1. Binding terms

By accessing and using www.crane-brothers.com (Website), all users (Users) agree to be legally bound by these terms of use (Terms).Any User that does not agree to these Terms is not authorised to access and use the Website and must immediately and completely cease doing so.

2. Use of the Website

Users may only use the Website strictly in accordance with these Terms.All rights not expressly granted to Users in these Terms are expressly reserved by Crane & Sons Limited (8384722) (Crane Brothers).

3. Responsibility

Each User will be responsible for all activity that occurs through its use of or engagement with the Website.

4. Content

Crane Brothers reserves the right to remove or alter any content posted on the Website, whether it considers (in its sole discretion) it to be offensive, objectionable, unlawful or otherwise.

5. Log In Accounts

Users may create a log in account with Crane Brothers via the Website (Log In Account), provided that the following provisions are duly complied with:
(a) Upon creating a Log In Account, all Users agree to provide true, accurate, current and complete information about themselves as prompted by the Website, and to promptly notify Crane Brothers of any changes to such information in order to ensure that it remains true, accurate, current and complete.
(b) Users will be responsible and liable for all use of the Log In Account at all times (including all data submitted or provided by them).
(c) Each User must create a unique username and a password for their Log In Account.
(d) Each User is solely responsible for maintaining and safeguarding access to their Log In Account.Should a User suspect that its Log In Account has been compromised, breached or used without permission, it is the User’s sole responsibility to take immediate action to protect its Log In Account.In addition, the User must immediately notify Crane Brothers, who will be entitled to take such action as it considers appropriate (which may include, without limitation, closing the Log In Account or changing the username and/or password).
(e) A Log In Account will be deemed to be inactive (unless determined otherwise by Crane Brothers) if there has been no successful login to the Log In Account for a continuous 12 month period.Inactive Log In Accounts may be deleted by Crane Brothers without notice and in its sole and absolute discretion.
(f) Upon deletion of any Log In Account, any stored information may be lost and may become permanently unrecoverable.
(g) Each time a Log In Account is accessed with the User’s username and password, Crane Brothers may:
(g.i) act on any instructions given to it or transactions initiated via the Website; and
(g.ii) allow access to the Log In Account, whether or not the person using the username and password is authorised to issue or initiate the instructions or transactions or access the Log In Account. Crane Brothers need not and will not make any further inquiries to verify the authorisation, instructions or transactions or any access to the Log In Account and will assume that the User has properly authorised all access to the Log In Account.
(h) A password for a Log In Account must be kept private and confidential at all times and the security of any such password is solely the responsibility of the User.
(i) Crane Brothers reserves the right to terminate or suspend a Log In Account at any time without any requirement to give prior notice to the User and may refuse to provide its products and/or services for any reason and at any time.

6. No illegal use

No User may use the Website for any illegal or unauthorised purpose, or post any information or data that is in breach of any confidentiality obligation, copyright, trade mark or other intellectual property or proprietary rights of any person or entity.

7. No malicious use

Users must not use the Website for any malicious means or abuse, harass, threaten, intimidate or impersonate any other User.

8. Interference with the Website

Users must not introduce (or cause the introduction of) any virus, spyware or other similar feature that in any way compromises or may compromise the Website.

9. Accessing the Website

Users may only access the Website through standard web browsers, and not via methods such as scraping, data mining, the use of a robot or spider, automation or any similar method of extraction or monitoring.

10. mUse of the Website on behalf of another person or entity

Any User that accesses and uses the Website on behalf of another person or entity confirms that he, she or it is fully authorised to do so and agrees to these Terms on that person or entity's behalf.

11. Orders and purchases

All orders and purchases (including via the Website) shall be governed by the Terms and Conditions of Trade of Crane Brothers (the Terms of Trade), which can be viewed on the Website.

12. Intellectual property

All Users agree that Crane Brothers owns all of the intellectual property rights existing the Website.

13. Indemnity

Each User hereby indemnifies, and will keep indemnified, Crane Brothers against all forms of liability, actions, proceedings, demands, costs, charges and expenses which Crane Brothers may incur or be subject to or suffer as a result of that User's use of the Website.

14. Amendments

Crane Brothers reserves the right to amend these Terms at any time with or without notice to Users.Any User who continues to use the Website after any amendments will be deemed to have agreed to such amendments.

15. Changes to the Website

Crane Brothers is permitted (in its sole discretion) to alter, suspend, discontinue or restrict access to the Website with or without notice to Users and shall incur no liability for doing so.

16. Branding

No User may publish or use Crane Brothers' trade marks, brand, branding or logos except with Crane Brothers' prior written consent.

