Privacy Policy
Look, we're in the business of pouring resin, crafting timber, and making bloody good soap, not selling your personal data to weird internet shady-dealers. We respect your privacy as much as we respect a good, clean resin de-mould. Here's the straight-up lowdown on what information we collect, why we need it, and what happens to it.
What We Collect
We only collect information that we reasonably need to run Entirely Chaotic, respond to you, process your orders, and keep the business running.
Depending on how you use the site, this may include:
When you place an order:
Your name
Your email address
Your delivery address
What you purchased
When the purchase was made
A Stripe payment reference
When you contact us:
Your name
Your email address
The contents of your message
When you submit a custom order or commission request:
Your name
Your email address
The type of piece you're interested in
The idea or requirements you provide to us
If you choose to put additional personal information into a free-text message or commission request, we may receive that information too. Please don't send us anything we don't need to know.
What We Use It For
We use personal information for things like:
Processing and fulfilling orders
Arranging delivery
Responding to enquiries and commission requests
Sending order confirmations and updates
Sending tracking information when available
Managing our business records
Keeping the website and its systems working properly
Dealing with issues, disputes, fraud, security, or legal obligations
We don't sell, rent, or trade your personal information.
We're also not building some giant customer profile on you. We keep individual order and enquiry records where we reasonably need them, but we don't maintain customer accounts or automatically combine separate orders into a customer profile.
Payments
Payments are handled through Stripe.
We don't store your full card number, CVC, expiry date, or other full payment card details on our own systems. Stripe handles the actual payment information and tells our website whether a payment was successfully completed or declined.
We may retain a Stripe payment reference as part of the corresponding order record.
Stripe has its own privacy and security practices, which apply to information processed directly by Stripe.
Emails
We send transactional emails where they're needed to keep you informed about something you've submitted or purchased.
For example, you may receive an email confirming that we've received your order, an update relating to your order, or tracking information once a tracking number has been added.
These emails contain only the information reasonably needed for that particular update, such as your name, order information, order number, total, or tracking details.
We also send notifications to authorised staff when a new order, contact request, or commission request is received. These notifications do not include the personal details contained in the submission. Staff can access the relevant information through the protected admin area instead.
Website Information
Like pretty much every website on the internet, our systems may automatically receive some technical information when you visit or use the site.
This can include things such as your IP address, browser information, the pages or resources requested, the time of a request, and other basic technical or security information.
We use this information to operate, maintain, troubleshoot, and protect the website and its infrastructure.
We do not currently use Google Analytics, Meta Pixel, advertising trackers, or similar behavioural tracking services on the website.
We may use basic website cookies or session information where necessary for the site to function, such as keeping your basket or maintaining a secure session.
Where Your Information Is Stored
Our website and its supporting systems are hosted using Amazon Web Services (AWS).
Some of the services we use are operated in the United States, including infrastructure located in AWS's US East (N. Virginia) region.
This means that personal information may be processed or stored outside New Zealand.
We use service providers where they are reasonably necessary to operate the website and business, including payment, hosting, email, and infrastructure providers. These providers may process information on our behalf and may have their own privacy policies and obligations.
We take reasonable steps to ensure that personal information is handled appropriately when it is shared with or processed by these providers.
Keeping Your Information Safe
We take reasonable steps to protect the personal information we hold against loss, unauthorised access, misuse, modification, or disclosure.
Access to customer information through the website is restricted to authorised staff accounts. Customer information is not freely accessible through the public website.
Our payment card information isn't stored by us, and information sent through our transactional email systems is protected using appropriate secure email transport.
No website or computer system can ever be guaranteed to be completely secure, but we take reasonable measures for a business of our size and the systems we operate.
How Long We Keep Information
We don't keep personal information forever just because we can.
Order records may be retained for as long as reasonably necessary for business, accounting, audit, legal, dispute, and record-keeping purposes.
Contact and commission submissions may also be retained while they remain reasonably useful to us for dealing with the enquiry and maintaining appropriate business records.
Technical information and system logs may be retained for shorter periods depending on what they are used for and how the relevant system operates.
We may also create temporary copies of business data when carrying out website maintenance or updates. These are normally deleted once they are no longer needed.
Your Rights
You can ask us what personal information we hold about you, and you can ask us to correct information that is inaccurate or incomplete.
You can also contact us with questions about how we collect, use, or disclose your information.
We'll take reasonable steps to deal with privacy requests in accordance with the New Zealand Privacy Act 2020.
Because most of our records relate to completed orders or specific enquiries rather than ongoing customer accounts, some requests may need to be handled manually.
Making a Privacy Request
If you have a privacy question, want to request access to your information, or believe something we hold about you is incorrect, contact Entirely Chaotic through our contact page.
We'll deal with the request and may ask for enough information to confirm who you are before providing or changing personal information.
We don't need a 47-step automated process to do this. If there's something we need to sort out, we'll sort it out.
Changes to This Policy
We may update this Privacy Policy when our website, services, or privacy practices change.
The latest version will always be available on this page.
Last updated: 19 August 2026
