a reasonable belief that the recipient is subject to the New Zealand Privacy Act, is required to provide comparable safeguards, or is covered by appropriate contractual safeguards. If express authorisation is required because comparable protection may not apply, we will provide the information required by law before relying on that authorisation.

12. Storage, security and privacy breaches

We use safeguards that are reasonable in the circumstances to protect personal information against loss, unauthorised access, use, modification or disclosure. Measures may include access controls, account security, reputable service providers, backups, staff or contractor confidentiality and secure payment processing through Shopify and payment providers.

No system or transmission method is completely secure. Keep account credentials confidential and avoid sending sensitive information through an insecure channel. If a privacy breach occurs, we will investigate and notify affected individuals and the Office of the Privacy Commissioner where required by law.

13. Retention

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including fulfilment, support, warranty and return records, account administration, fraud prevention, dispute resolution, and tax, accounting and legal requirements.

Retention periods vary by record type and legal need. When information is no longer required, we take reasonable steps to delete it, anonymise it or place it beyond use, subject to secure backup cycles and lawful record-keeping obligations.

14. Accuracy

We take reasonable steps before using or disclosing personal information to ensure it is accurate, up to date, complete, relevant and not misleading. Please tell us promptly if your contact, delivery, review destination or other information changes.

15. Access and correction

You may ask whether we hold personal information about you, request access to it and ask us to correct it. We may need to verify your identity and may refuse or limit a request only where the Privacy Act 2020 permits.

Send requests to sales@vortxautomations.com with enough detail to identify the relevant information. If we do not make a requested correction, you may ask us to attach a statement of the correction sought where the law provides.

Depending on where you are located and which Shopify services you use, additional rights or choices may apply. You may also use the Shopify Privacy Portal for data processed independently by Shopify.

16. Complaints

If you have a privacy concern, contact our Privacy Officer first. We will acknowledge and investigate the concern and respond within a reasonable time.

If the concern is not resolved, you may complain to the New Zealand Office of the Privacy Commissioner. Information about the complaint process is available at privacy.org.nz.

17. Children

The store is designed for business customers and is not directed to children. We do not knowingly collect personal information from a child who lacks capacity to place an order. If you believe a child has provided personal information without appropriate authority, contact us so we can review and take appropriate action.

18. Third-party websites

The website and TapNGo destinations may link to third-party services such as Google. Those parties control their own privacy practices. Review their policies before providing personal information to them. A link does not make us responsible for the third party's independent handling of information.

19. Changes to this policy

We may update this policy to reflect changes in law, Shopify settings, products, providers or business practices. The current version will be posted with a revised date. Where a change is material or notice is required, we will take reasonable steps to provide appropriate notice.

20. Contact and Privacy Officer

The Privacy Officer for VortX TapNGo is responsible for privacy questions, access and correction requests, and complaints.

Contact the Privacy Officer at:

Business: VortX-AI Automations NZ Limited trading as VortX TapNGo

Email: sales@vortxautomations.com

Website: vortxtapngo.com