Privacy notice

CraveIt is operated by Arbour & Anchor Limited, a New Zealand company trading as CraveIt ("we", "us"). We are responsible for the personal information described here and handle it under the Privacy Act 2020. Use of the service is also governed by our Terms.

What we collect and why

Site owners. We collect your name, email, sign-in details, business details, site page content and use of the service to create and run your account, provide the service, process purchases, prevent fraud and send service messages. Session summaries contain counts and totals, not buyer contact details. We never sell personal information.

Buyers. If a buyer opts in to pickup texts, their mobile number is used only to send texts for that order. It is never used for marketing and is never shown to site staff, pickup screens or platform administrators. It is stored securely and permanently deleted when the trading session closes, within 6 hours. A buyer can remove their number at any time or reply STOP.

Order details, ticket codes and status are kept in a Premium owner's account for 1 month and cleared when a Free session closes. A ticket status page opens only for someone holding its code. If a buyer pays through the service, the payment is handled by a third-party payment provider under its own privacy terms.

Enquiries. If you contact us, we store your name, email and message so we can reply.

Why we process information

• Contract — to create accounts, provide the service and process purchases.
• Consent — for optional pickup texts and marketing, which can be withdrawn.
• Legitimate interests — to secure, operate and improve the service and prevent fraud or abuse.
• Legal obligations — where records must be kept for tax or other legal requirements.

Who we share it with

We share personal information only with suppliers that help us run the service — payments, hosting, text messages, email, AI and analytics — and with professional advisers or public authorities where required. We may change suppliers at any time. Payment details are handled by our payments provider, and we never receive or store full card numbers. Some suppliers process information outside New Zealand; where they do, we use the safeguards required by the Privacy Act 2020 so it is protected comparably.

How we protect it

We use safeguards suited to the information, including encryption in transit and at rest, access controls and role-based permissions. Buyer phone numbers are additionally hidden from site staff, pickup screens and platform administrators.

How long we keep it

• Buyer mobile numbers: until the session closes.
• Free orders: until the session closes.
• Free session reports: the latest session only.
• Premium order detail: 1 month after the session closes.
• Premium session reports and AI summaries: 12 months.
• Text-message and credit records, admin and CRM activity: 12 months.
• AI usage logs: 3 months.
• Page visits: about 3 months, then kept only as anonymous monthly counts.
• Contact messages: until handled, and no longer than 12 months.
• Account and business details: while the account is open, and as required by law.

Cookies and website visits

We use essential cookies to keep you signed in and the service working, and record anonymous page visits to understand use. We do not use advertising or cross-site tracking cookies.

Your rights

Under the Privacy Act 2020 you can ask to access or correct personal information we hold about you. You can also ask us to delete information or withdraw consent for optional processing. You can complain to the Office of the Privacy Commissioner. Email hello@craveit.nz; we aim to reply within one month.