Privacy policy

About this policy

UMAC CARGO NZ LTD (UMAC, we, us) collects and holds personal information to operate our website, sell products and arrange cargo collection and delivery. This policy explains our handling of that information under the New Zealand Privacy Act 2020, as amended. It does not limit your rights under the Act.

Our business address is 18/375 East Tamaki Road, East Tamaki, Auckland, New Zealand.

For privacy questions, requests or complaints, write to us at this address, contact our team or call 0508 862 269 and ask for the person responsible for privacy.

What we collect and why

We collect information reasonably necessary to provide the services you request. Depending on how you use our services, this includes:

• Your name, email address, phone number, account details and saved addresses.
• Pickup and delivery addresses, requested collection dates, NU box numbers, Philippine destinations, delivery instructions, and order and tracking references.
• Products ordered, charges, payment references and payment status.
• Messages, support requests, subscription preferences and communications with our team.
• Technical information used to operate and protect the website, such as session information and security logs.

We use this information to manage accounts, respond to enquiries, arrange pickups and deliveries, process orders and payments, provide service updates, resolve problems, prevent misuse and meet applicable legal obligations. We take reasonable steps to ensure information is accurate and relevant before using or sharing it.

Providing information is generally voluntary. Fields marked or validated as required are necessary for the requested service; without them we may be unable to respond, accept a booking, process payment or deliver an order. If a law requires specific information, we will explain that requirement when collecting it.

Information received from someone else

We usually collect information from you. We may also receive information from a person arranging a shipment on your behalf, or from payment, courier and delivery partners providing updates about your transaction, where the Act permits this.

If we collect your information indirectly, we will take reasonable steps to notify you as soon as reasonably practicable, unless a legal exception applies. The notice will explain the collection, its purpose, intended recipients, the names and addresses of the agencies collecting and holding it, any law authorising or requiring it, and your access and correction rights.

If you give us another person’s details, please make them aware of this policy and ensure you are authorised to provide those details. This does not remove our own notification obligations.

Service providers and sharing

We share relevant information with staff and service providers who need it to perform their work. Depending on the service and integrations enabled, these include:

• ScanShip for pickup allocation, collection and shipment operations.
• GoSweetSpot and the selected courier for dispatch, shipping labels and delivery.
• Our cargo and delivery partners in the Philippines for completing shipments.
• Stripe for online payments. Card details entered on Stripe’s payment page are handled by Stripe; our website stores payment references and status rather than full card details.
• Google Places for address suggestions. When enabled, address searches are sent to Google.
• Zendesk for support and booking or order administration when enabled, and our email providers for sending service messages.
• Website hosting, storage and technical support providers.

We may also disclose information where you authorise it or the law permits or requires it, including to relevant authorities. We limit disclosures to information needed for the permitted purpose.

Information handled overseas

Deliveries to the Philippines require relevant shipment information to be shared with delivery partners there. Technology providers may also handle information outside New Zealand.

Where information privacy principle 12 applies, we will establish a permitted basis before disclosing information overseas, such as reasonable grounds to believe comparable safeguards apply, including through contractual protection. If relying on your authorisation instead, we will first expressly explain that comparable protection may not apply.

Sending information to an agent solely to store or process on our behalf is treated differently from disclosure for that agent’s own purposes. We remain responsible for information handled on our behalf.

Security and retention

We take reasonable safeguards against loss, misuse, and unauthorised access, alteration or disclosure. No online service can guarantee absolute security. Please do not send payment card details or identity documents through our general contact form.

We retain personal information only for as long as needed for lawful purposes, including providing services, resolving disputes and meeting applicable record-keeping obligations. When no longer needed, information should be securely deleted or anonymised, including through appropriate backup retention processes.

If a privacy breach has caused, or is likely to cause, serious harm, we will notify the Privacy Commissioner and affected people as soon as practicable, subject to the Act’s exceptions.

Access and correction

You may ask whether we hold personal information about you, request access to it, or request a correction. We may take reasonable steps to verify your identity. We will make and communicate our decision as soon as reasonably practicable and within 20 working days, unless a lawful extension applies. We will explain any extension or refusal and your complaint rights.

If we do not make a correction, you may request that a statement of the correction sought be attached to the information. Where required, we will take reasonable steps to inform previous recipients of a correction or attached statement.

We do not charge for making a correction request. Any charge for access or attaching a correction statement will be reasonable, permitted by the Act, and explained before we proceed.

Cookies, address search and tracking

The website uses cookies for functions such as signing in and browser storage to remember your shopping cart. Blocking cookies or clearing browser storage may affect these features.

When enabled, Google address search and embedded shipment tracking services connect your browser to those providers, which may receive technical details such as your IP address as well as the search or tracking information you enter. External sites and services have their own privacy notices.

Marketing preferences

If you subscribe to marketing updates, we use your contact details for those updates. You can unsubscribe or contact us to withdraw your subscription. Booking, payment and delivery messages needed to provide your service are separate from marketing.

Complaints and policy changes

Please contact our team if you have a privacy concern. You may also contact the Office of the Privacy Commissioner.

We will update this page when our practices or legal obligations change and show the revised date above. Where required, we will provide additional notice or obtain authorisation before using information for a new purpose.