17. Website breakdown and malfunctions

Crane Brothers will try to address (during normal business hours) all technical issues that arise on the Website.However, Crane Brothers will not be liable for any loss or damage suffered as a result of any partial or total breakdown of the Website or any technical malfunctions on it, the Website being unavailable or performing slowly, or any viruses or other forms of interference that may damage any User's computer system.

18. Privacy policy

Crane Brothers' privacy policy (which can be viewed on the Website) shall apply to all information, data or other content which is generated through each User's use of the Website.

19. Links to other websites

Unless expressly stated otherwise by Crane Brothers, any link on the Website to other websites does not imply any endorsement, approval and/or recommendation of those sites, their operators or their products and/or services.

20. Foreign use of the website

Crane Brothers makes no representation or warranty that the Website is appropriate or available or lawful for use in all countries or that the content satisfies the laws of all countries.All Users are responsible for ensuring that their access to and use of the Website is not illegal or prohibited in their relevant country.

21. No waiver

Crane Brothers will not be deemed to have waived any right under these Terms unless the waiver is in writing and signed by Crane Brothers.A failure to exercise or delay in exercising any right by Crane Brothers under these Terms will not operate as a waiver of that right.Any such waiver will not constitute a waiver of any subsequent or continuing right or of any other provision in these Terms.

22. Assignment

No User shall be permitted to assign or transfer any of their rights or obligations under these Terms without Crane Brothers' prior written consent.Crane Brothers shall be entitled (in its sole and absolute discretion) to assign and transfer any of its rights or obligations under these Terms, and the consent of Users shall not be required for any such assignment or transfer.

23. Severability

If any provision in these Terms becomes invalid or unenforceable, the remainder of these Terms will remain valid and enforceable to the fullest extent permitted by law.

24. Prevailing terms

The Terms of Trade will prevail over anything to the contrary contained in, or that may be in conflict or inconsistent with, these Terms.These Terms will prevail over anything to the contrary contained in, or that may be in conflict or inconsistent with, Crane Brothers' privacy policy (which can be viewed on the Website).

25. Governing law and jurisdiction

These Terms will be governed by and construed in accordance with the laws of New Zealand.All Users and Crane Brothers irrevocably submit to the non-exclusive jurisdiction of the courts of New Zealand for any matter arising under or relating to these Terms.

1.0 Outline

1.1 Crane & Sons Limited (NZCN 8384722) (Crane Brothers, we, us and our) is committed to protecting the personal information of all its customers (Customers) in accordance with the Privacy Act 2020 (Privacy Act) and the Information Privacy Principles as set out in the Privacy Act.

1.2 Personal information is information about an identifiable individual (a natural person).

1.3 This privacy policy will help Customers understand how and why Crane Brothers collects information, how that information is stored, how it is used, how Customers can access and correct that information and when we might disclose information to third parties.

1.4 This privacy policy does not limit or exclude any rights that a Customer has or may have under the Privacy Act and (where applicable) the General Data Protection Regulation 2016/679 (GDPR).

1.5 For further information, please see www.privacy.org.nz .

2.0 Application of this privacy policy

2.1 This privacy policy applies to all instances in which personal information is collected from a Customer by Crane Brothers.

2.2 By purchasing the products and/or services offered by Crane Brothers (Products and Services), the Customer consents to the collection, use, disclosure, storage and processing of personal information in accordance with this privacy policy.

3.0 Changes to this privacy policy

3.1 Crane Brothers may change this privacy policy at any time by uploading a revised privacy policy to its website, www.crane-brothers.com (the Website).

3.2 All Customers agree to be bound by the privacy policy that is in effect at the time they purchase Products and Services.

4.0 Collection

4.1 Crane Brothers may collect information (including personal information):
(a) as part of any communication with Crane Brothers either directly, via phone or email.
(b) that is submitted or made available to, or acquired by, Crane Brothers from the Customer through that Customer's purchase (or prospective purchase) of Products and Services (including personal measurements and data in relation to this).

4.2 Crane Brothers may supplement any information provided to it with information it receives from third parties.

4.3 We do not collect any other personal information about Customers, including details about any Customer’s race, ethnicity, religious beliefs, sexual orientation, political information or any other genetic or biometric data.

4.4 Crane Brothers may, in addition to other information, collect the following information about a Customer:
(a) The Customer's name, phone number, residential address and email address.
(b) The Customer's gender and date of birth.
(c) Corporate information and details as may be available on public registries or as provided by or on behalf of the Customer.
(d) Such other information as set out on the Website.

