Privacy Policy

At Kererū Publishing we respect our members’ privacy and only collect information that is necessary to deliver your books and subscription content. Please contact us if you have any questions or concerns.

Who We Are

Kererū Publishing Ltd (NZBN 9429030210813)
29 The Circle
Manly
Auckland
New Zealand
Contact: caroline@kererupublishing.com (+64) 021 226 8209

What Information We Collect

Name and Email (for accounts, subscriptions, and newsletters).
Shipping Address and phone number (only if you purchase a physical book).

We do not store or see your credit card details. Payment processing is handled securely by Stripe (for subscriptions/physical books) and Lemon Squeezy (for digital books), both of which are certified to PCI Service Provider Level 1—the most stringent level of certification available in the payments industry.

If you join one of our group memberships, your name and email may be provided to us by your group's administrator rather than by you directly; where this happens, we will let you know that we hold your information and how it's being used, in line with our obligations under New Zealand Privacy Act 2020.

Our services are not directed at children, and we do not knowingly collect personal information from anyone under 16. Where a minor is subscribed, we expect a parent or guardian to be aware of and have approved their subscription and advise us of their age. We will not use a minor's information for marketing purposes, and their data will be used only to provide access to the subscription content they've signed up for.

How We Use Your Data

We use your data for the following purposes:
* To deliver digital products and subscriptions.
* To post physical books to you.
* To send you newsletters (only if you opt-in)
* To keep legally required accounting records.
We take all reasonable steps to protect personal information, while acknowledging that no internet transmission/storage is completely risk-free.

Providers and Shared Data

We use a few trusted partners to run this website smoothly. Each provider is subject to the laws of their country as well as international laws related to distribution into other countries. All providers comply with relevant international privacy and data protection obligations.

Overseas Providers
Customer data is processed outside of New Zealand. All providers are GDPR compliant. Each relies on an appropriate legal basis for processing your data. Where this includes account setup, payments and delivery this is generally based on fulfilling our contract with you. For marketing emails, it is your opt-in consent (see Marketing Consent below). Each provider has its own privacy and data protection obligations based on their location, and a link to their respective privacy policy is included below.

* Ghost: Hosts our website, manages your member account and sends our subscription newsletters and renewal reminders. Privacy Policy
* Stripe: Securely processes payments for subscriptions and physical books. Privacy Policy
*Lemon Squeezy: Processes payments and delivers our digital books. They are the Merchant of Record. A customer is legally purchasing from Lemon Squeezy (as Kererū Publishing’s authorized reseller). Lemon Squeezy's name will appear on your bank/card statement. Lemon Squeezy handles the transaction, tax remittance, and any bank-initiated chargeback disputes. Privacy Policy
* MailerLite: Manages our Kererū Monthly News and other promotional emails as well as managing group subscriptions and renewal email reminders. Privacy Policy
* Zapier: An automation tool that helps our systems "talk" to each other (e.g., passing an email from Ghost to MailerLite). Privacy Policy

New Zealand Based Providers
Customer data may be processed and stored in servers located overseas. Providers comply with the New Zealand Privacy Act 2020
* Xero: Our accounting software where transaction records are stored for tax purposes. Privacy Policy
* Pass the Parcel/Castle Parcels: Delivers our physical books and any other goods within NZ. Privacy Policy

Cookies & Tracking

We use essential cookies to keep you logged into Ghost, and our payment processors (Stripe/Lemon Squeezy) use cookies for fraud prevention and processing.

In addition to essential cookies, our website platform (Ghost) and email provider (MailerLite) use standard tracking technologies (like web beacons or pixels) to tell us if you have opened an email or clicked a link. This helps us understand what content is most useful to our members. We do not currently use separate analytics/cookie tools beyond these platform features.

Marketing Consent

Due to the international distribution of much of our content, we comply with the New Zealand Unsolicited Electronic Messages Act 2007 and European Union (GDPR) opt-in model for distribution of marketing materials.

Our marketing distribution is managed outside of Ghost via MailerLite. A Ghost member can opt in to receiving marketing materials from MailerLite and also can control their preferences for marketing emails from MailerLite at any time using this form. MailerLite promotional emails carry their own unsubscribe link. No marketing material is sent directly from our Ghost site. The only emails members should receive via Ghost are those that relate to subscriptions they have provided permission to receive.

If you do not open any marketing materials sent from MailerLite within a two-year period we will contact you before removing your details from our records.

Data Retention

We keep your personal information only for as long as we need to. Active subscription data is kept until you delete your account. For legal and tax purposes, New Zealand law requires us to keep transaction records (via Xero, Stripe, and Lemon Squeezy) for a minimum of seven years.

Your Rights

Complying with the laws of New Zealand and meeting GDPR requirements you have the right to:
* Ask for a copy of the data we hold about you.
* Request corrections to your data.
* Ask us to delete your data (except where we are legally required to keep it, such as for tax records).
* Opt-out of marketing communications at any time.
* Request that we restrict the processing of your data or export it to another service.

How to Exercise Your Rights:

Contact Caroline with a written privacy request via email: caroline@kererupublishing.com

We will endeavour to get back to you within 7 business days with an initial response.

You have the right to complain to the New Zealand Office of the Privacy Commissioner, or your local data protection authority, if you are unhappy with how a request is handled.

Privacy Policy last updated 02/07/2026