OnShout Customer
Privacy Policy

Last updated: [October 1, 2025]

Plain-English Summary

At OnShout, we respect your privacy. Here’s the quick version:

You must be 16 or older to use OnShout.
We collect your name, email, birthday, wishlist details, contributions, and who you follow.
Your birthday is used to:
- Check that you meet the 16+ rule
- (Optional) Send you birthday reminders or notifications – you can turn this off anytime
Payments go through Stripe – we don’t keep your full card details.
Marketing emails come via Hubspot. If you open them, Hubspot tracks that (you can unsubscribe).
Analytics & Ads – we use Google Analytics (GA4) and Google Ads Pixel to improve OnShout and deliver ads.
Data location – mostly stored in Australia (AWS Sydney) and may also flow through trusted providers like Stripe, Google, Hubspot, and Auth0 overseas.
We don’t sell your data.
Your rights – you can ask to see your info, fix it, or delete it (except where we must keep it for legal reasons).

Questions? Email us at [email protected].

Full Privacy Policy

1. Introduction

OnShout Limited (NZBN: [insert], “OnShout”, “we”, “us” or “our”) is a New Zealand company that operates the OnShout platform. We are committed to protecting your privacy in accordance with the Privacy Act 2020 (NZ) and other applicable privacy laws.

This Privacy Policy explains how we collect, use, disclose, store, and protect your personal information when you use our services (the “Services”).

By using the Services, you consent to this Policy. If you do not agree, you should not use the Services.

You may not use the Services if you are under 16 years old.

For privacy-related queries, contact us at: [email protected]

2. Personal Information We Collect

We may collect:

Account and Profile Information – Name, email, username, password (via Auth0), date of birth, and optional profile details (photo, bio).
Wishlist & Contribution Data – Wishlist items, contribution amounts, contributor messages.
Social/Interaction Data – Followers/following, newsfeed activity.
Payment Data – Contributions are processed via Stripe. We do not store card numbers. Stripe transfers funds to OnShout, and we forward them to wishlist owners.
Device & Usage Data – IP address, browser/device info, app usage, via cookies, Google Analytics (GA4), and Google Ads Pixel tracking.
Marketing Data – Preferences, interactions with emails (processed by Hubspot).
Communications – Messages or support queries.

We do not collect sensitive information intentionally.

3. How We Collect It

Directly: When you sign up, provide your date of birth, create wishlists, contribute, follow others, or claim gifts.
Automatically: Via cookies, GA4, and Google Ads Pixel tracking.
Third Parties:
- Auth0 (authentication)
- Stripe (payments)
- Hubspot (marketing + tracking email engagement)
- AWS Sydney (hosting)
- Google (analytics + advertising)
Other Users: Information shared by others in wishlists or contributions.

4. How We Use Your Information

We use personal information for purposes reasonably necessary for the Services:

Verify your age eligibility (16+) using your date of birth
Optional birthday reminders – if you provide your date of birth, you may choose to receive notifications or reminders related to your birthday (e.g., gift ideas or alerts for wishlist contributions). You can opt out of birthday reminders at any time.
Manage accounts, wishlists, and contributions
Process payments and transfer funds
Operate newsfeed and social features
Send service messages (e.g., confirmations, alerts)
Marketing communications via Hubspot (you may opt out)
Usage analysis via Google Analytics
Advertising and retargeting via Google Ads Pixel
Compliance with legal obligations (e.g., tax, fraud prevention)

We will not use your information for unrelated purposes without consent.

5. Disclosures

We may disclose personal information to:

Service providers:
- Auth0 (identity & authentication)
- Stripe (payments)
- Hubspot (marketing)
- AWS Sydney (hosting)
- Google (Analytics + Ads tracking)
Other users: Limited data shown in wishlists, contributions, or newsfeeds.
Regulators/legal authorities: If required by law.
Business transactions: e.g., merger or acquisition.

We do not sell personal information.

6. International Transfers

Personal data may be stored or processed outside NZ, including Australia (AWS) and other jurisdictions used by Auth0, Stripe, Hubspot, and Google. We ensure such transfers comply with the Privacy Act 2020, using providers that meet comparable safeguards.

7. Storage and Retention

We use industry-standard security measures (encryption, access controls, audits).

Retention:

Account data (including date of birth) – kept while active and deleted within 12 months of closure (except where needed for compliance).
Transaction/payment data – kept for 7 years (required by NZ tax/accounting law).
Birthday reminders – only retained and used if you opt in, and can be turned off at any time.
Marketing preferences – kept until you opt out.

After expiry, data is anonymised or securely deleted.

8. Your Rights

Under the Privacy Act 2020, you may:

Request access to your personal information
Request corrections
Withdraw consent (e.g., marketing emails, birthday reminders)
Request deletion (subject to legal limits)

9. Cookies & Tracking

We use cookies, Google Analytics (GA4), and Google Ads Pixel tracking to:

Measure usage
Improve performance
Deliver advertising and retargeting

You can manage cookies through your browser or opt out of personalised Google Ads at: https://myadcenter.google.com/.

10. Complaints

If you believe your privacy rights have been breached, please contact us first. If unresolved, you may complain to the Office of the Privacy Commissioner (NZ):

www.privacy.org.nz

[email protected]

0800 803 909

11. Updates

We may update this Policy. Significant changes will be notified via app/email.

Shout for Smarter Gifting.

OnShout Customer Privacy Policy