Privacy policy

SQID (“SQID”, “we”, “us”, or “our”) operates sqid.co.nz, New Zealand’s marketplace for buying and selling second-hand fishing rods, reels and tackle. This policy explains what personal information we collect, why we collect it, how we use and share it, and the choices and rights you have. It applies to everyone who visits the site, creates an account, lists items for sale, or buys through SQID.

We handle personal information in accordance with the Privacy Act 2020 (New Zealand). If you access SQID from outside New Zealand, your information will still be processed as described below, including by service providers located overseas.

1. Information we collect

Account & identity information

When you sign up, we collect your email address, password (stored securely by our authentication provider, never in plain text), legal first and last name, date of birth, and a display name / username. SQID is an adults-only marketplace, your date of birth is used solely to confirm you are 18 or older and is never shown publicly. Only your username, display name, avatar, bio, general region/suburb, and (for verified sellers) a “verified adult” badge are visible to other users. If you enable two-factor authentication, we store the associated authenticator (TOTP) enrolment, but never your authentication codes.

Profile & preference information

Optional profile details such as your bio, fishing styles (e.g. boat, land-based, surfcasting), mobile number, and marketing consent preferences, if you choose to provide them.

Listings, offers & messages

Details you provide when creating a listing (title, description, photos, price, condition, category, brand/model, pickup or shipping options), offers and questions you send or receive, watchlist and saved searches, and the content of messages you exchange with other users through SQID’s built-in messaging.

Orders, delivery & payment information

When you buy or sell, we collect order details, delivery addresses (recipient name, street address, suburb, city, postcode, region), and courier tracking information. Payments are processed by Stripe; SQID does not receive or store your full card number. We store limited payment metadata (such as payment status and Stripe reference IDs) needed to manage orders, refunds and disputes. Sellers who wish to receive payouts create a Stripe Connect account directly with Stripe, which collects the identity and banking information Stripe requires to verify sellers and pay out funds, SQID does not see your bank account details.

Shipping & tracking

For shipped orders, we share the delivery address and package details with our courier tracking provider, AfterShip, and with the courier itself (e.g. NZ Post, Aramex) so the item can be delivered and tracked.

Automatically collected information

Like most websites, we automatically log technical information such as IP address, browser and device type, pages viewed, and timestamps, for security, fraud prevention and service reliability. We use strictly necessary cookies to keep you signed in and to remember basic site preferences.

We also use Google Analytics/Ads and the Meta (Facebook/Instagram) Pixel to understand how people use SQID and to measure the performance of our advertising. These set cookies and similar technologies, and may share limited data (such as pages visited and, for completed purchases, an encrypted/hashed form of your email address) with Google and Meta for analytics, ad measurement, and to show you relevant SQID ads on their platforms. You can opt out via your browser’s cookie settings, Google Ads Settings, or Meta’s Ad Preferences.

Reports & support

If you report a listing or user, or contact us for support, we collect the details you provide in order to investigate and respond.

2. How we use your information

• Create and manage your account, and verify you meet our minimum age requirement
• Operate the marketplace: publish listings, process offers, orders, payments and payouts
• Arrange and track shipping of purchased items
• Enable messaging between buyers and sellers
• Send transactional communications (order updates, offers, account and security notices)
• Send marketing communications where you’ve opted in, which you can opt out of at any time
• Maintain the safety, security and integrity of SQID, including fraud prevention, content moderation, and enforcing our Terms of Service
• Provide customer support and respond to reports
• Meet our legal, tax and regulatory obligations
• Improve and develop the SQID service

3. Who we share information with

We share personal information only where necessary to run SQID:

• Other users, your username, display name, avatar, bio, general location and listing/order-related messages are visible to buyers or sellers you transact or communicate with. A delivery address is shared with the seller only to the extent needed to fulfil an order.
• Stripe (payments and seller payouts), to process purchases, refunds, and pay out sellers via Stripe Connect.
• AfterShip and courier partners (e.g. NZ Post, Aramex), to register, track and deliver shipments.
• Supabase (our database, authentication and file storage provider), hosts the infrastructure that stores account, listing and order data.
• Google and Meta, analytics and advertising cookies/pixels, and (for completed purchases) a hashed form of your email address, used to measure ad performance and show relevant SQID ads. See “Automatically collected information” above.
• Service providers who support hosting, email delivery and customer support on our behalf, under confidentiality obligations.
• Law enforcement or regulators, where required by law, to protect our rights, or to prevent fraud or harm.
• A buyer or successor in connection with a merger, acquisition or sale of assets, in which case we’ll notify you of any change in ownership or use of your information.

We do not sell your personal information.

4. International data transfers

Some of our service providers (including Supabase, Stripe and AfterShip) may store or process information on servers located outside New Zealand. Where this happens, we take reasonable steps to ensure your information continues to receive a comparable standard of protection.

5. Data retention

We keep personal information for as long as your account is active, and afterwards for as long as reasonably necessary to comply with legal, tax and accounting obligations, resolve disputes, and enforce our agreements. Order and payment records are generally retained for at least 7 years to meet New Zealand tax record-keeping requirements. If you delete your account, we deactivate your public profile and delete or anonymise personal information that we’re not required to retain.

6. Your rights & choices

Under the Privacy Act 2020, you have the right to:

• Access the personal information we hold about you
• Ask us to correct information that is inaccurate, incomplete or out of date
• Ask us to delete your account and associated personal information, subject to our legal retention obligations
• Opt out of marketing communications at any time, using the unsubscribe link or by contacting us, transactional messages about your account or orders will continue

You can update most account and profile details yourself from your account settings. For anything else, contact us using the details below.

7. Security

We use reasonable technical and organisational measures to protect your personal information, including encryption in transit, access controls, and row-level security on our database so that users and staff can only access the data their role requires. No method of transmission or storage is completely secure, so we can’t guarantee absolute security.

8. Children

SQID is restricted to users aged 18 and over. We do not knowingly collect personal information from anyone under 18. Our signup process blocks account creation where a date of birth indicates the user is under 18.

9. Changes to this policy

We may update this policy from time to time to reflect changes to our practices or for legal reasons. We’ll update the “Last updated” date above, and where changes are material we’ll take reasonable steps to notify you.

10. Contact us

If you have questions about this policy or want to exercise your privacy rights, contact us at Hello@Sqid.co.nz. If you’re not satisfied with our response, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.