The New Zealand website is operated by Kika Sport Limited (NZBN 9429053503305), trading as Kika Sport, with locations shown as Ahipara – Far North · Huntly – Waikato, New Zealand. “We”, “us” and “our” refer to that operator. This policy covers personal information connected with enquiries, orders, teamwear programmes and this website.
New Zealand privacy framework
We handle personal information under the Privacy Act 2020 and its Information Privacy Principles, covering collection, security, access, correction, accuracy, retention, use, disclosure, overseas disclosure and unique identifiers. In addition to principles 1–13, the indirect-collection notification requirement in IPP 3A has applied since 1 May 2026.
What we collect and why
Depending on your dealings with us, we collect names, contact and delivery details, club or organisation details, orders, payment-status and transaction records, garment sizes, names and numbers for personalisation, supplied artwork, and correspondence including complaints and returns. Website access may generate technical records such as IP address, browser details and pages requested. Payment providers collect the details needed for your chosen payment method.
Collection must be necessary for a lawful purpose connected with our business. We use information to respond to enquiries, prepare quotes and artwork, manage approved team rosters, produce and deliver orders, process payments, provide support and consumer remedies, protect against fraud and meet legal record-keeping obligations. If you do not provide information needed for an order or enquiry, we may be unable to fulfil it. We take reasonable steps to check information is accurate, up to date, complete, relevant and not misleading before use or disclosure.
Direct and indirect collection
We normally collect information from you. Where lawful, we may receive relevant order information from a club, school, nominated coordinator or representative. Anyone supplying another person’s details should have authority to do so, with appropriate parent or guardian involvement for children. Please avoid unnecessary health or other sensitive information.
For information collected indirectly from 1 May 2026, we will take reasonable steps, as soon as reasonably practicable, to ensure the person knows of the collection, its purpose, intended recipients, the name and address of the collecting and holding agencies, any law authorising or requiring collection, and access and correction rights, unless an IPP 3A exception applies or appropriate notification has already occurred. This policy does not replace any specific notice required for a particular collection.
Use, sharing and overseas handling
We use and disclose information for the purpose for which it was collected, a directly related purpose, with your authorisation, or as otherwise permitted by the Act. Relevant recipients may include production and delivery providers, payment processors, hosting, email and IT providers, professional advisers, your nominated team-order coordinator where needed to administer that order, and authorities where legally required or permitted.
Orders for delivery to New Zealand may be fulfilled from Central Coast NSW, Australia. Necessary order information may therefore be handled in Australia. Other service-provider locations depend on the arrangements used for your transaction and have not yet been confirmed for publication; please contact us for the relevant details. Overseas service providers acting solely as our agents remain subject to our responsibility under the Act. Where IPP 12 applies to a disclosure to an overseas recipient, we must have reasonable grounds that comparable safeguards apply, for example through applicable law or contractual protections, or another permitted basis. If relying instead on your authorisation to a disclosure without comparable safeguards, we must expressly inform you of that risk first; merely using this site does not provide that authorisation.
Website technologies and electronic marketing
Website and payment services may use cookies or similar technologies for necessary functionality and security. You can restrict cookies in your browser, which may affect functionality. This policy is not consent to optional tracking; information about any optional analytics or advertising must be supplied when introduced.
Commercial email and SMS must comply with the Unsolicited Electronic Messages Act 2007. We require valid consent, identify the sender with accurate contact details, and provide a clear, free and functional unsubscribe facility. Unsubscribe through that facility or contact us; requests will be honoured within five working days. The facility remains functional for at least 30 days after sending. Necessary order communications are separate from marketing.
Security, retention and breaches
We use reasonable safeguards against loss, unauthorised access, use, modification, disclosure and other misuse, including appropriate access restrictions and secure handling arrangements with providers. No system is completely risk-free. We do not retain personal information longer than necessary for its lawful purposes, including record-keeping and dispute resolution, and securely dispose of or de-identify it when no longer needed.
We will investigate and contain privacy breaches. If a breach has caused or is likely to cause serious harm, we must notify the Office of the Privacy Commissioner and affected people as soon as practicable, subject to the Act’s exceptions. The Commissioner recommends notification ideally within 72 hours of becoming aware of a notifiable breach; that recommendation is not a substitute for the statutory “as soon as practicable” requirement.
Access, correction and complaints
You can request confirmation that we hold your information, access to it and correction under IPPs 6 and 7. Use Contact us and ask for the privacy officer. We may reasonably verify identity and will decide access or correction requests as soon as reasonably practicable and ordinarily within 20 working days, subject to lawful extensions. If a request is refused, we will explain the lawful reason and complaint rights. If we do not make a correction, you may ask us to attach a statement of the correction requested.
Please raise privacy concerns through the same channel with details of the issue and the outcome sought. If you remain dissatisfied, you may complain to the Office of the Privacy Commissioner. This policy does not limit rights under New Zealand law.
Changes
We will publish policy updates here with a revised date and provide further notice where required by law. Any new handling activities must be assessed against the Act before introduction.
