Privacy Policy

1. Who are we?

Sugarfar.com is operated by Disp I/S, a partnership registered in Denmark under CVR no. 38507508, with registered address at Maglebjergvej 6, 2800 Kongens Lyngby, Denmark. We handle the personal information of our New Zealand users in accordance with the Privacy Act 2020 and the thirteen Information Privacy Principles (IPPs) it sets out.

To contact us about privacy matters or to make a privacy complaint, write to: support@sugarfar.com

2. What information do we collect?

We collect the following kinds of personal information from New Zealand users (and only the information necessary for the purposes set out below, in line with IPP 1):

Information you provide to us

• Account information: Email address, username and password upon registration
• Profile data: Age, gender, New Zealand city or region, profile text, interests and preferences
• Photos: Profile pictures and gallery images you upload
• Messages: Chat messages and images sent to other users
• Payment information: Processed directly by Stripe — we never receive or store your card details

Information we collect automatically

• Technical data: IP address, browser type, device type and operating system
• Usage data: Page views, clicks and interactions with the platform
• Cookies: See section 8 on cookies

We collect personal information directly from you (IPP 2) and tell you, at or before the time of collection, why we are collecting it and how we will use it (IPP 3).

3. What do we use your information for?

We use your personal information for the following purposes:

• Service delivery: Creating and maintaining your profile, displaying you to other users, and enabling chat
• Security: Verifying profiles, detecting and preventing abuse, fraud and fake profiles
• Improvement: Optimising the platform, features and user experience
• Communication: Sending service notifications, match notifications and (with your consent) marketing communications in compliance with the Unsolicited Electronic Messages Act 2007
• Payment: Processing subscription payments via Stripe in New Zealand dollars (NZD)

We will only use your information for a different purpose where IPP 10 permits us to (for example, with your consent or where it is directly related to the original purpose).

4. Who do we share information with?

We do not sell your personal information. We disclose information only to trusted service providers that process data on our behalf, including Stripe (payments), our hosting and database provider, and our email/transactional service providers.

Some service providers are located outside New Zealand (primarily in the European Union and the United States). When personal information is sent overseas, we comply with IPP 12 by ensuring the overseas recipient is required to protect the information in a way that, overall, provides comparable safeguards to those in the Privacy Act 2020 (typically through Standard Contractual Clauses or equivalent contractual protections).

5. Security

We protect your information with reasonable safeguards, as required by IPP 5:

• All data transmission takes place via HTTPS (TLS encryption)
• Passwords are hashed with industry-standard algorithms — we can never see your password
• Payment details are handled exclusively by Stripe (PCI DSS certified) and are never stored on our servers
• Access to personal information is restricted to authorised personnel on a need-to-know basis
• Row Level Security (RLS) ensures that users can only see information they are entitled to

6. Retention and deletion

We retain your personal information only as long as necessary for the purposes for which it was collected (IPP 9).

• Chat images: Automatically deleted after 5 days
• Profile data: Deleted upon deletion of your account
• Payment history: Retained for up to 7 years for tax and bookkeeping purposes (consistent with Inland Revenue (IRD) record-keeping expectations and our Danish bookkeeping obligations)
• Log files: Automatically deleted after 90 days

You can delete your profile at any time under "My Account". All your profile data, photos and messages will be permanently deleted.

7. Your rights under the Privacy Act 2020

As a New Zealand individual, the IPPs give you the following rights:

• Access (IPP 6): The right to ask us to confirm whether we hold personal information about you, and to receive a copy of it
• Correction (IPP 7): The right to request correction of any information you believe is wrong, or to have a statement of correction attached
• Erasure: You can delete your profile and all associated data via "My Account"
• Withdrawal of consent: Where processing is based on consent, you can withdraw it at any time
• Marketing opt-out: You may opt out of direct-marketing communications at any time using the unsubscribe link in our emails

Requests should be sent to: support@sugarfar.com. We will respond as soon as reasonably practicable, and in any case no later than 20 working days, as required by the Privacy Act 2020.

If you are not satisfied with our response, you have the right to make a complaint to the Office of the Privacy Commissioner at privacy.org.nz.

8. Cookies

Sugarfar uses cookies to deliver and improve the service. We distinguish between:

• Necessary cookies: Required for the platform to function (login sessions, security). These do not require consent.
• Analytical cookies: Used to understand how visitors use the site. Subject to your consent.
• Marketing cookies: Used to target advertisements. Subject to your consent.

You can change your cookie preferences at any time via the cookie settings in the site footer. You can also block cookies in your browser, but certain features may not function optimally.

9. Notifiable privacy breaches

If we experience a notifiable privacy breach (one that has caused or is likely to cause serious harm to one or more affected individuals) under Part 6 of the Privacy Act 2020, we will notify the affected New Zealand users and the Office of the Privacy Commissioner as soon as practicable.

10. Changes to this policy

We may update this privacy policy from time to time. In the event of significant changes, we will inform you via email or a notice on the platform. The latest version will always be available on this page.

11. Contact

Questions or complaints about this privacy policy or the handling of your personal information can be directed to:

Disp I/S
Maglebjergvej 6, 2800 Kongens Lyngby, Denmark
CVR: 38507508
Email: support@sugarfar.com