Privacy Policy

Last updated: July 2026

MediaMate is operated by Kiwi Code NZ, based in New Zealand. This Privacy Policy explains how we collect, use and protect your personal information when you use our platform.

We are committed to protecting your privacy and handling your information with care and respect.

1. Information We Collect

Shop owners:

• Account information — name, email address, password (encrypted)
• Shop profile information — shop name, location, bio, contact details, social links, opening hours
• Inventory data — item listings, photos, prices, postage costs and descriptions you upload
• Billing information — processed and stored securely by Stripe. We do not store card details.
• Usage data — how you use the dashboard, items viewed, enquiries received

Buyers and collectors:

• Account information (if you create a community account) — display name, username, email
• Profile information — bio, location, genres, avatar photo
• Collection data — items you add to your collection and want list
• Community content — posts, comments and photos you share in The Crate
• Enquiry and form data — name, email, phone and message when you contact a shop
• Follow preferences — shops and formats you follow
• Review data — if you leave a review of a shop, we collect the name and email address you provide. This email is used only to prevent duplicate reviews from the same person and is not displayed publicly. If you leave a review of another collector in The Crate, this is tied to your logged-in account instead.

All users:

• Technical data — browser type, device type, IP address, pages visited
• Cookies — used for authentication and session management

2. How We Use Your Information

• To provide and operate the MediaMate platform
• To process subscription payments via Stripe
• To send transactional emails — enquiry notifications, want list alerts, new stock notifications, password resets
• To display your shop and listings to buyers
• To show your community profile and posts to other collectors
• To send new arrivals digests to shop followers (only if they opted in)
• To prevent duplicate or fraudulent reviews
• To improve the platform and fix issues
• To comply with legal obligations

We do not sell your personal information to third parties. We do not use your information for advertising purposes.

3. Information Sharing

We share your information only as necessary to operate the platform:

• Firebase (Google) — our database, authentication and file storage provider
• Stripe — payment processing for shop subscriptions
• Resend — transactional email delivery
• Netlify — platform hosting
• Discogs, OMDb and IGDB — when a shop owner searches for an item to autofill its details, the search terms entered (such as an item title) are sent to these third-party databases to retrieve matching results. No personal information about you is sent to these services as part of this process.

When you submit an enquiry, want list request or sell/trade submission to a shop, your contact details are shared with that shop owner so they can respond to you.

Your public community profile, collection and posts are visible to other MediaMate users if you have set them to public.

4. Data Storage and Security

Your data is stored securely using Google Firebase infrastructure. All data is transmitted over HTTPS. Passwords are encrypted and never stored in plain text. Payment card details are handled entirely by Stripe and never stored on our servers.

We take reasonable steps to protect your information, but no internet service can be 100% secure. Please use a strong, unique password for your account.

5. Your Rights

Under New Zealand's Privacy Act 2020, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account and associated data
• Withdraw consent for marketing emails at any time (one-click unsubscribe in all emails)

To exercise these rights, contact us at hello@kiwicode.net.nz.

6. Data Retention

• Shop accounts — data retained while account is active, deleted within 30 days of account closure on request
• Collector accounts — data retained while account is active, deleted within 30 days on request
• Enquiry and form submissions — retained for 12 months then deleted
• Reviews — retained indefinitely as a trust record for the platform, unless removed following a report or a valid deletion request
• Billing records — retained for 7 years as required by New Zealand tax law

7. Cookies

We use cookies for authentication (keeping you logged in) and session management. We do not use advertising or tracking cookies. You can disable cookies in your browser settings but this may affect your ability to log in.

8. Children's Privacy

MediaMate is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with their information, please contact us and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify shop owners of material changes via email. The date at the top of this page indicates when it was last updated.

10. Contact

For privacy-related questions or requests, contact us at:

Kiwi Code NZ
Email: hello@kiwicode.net.nz
Shop account support: support@kiwicode.net.nz
Website: kiwicode.net.nz