PRIVACY
Privacy Policy
Effective 25 September 2026
Who we are
YourMugshots is a personalized-gift business based at 82 West Belt, Rangiora 7400, New Zealand. Questions about privacy or your information can be sent to info@yourmugshots.co.nz or raised by phone on Bill - 027 810 0091 or Margaret - 021 254 5478.
Information we collect
When you place an order we may collect your name, email address, phone number, delivery address, order details, personalized wording, design instructions and the photos or artwork you choose to upload. If you choose to create an account, we also store your reusable profile details and a secure password hash; we do not store your readable password. The server also records limited technical and security information such as IP address, request time, failed logins, blocked requests and similar security events.
How we use it
We use customer information to prepare and manage your order, create and review design proofs, arrange payment, produce and dispatch personalized products, provide customer support and protect the website from abuse. Server-side visitor analytics are used to understand product interest, site navigation, sales conversion and where customers may be abandoning the purchase process. We do not use customer artwork for advertising or unrelated purposes without permission. Customer reviews or finished-product photos are only published to the public showcase after the customer submits them and an Admin approves them.
Artwork and photo storage choices
Your uploaded artwork and customer photo uploads are stored privately on the YourMugshots server and are not automatically emailed or published. At checkout you can choose Save my artwork for future orders. On the Send Photos page you can separately choose Keep these photos in my YourMugshots account for future orders. The customer-photo option is off by default. When it is off, the upload is marked Delete after Order for the YourMugshots team; when enabled, it is marked Keep for Future. Send Photos uploads are not automatically linked to a specific order because an upload may relate to a later or different order. The YourMugshots team manages deletion of Delete after Order media when the relevant work is complete.
If you have a customer account, My Account shows your Send Photos folders and lets you permanently delete individual files or an entire folder. Deleting your reusable account profile also deletes these reusable customer photo folders. Deleting files before production is complete may prevent us from finishing the order. Media deletion does not necessarily delete accounting, transaction, order-status or other records that we may still need for legitimate business or legal purposes.
Visitor analytics, GeoIP and IP security
The website records limited server-side visitor analytics so YourMugshots can understand which public pages and products are being viewed and whether visitors progress from product pages to the bag, checkout and orders. This may include public IP address, approximate country/region/city and timezone derived from that IP address, page path, request time, referring website, browser/user-agent information and aggregate pageview counts. Static files, Admin pages, customer account pages, checkout, order tracking and recognised automated bots are excluded from the visitor analytics system.
The website is intended for Australia and New Zealand. For public visitors, the server may send the visitor's public IP address to ipwho.is to derive approximate GeoIP information used for geo-access control, operational analytics and local date/time answers in Mugsy chat. GeoIP location is approximate and is not precise GPS/device location. Your name, contact details, order contents and artwork are not included in that lookup. GeoIP results are cached by our server for up to 30 days to reduce repeated lookups. Security logs may retain IP addresses for abuse prevention and investigation.
Visitor analytics are stored on the YourMugshots server rather than sent to an advertising analytics platform. The analytics store is bounded to recent visitor records and rolling daily summaries. Local/private and deliberately trusted testing IP addresses are excluded from visitor analytics so administration/testing does not distort sales traffic reporting.
Storage and security
Order, customer, artwork, proof and security information is managed on the YourMugshots server. Administrative access is password-protected and the website includes request validation, rate limiting, session invalidation after password resets, and automatic blocking for recognised scanner/exploit behaviour. Server-side backups may contain order, customer and uploaded-file data for disaster recovery and are subject to backup retention controls. No security system can guarantee absolute protection, so we limit collection and provide self-service controls where appropriate.
Access, correction and deletion requests
If you have a customer account, My Account lets you update saved contact/address details, download a copy of your reusable account data and linked order history, review/delete customer photo uploads, and delete your reusable account profile. Account deletion does not automatically erase historical order/accounting records that may still be required for legitimate business or legal purposes, but reusable customer photo folders linked to the account are deleted. You may also contact us to request access, correction or deletion where appropriate. Order artwork has a separate self-service deletion control on the secure tracking page.
Contact
YourMugshots
82 West Belt, Rangiora 7400, New Zealand
Bill - 027 810 0091 · Margaret - 021 254 5478
info@yourmugshots.co.nz