4.5 If any Customer chooses not to provide information when we ask for it, they may not be able to purchase Products and Services.

5.0 Uses

5.1 The information that Customers provide to Crane Brothers may be used:
(a) to verify the identity of the Customer;
(b) in connection with the purchase (or potential purchase) of Products and Services by the Customer (including with our tailors and product manufacturers, including our external tailors and product manufacturers);
(c) to communicate with Customers in relation to the Products and Services;
(d) to market our Products and Services to Customers, including contacting Customers electronically (for example, by text, email or an online messaging platform, subject always to the Unsolicited Electronic Messages Act 2007);
(e) to undertake credit checks of any Customer (if necessary, as determined by Crane Brothers);
(f) to invoice any Customer and to collect money that a Customer owes to us, including authorising and processing credit or debit card transactions (please see our Credit Card Security Policy on the Website, which sets out our policy with respect to the protection of customer credit card information);
(g) to respond to communications from a Customer, including any complaints;
(h) to co-operate with any government, industry or regulatory authorities;
(i) to protect and/or enforce our legal rights and interests, including defending any claim; or
(j) for any other purpose authorised by a Customer, the Privacy Act and/or GDPR.

5.2 Crane Brothers reserves the right to use data (on a strictly anonymous basis) in relation to Customers' use of the Products and Services for marketing and accounting purposes.

5.3 Customers may request Crane Brothers to stop sending marketing messages at any time, by contacting Crane Brothers on info@crane-brothers.com .

6.0 Cookies

6.1 Crane Brothers uses cookies (being an alphanumeric identifier that we transfer to your computer’s hard drive so that we can recognise your browser) in order to monitor your use of the Website.

6.2 Customers may disable cookies by changing the settings on their browser, although this may mean that you cannot use all of the features of the Website.

7.0 Disclosure

7.1 Unless expressly authorised to do so by the relevant Customer or under this privacy policy, Crane Brothers will not disclose any Customer's personal information to any third party except where disclosure relates to the purposes for which the information was collected (as stated in clause 5.1 above).

7.2 In addition, and for the avoidance of doubt, we may disclose your personal information to:
(a) another entity within our group;
(b) any business that supports our services and products, including any person that hosts or maintains any underlying IT system or data centre that we use to provide the Website or other services and products;
(c) a credit reference agency for the purpose of credit checking you;
(d) a person, entity or agency who can legally require us to supply your personal information;
(e) a person, entity or agency authorised by the Privacy Act or another law; and
(f) a person, entity or agency authorised by you.

7.3 A business that supports our services and products may be located outside of New Zealand. This may mean that your personal information is held and processed outside of New Zealand.

7.4 We may transfer your information in the case of a merger, acquisition, liquidation or reorganisation.

8. Protection and retention

8.1 Crane Brothers will take all reasonable steps to ensure the personal information collected, used or disclosed in accordance with this privacy policy is stored in a secure environment protected from unauthorised access, modification or disclosure.

8.2 Crane Brothers will hold personal information collected in accordance with this privacy policy both before and after the purchase of Products and Services in order to fulfil the purposes for which it was collected, but only for so long as we are legally entitled to do so.

8.3 We will advise any Customer as soon as practicable after becoming aware that a notifiable privacy breach (as that term is defined under the Privacy Act) has occurred in respect of that Customer, and take all steps necessary to comply with the Privacy Act requirements in respect of that breach.

9.0 Legal rights and access

9.1 Subject to certain grounds for refusal set out in the Privacy Act, Customers have the following rights in relation to their personal information:
(a) To request access to their personal information.
(b) To request a correction to their personal information.
(c) To request the deletion or removal of their personal information.
(d) To object to the processing of their personal information.
(e) To request a restriction on the processing of their personal information.
(f) To request a transfer or their personal information to you or a third party.
(g) To withdraw consent to the use of their personal information.

9.2 If at any time a Customer wishes to exercise any of the rights above, please contact Crane Brothers at info@crane-brothers.com. Please note that we may need evidence to confirm that you are the individual to whom the personal information relates. Your email should provide evidence of who you are and set out the details of your request.

10. Severability

10.1 If any part of this privacy policy is found by a court to be invalid, void or unenforceable, whether under the Privacy Act, GDPR or any other applicable law, such provision will be deemed to be deleted from this privacy policy and the remaining provisions of this policy will continue in full force and effect.

This sets out the policy of Crane Brothers with respect to the protection of customer credit card information.

