Privacy Policy for Naplux Sleep

Last Updated: July 7, 2026

At Naplux Sleep, we believe everyone deserves exceptional sleep, and that starts with knowing your personal information is treated with transparency, integrity, and safety. This Privacy Policy outlines how Naplux Sleep (referred to as "we", "us", or "our") collects, holds, uses, and discloses your personal information when you visit our website (www.naplux.co.nz), purchase our products, or engage with our services.

We comply fully with the New Zealand Privacy Act 2020 (including all modern amendments, such as Information Privacy Principle 3A) and the Unsolicited Electronic Messages Act 2007.

1. Information We Collect

To process your orders, manage warranties, and deliver your products safely across New Zealand, we collect different categories of personal information.

A. Direct Collection (Information You Provide)

We collect personal information directly from you when you create an account, purchase a mattress or base, log a support ticket, or sign up for our email newsletter:

• Identity Metrics: Full name, title, and account login details.

• Contact Metrics: Physical delivery address, billing address, email address, and phone number.

• Transaction Details: Details of payments to and from your account, and specific records of products you have purchased from us.

• Customer Support Records: Communication logs, photos, or data provided when you submit a warranty ticket, contact our help desk, or request a 14-day change-of-mind return.

Payment Card Security: All credit card and debit transactions are processed over highly encrypted networks via our native Shopify Checkout platform (backed by Stripe). Naplux Sleep does not view, collect, or store your raw payment card numbers.

B. Indirect Collection (Information from Third-Party Sources)

In full compliance with Information Privacy Principle 3A (IPP 3A), we notify you that we collect or receive personal data indirectly through integrated e-commerce infrastructure platforms:

• Buy Now, Pay Later (BNPL) Providers: Status updates and credit verification flags related to your transaction from Afterpay or Zip.

• Independent Review Aggregators: Order verification tokens linked to automated post-purchase customer feedback requests.

C. Automated Data (Cookies & Digital Analytics)

When you browse our digital storefront, we automatically collect analytical data regarding your device configuration and behavior using tracking cookies and script files:

• IP address, operating system, browser configurations, and geographical location.

• Pages visited, product clicks, shopping cart additions, and overall session durations.

2. Purpose of Collection and Use

We collect and use your personal data strictly for connected business functions, including:

• Logistics & Order Fulfillment: Managing transactions, checking inventory, and packing and delivering mattresses, bed bases, headboards, or sofas to your physical address.

• Warranty & Returns Management: Tracking your original purchase metrics to validate our 5-year mattress/base warranty or evaluating 14-day change-of-mind claims.

• Email Marketing & Engagement: Delivering specialized sleep advice, product performance updates, and promotional deals via email automated platforms (Klaviyo / Mailchimp).

• Service Enhancements: Analyzing digital performance metrics to improve our online shopping layout and direct-to-consumer value model.

3. Disclosing and Sharing Your Data

We do not sell, lease, or trade your personal data. To run our online storefront and ship heavy furniture across New Zealand, we disclose necessary operational data to specific service sectors:

Service Partner Category	Shared Data Points	Purpose of Disclosure
Freight & Delivery Carriers	Name, delivery address, phone number	Dropping off and tracking physical delivery of mattresses, bases, or furniture.
BNPL Partners (Afterpay / Zip)	Order totals, billing details, name	Enabling installment payments and managing purchase validation.
Marketing Systems (Klaviyo / Mailchimp)	Email address, transaction history	Sending abandoned cart reminders, order confirmations, and promotional newsletters.
Review & Feedback Engines	Email address, product SKU	Triggering verified post-purchase review requests to maintain honest customer feedback.

 

Cross-Border Disclosures (IPP 12 Compliance)

Some of our primary software platforms (such as Shopify, Klaviyo, and Mailchimp) maintain cloud hosting infrastructure outside of New Zealand, primarily inside the United States and Australia. We ensure that our international data processors utilize strict security protocols and contractual protections that meet or exceed New Zealand statutory requirements.

4. Email Marketing and Opt-Out Controls

We maintain strict anti-spam compliance protocols under the Unsolicited Electronic Messages Act 2007:

• We do not use pre-ticked checkboxes at checkout; you must actively click or toggle our newsletter option to enroll in promotional databases.

• You maintain an absolute right to halt our promotional messages at any moment. Every marketing email dispatched via Klaviyo or Mailchimp contains a visible, functional "Unsubscribe" link at the bottom. Clicking this removes your profile from future marketing dispatches immediately.

5. Security Safeguards and Retention

We take our data protection obligations seriously. We implement robust electronic safeguards, secure database access permissions, and firewalls to protect against data loss, unauthorized access, or accidental modification.

We retain your personal data only as long as required to fulfill your order, protect our legitimate business operations, or meet mandatory tax and legal record-keeping requirements (such as tracking product warranty periods).

6. Your Rights of Access and Correction

Under the Privacy Act 2020, you hold total ownership over your data records. You have the absolute right to:

1. Request a clear copy of all personal information we hold about you.

2. Request that we correct any inaccurate, broken, or outdated metrics connected to your profile.

To lodge an information access request or make corrections, please contact our designated Privacy Officer using the details below. We are legally required to verify your identity and fulfill valid requests within 20 working days.

7. Contact Details

If you have questions, wish to exercise your data ownership rights, or want to raise a concern regarding your data privacy, please contact our team directly:

• Trading Name: Naplux Sleep

• Legal Entity Context: Operated by Slumberzone New Zealand Ltd / Naplux NZ 

• Physical Address: 18 Noel Burnside Road, Wiri, Auckland 2025, New Zealand

• Contact Number: +64 226063010

• Email Address: contact@naplux.co.nz

• Storefront URL: www.naplux.co.nz