Free shipping on orders of $75 or more — New Zealand wide!
This Privacy Policy explains how Bookworms NZ Limited ("Bookworms", "we", "us") collects, uses, shares and protects your personal information when you visit or buy from bookworms.co.nz (the "Site"). We follow the New Zealand Privacy Act 2020 and, for customers in Australia, the Australian Privacy Principles to the extent they apply to us.
Device Information. When you visit the Site, we and our service providers automatically collect information about your device and visit, including your browser, IP address, time zone, the pages and books you view, search terms you use, the website that referred you, and how you interact with the Site. We collect this using:
Because Google and Meta collect some of this information directly from your browser, this is information about you that we obtain from a third party as well as from you.
Order Information. When you buy, or try to buy, from the Site, we collect your name, billing and delivery addresses, email address, phone number and payment details. Payments are processed by our payment providers, such as Shopify Payments (including Shop Pay), PayPal and Afterpay. We do not see or store your full card number.
Watch list. If you sign up to our watch list, we collect your email address and the titles, authors, genres or keywords you ask us to watch for, and whether you agreed to receive marketing. If you sign up without an account, a Cloudflare Turnstile check helps confirm you are a person and not a bot.
Chat and messages. If you chat with Trish, our AI bookseller, or use our Live chat, or email us, we receive what you write to us.
We do not buy marketing lists or collect information about you from data brokers.
"Personal Information" in this policy means all of the above.
We use Order Information to:
If you agree to receive marketing from us, we may use your contact details and order history to send you news about books and offers by email, or by text message if we offer it. You can unsubscribe at any time using the link or instructions in every marketing message.
We use Device Information to screen for risk and fraud (in particular your IP address), to understand how customers use the Site so we can improve it, and to measure how well our marketing works.
We, Google and Meta may also use information about your visit to show our books to people who have visited the Site. These ads may be personalised to the pages and books you viewed, and appear on Google services and on Facebook and Instagram. See "Advertising and your choices" below to control this.
We use watch list information to email you a daily summary when books matching your watches are listed and to let you manage or stop your watches. If you agreed to receive marketing when you signed up, we may also send you marketing emails.
Trish is an AI assistant, not a person. When you chat with her, the text of your messages is sent to OpenRouter, which passes it to a third-party large language model provider (such as Google) to generate a reply. We do not store your chat on our systems; the conversation is kept only in your browser for the current visit. Please do not type payment details, passwords or other sensitive information into the chat. Trish cannot look up orders. For questions about an order, please use Live chat or email us.
Live chat is answered by our team, not by AI, through Shopify Inbox. Shopify stores Live chat messages and may use them to improve its own services. If you sign in to chat, your name and email address are shared with us. If you give us an email address so we can reply outside opening hours, we use it to follow up on that conversation. We only send you marketing if you have separately agreed to receive it. We keep Live chat transcripts so we can handle your enquiry and any follow-up, for as long as we need them, and you can ask us to delete them. To ask for access to, correction of, or deletion of your chat records, email us using the details below.
We share Personal Information with the service providers who help us run the store, for the purposes above. Some of them, as described below, also use it for their own purposes under their own privacy policies:
We may also share Personal Information to comply with the law, to respond to a lawful request such as a search warrant, or to protect our rights.
Some of these providers store or process information outside New Zealand, including in Australia, Canada, the United States, Japan and Europe, and in other countries where they operate. Our watch list database is kept on our own server in New Zealand. We choose providers that protect personal information to a standard comparable to New Zealand law.
You can control how Google and Meta use your information:
If our cookie banner is shown to you, you can use it to accept or decline analytics and marketing cookies. You can also block or delete cookies in your browser settings, although parts of the Site, such as the cart, may then not work.
Every marketing message we send has a way to unsubscribe, and you can also email us to stop them.
We do not change our data collection when your browser sends a Do Not Track signal.
We only email watch list alerts after you confirm your address from the link we send you. Every watch list email has an unsubscribe link, and a link to stop a single watch. If you unsubscribe, we delete your watches and keep only your email address and the date you unsubscribed, so we never email you watch alerts again. If you never confirm your sign-up, we delete it automatically about 30 days after the confirmation link expires.
We keep Order Information for as long as we need it for our business and tax records (New Zealand law generally requires seven years). We keep your marketing preferences until you change them. We keep watch list information until you unsubscribe or ask us to delete it. We do not keep chats with Trish. We keep Live chat transcripts for as long as we need them to handle your enquiry and any follow-up, and you can ask us to delete them.
You can ask us for access to the personal information we hold about you and ask us to correct it. You can also ask us to delete information we no longer need to keep, including your watch list details. We will respond within 20 working days. To make a request, contact us using the details below. We may need to confirm your identity first.
If you are not satisfied with our response, you can complain to:
We may update this policy from time to time to reflect changes to our practices or for legal or regulatory reasons. The current version is always on this page. This version took effect on 3 October 2026.
For questions about your privacy, to make a request, or to make a complaint, email us at info@bookworms.co.nz or write to:
Privacy Officer
Bookworms NZ Limited
98 Havill Street, Takaro
Palmerston North 4410
New Zealand