Our Commitment to Your Security
At Crane Brothers, protecting your credit card information is a top priority. We are committed to maintaining the highest standards of security and compliance to ensure your payment data remains safe and secure.

How We Protect Your Information
Industry-Standard Security
We comply with the Payment Card Industry Data Security Standard (PCI DSS), the gold standard for credit card data protection. Our security measures include:

• Encryption: All credit card information is encrypted both when transmitted to us and when stored in our systems.
• Secure Networks: We use advanced firewalls and network security measures to protect against unauthorized access.
• Access Controls: Only authorized personnel have access to payment systems, and all access is monitored and logged.
• Regular Security Testing: We conduct regular security assessments and vulnerability testing to maintain our defences.

What Information We Collect
When you make a purchase with your credit card, we collect only the information necessary to process your transaction, being as follows:

• Credit card number.
• Expiration date.
• Cardholder name.
• Billing address.
• Security code (for verification only - never stored).

What We Never Store
For your protection, we never store:

• Full magnetic stripe data.
• Security codes (CVV/CVC).
• PIN numbers.
• Any sensitive authentication data.

Data Handling Practices
Secure Processing

• All transactions are processed through secure, encrypted connections.
• We use tokenization technology to replace sensitive card data with unique tokens.
• Payment processing occurs in isolated, monitored environments.
• All systems are regularly updated with the latest security patches.

Data Retention

• We retain only the minimum card information necessary for business purposes.
• Credit card numbers are masked in our systems (showing only the first six and last four digits).
• We automatically purge unnecessary payment data according to industry best practices.
• Transaction records are maintained only as long as required by law or business necessity.

Third-Party Security

• All payment processors and service providers must meet our strict security standards.
• We verify that all partners maintain PCI DSS compliance.
• Vendor access to payment systems is strictly controlled and monitored.

Your Rights and Our Responsibilities
Your Rights
You have the right to:

• Receive secure processing of your payment information.
• Be notified if a security incident affects your data.
• Request information about how your payment data is protected.
• Report any suspected fraudulent activity on your account.

Our Responsibilities
We commit to:

• Maintaining PCI DSS compliance at all times.
  Implementing industry-leading security technologies.
• Training our staff on proper data security procedures.
• Responding promptly to any security incidents.
• Continuously improving our security measures.

Security Incident Response
In the unlikely event of a security incident:

• We will immediately investigate and contain any potential breach.
• Affected customers will be notified promptly according to applicable laws.
• We will work with law enforcement and card companies as appropriate.
• We will provide support and guidance to affected customers.

Safe Shopping Tips
To help protect yourself when shopping online:

• Only shop on secure websites (look for "https://" and the lock icon).
• Never share your credit card information via email or unsecured messages.
• Monitor your credit card statements regularly.
• Report any suspicious activity to your card issuer immediately.
• Use strong, unique passwords for your online accounts.

Secure Payment Methods
We accept the following secure payment methods:

• All major credit cards (Visa, MasterCard, American Express, Discover).
• Secure digital wallets (Apple Pay, Google Pay, PayPal).
• All payments are processed through certified, secure payment gateways.

Technical Security Measures
Encryption Standards

• We use TLS 1.2 or higher for all data transmissions.
• Stored data is encrypted using industry-standard AES encryption.
• All encryption keys are securely managed and regularly rotated.

Access Controls

• Multi-factor authentication for all administrative access.
• Role-based access controls limit data access to authorized personnel only.
• All access to payment systems is logged and monitored.
• Regular access reviews ensure proper authorization levels.

Monitoring and Detection

• 24/7 security monitoring of all payment systems.
• Automated fraud detection and prevention systems.
• Real-time alerts for suspicious activities.
• Regular security audits and penetration testing.

Compliance and Certifications
Industry Standards

• PCI DSS Level [X] Certified: We maintain compliance with Payment Card Industry Data Security Standards.
• Regular Audits: Independent security assessments verify our compliance.
• Continuous Monitoring: Ongoing security monitoring ensures maintained compliance.

Regulatory Compliance
We comply with all applicable data protection regulations, including:

• The Privacy Act 2020..
• International data protection requirements where applicable.
• Industry-specific security regulations.

Contact Us About Security
Reporting Security Concerns
If you have questions about our security practices or need to report a security concern:

• Email: info@cranebrothers.com
• Phone: +6493775333

General Questions
For general questions about your orders or account:

• Customer Service: +649377533
• Email: info@cranebrothers.com

Policy Updates
We may update this policy periodically to reflect changes in our security practices or regulatory requirements. We will post any material changes on this page. Continued use of our services after any changes constitutes acceptance of the updated policy.