1. Home
2. Privacy

Privacy statement

Brushsake is a small New Zealand business. This statement explains what personal information we collect, why, and what we do with it.

Our free template tool

When you make a free template, your photo is processed on your own device. It is not uploaded to us and we don't keep it.

What we collect

When you order a kit, sign up for updates or contact us, we may collect:

• your name
• your contact details (email address, phone number and shipping address)
• your order and payment details (we never see or store your full card number; payments are handled by Stripe)
• your messages and other interactions with us
• the photo you upload, if you order a custom photo kit

Why we collect it

We use your information to:

• make and deliver your kit, and keep you updated about your order
• print your photo as a paint-by-number kit, if you order a custom photo kit
• answer your questions and look after any issues with your order
• send you updates, but only if you have asked for them (you can unsubscribe at any time)

Who we share it with

Besides our team, we share only what is needed with:

• our production partner, which prints and packs your kit. Our production partner is overseas, in China, where privacy laws may not protect your information in the same way as in New Zealand or Australia. We share only what they need to make and send your kit: your photo (for custom kits), name, shipping address and phone number.
• shipping companies, to deliver your order (name, address, phone)
• service providers that help us run the shop: Stripe (payments), Cloudflare (website hosting and security), Brevo (order emails) and Google Workspace (our email)

We don't sell your information.

What's optional

Some information is optional. We do need your name, email and shipping address to make and send your order; without them we can't ship it.

How we keep it safe

We store your information with providers that use encryption and certified security, and we limit who can access it. We give our production partner and shipping companies access only to what they need for your order. Photo links we send to our production partner expire after 3 days.

How long we keep it

• Your uploaded photo: deleted 14 days after your kit is dispatched, or straight away if your order is cancelled or refunded.
• The production design and quality-check photos: deleted 30 days after delivery.
• Your other order details: deleted 4 weeks after delivery, except the records we must keep by law, such as tax and sales records.
• Our production partner keeps its own order records under its own policy; we have asked it to delete your photo after production.
• Our payment and email providers (Stripe and Brevo) keep their own records under their own privacy policies.

When we delete information, we remove it from our systems and storage.

Your rights

You have the right to ask for a copy of any personal information we hold about you, and to ask for it to be corrected if you think it is wrong. You can also ask us to delete it. To make a request, contact us at [email protected].

If you're not happy with how we've handled your information, you can complain to the Office of the Privacy Commissioner (New Zealand, privacy.org.nz) or, in Australia, the Office of the Australian Information Commissioner (oaic.gov.au).

Last updated: 13 November 2026