Privacy policy
Privacy Policy
Last updated: 28 July 2026
Little Legends Cards NZ, based in Long Bay, Auckland, New Zealand (“Little Legends”, “we”, “us”), respects your privacy. This policy explains what personal information we collect, why we collect it, how we protect it, and the choices available to you.
Information we collect
- Order and contact details: your name, email address, delivery and billing details, and information needed to process your order. Shopify processes checkout and payment details; we do not store your full card number.
- Personalised-card information: the player’s first name, sport, position, jersey number, hero moment and event date, plus the photo you upload for the card.
- Messages and subscriptions: information you send to us and your email address if you join our email list.
- Technical and security information: limited information needed to operate the site, prevent abuse and verify form submissions, including rate-limit and Cloudflare Turnstile signals.
How we use information
- to prepare your personalised card, communicate with you, take payment and deliver your order;
- to send service messages about an order and, where you have subscribed, occasional marketing messages;
- to maintain, secure and improve the website and prevent fraud or abuse; and
- to meet legal, accounting and tax obligations.
Photos and order briefs
Your uploaded photo and card details are stored privately in our Cloudflare storage so we can create and fulfil your order. Shopify receives only an opaque order reference and the selected card style for checkout; the photo and player details are not placed in the Shopify cart.
We keep an abandoned order brief for up to 30 days. For a completed order, the photo and brief are kept for up to 30 days after the order is dispatched or fulfilled, then deleted. If you need a different arrangement, contact us before submitting your brief.
You must have permission to provide any person’s photo and details, including a child’s photo, for this custom order.
Who we share information with
We share only what is needed with service providers that help us run the business, including Shopify for checkout, payment and order processing, Cloudflare for secure hosting, storage and abuse prevention, and email providers for service or subscribed marketing messages. Some providers may process information outside New Zealand. We do not sell your personal information.
Access, correction and deletion
Under the New Zealand Privacy Act 2020, you can ask whether we hold personal information about you and request access to, or correction of, that information. You can also ask us to delete information where we no longer need it, subject to legal or operational requirements. To make a request, email hello@littlelegendscards.co.nz. We may need to verify your identity before responding.
Security and retention
We use private storage, access controls, rate limiting, file-type checks and Cloudflare Turnstile to help protect information. No online service can guarantee absolute security, so please contact us promptly if you believe information has been sent to us in error.
Contact
Little Legends Cards NZ
Long Bay, Auckland, New Zealand
Email: hello@littlelegendscards.co.nz
Phone: 022 065 2020
If you have a privacy concern, please contact us first so we can try to resolve it.