Operator: Dollar King Ltd (Trading as Two Dollar Things Plus)
Effective Date: October 2026 | Jurisdiction: New Zealand
- Scope & Objective
- Dollar King Ltd (“we”, “our”, “us”) is committed to protecting the privacy and personal information of our customers and members of the TWO DOLLAR THINGS PLUS Loyalty Programme (“My Pocket Plus”, hereinafter referred to as “the Programme”).
- This Privacy Policy governs the collection, storage, use, disclosure, transfer, and destruction of personal data in strict compliance with the New Zealand Privacy Act 2020 (including the 13 Information Privacy Principles), Meta Platform Terms, Meta Developer Policies, and Google Play Developer Policies.
- Information We Collect
- Information You Provide Directly:
- Information provided during manual registration, including full name, email address, phone number, residential suburb and postcode, date of birth (or age verification confirmation), and gender;
- Communications, customer support inquiries, and feedback submitted to us.
- Information Collected via Social Authentication (Google & Facebook):
- When you register or sign in using Google Sign-In or Facebook Login, we receive authorized public profile information from Meta or Google via secure APIs. This may include your full name, profile email address, and unique third-party user identifier (User ID);
- We strictly do NOT collect, access, or store password credentials associated with your Google or Facebook accounts.
- Transaction & Loyalty Activity Data:
- Purchase history, eligible spent amounts, point earn/redemption records, issued vouchers, and Member Price transaction history across participating stores.
- Technical & Mobile Device Information:
- Mobile device identifier (IP address, OS version, device model), app usage analytics, unique loyalty barcode identifiers, and push notification tokens.
- Information You Provide Directly:
- Purpose & Legal Basis for Data Use
- We collect and process personal data solely for legitimate business purposes, including:
- Administering and operating the My Pocket Plus Programme, points calculation, and voucher issuance;
- Verifying identity, validating eligibility, and preventing duplicate or fraudulent accounts;
- Facilitating secure social sign-in via Google and Meta API protocols;
- Sending transactional messages, point balance updates, and voucher expiration alerts;
- Delivering personalized promotional offers, marketing communications, and store news (where explicit consent has been granted);
- Complying with statutory obligations under New Zealand tax, commercial, and consumer protection laws.
- We collect and process personal data solely for legitimate business purposes, including:
- Disclosure & Data Sharing
- Zero Sale Policy: Dollar King Ltd DOES NOT sell, rent, trade, or commercialize personal data or user contact lists to third parties under any circumstances.
- Authorized Service Providers: We may share data strictly with trusted service providers who perform operational functions on our behalf (e.g., cloud hosting providers, mobile app infrastructure platforms, SMS/email gateway providers). All such service providers are bound by strict contractual confidentiality agreements and privacy safeguards.
- Legal Necessity: We may disclose personal information where required by New Zealand law, court order, regulatory direction, or law enforcement authority.
- Third-Party Social Login Compliance (Google & Meta/Facebook)
- Data access granted through Google Sign-In or Facebook Login is strictly confined to scope limits explicitly approved by the user during the OAuth authorization prompt.
- Data retrieved via Meta APIs or Google APIs is handled in full adherence to Meta Developer Policies, Meta Data Processing Terms, and Google Play Developer Policies.
- Data Retention & Erasure
- Retention Period: We retain personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, maintain active membership accounts, or comply with New Zealand statutory record-keeping requirements.
- Erasure Standard: When personal information is no longer required, we securely destroy or permanently anonymize the data in accordance with Privacy Act 2020 standards.
- Account Deletion & User Data Removal
- Members may request immediate account deletion and full data erasure through any of the following mechanisms:
- In-App Deletion: Directly via the Mobile App Settings menu.
- Meta (Facebook) Account Integration: By removing the My Pocket Plus app via Facebook Account Settings (“Apps and Websites”), which triggers an automated or manual data deletion request.
- Google Account Integration: By revoking My Pocket Plus access via Google Account Settings (“Security” > “Third-party apps with account access”).
- Direct Email or Web Request: By submitting a formal request via email to rewards@twodollarthings.co.nz or through our dedicated web form.
- Processing Timeframe & Effect: Upon receipt and confirmation of a deletion request through any channel, all associated personal records, authentication tokens, accumulated points, and vouchers will be permanently erased within thirty (30) days.
- Members may request immediate account deletion and full data erasure through any of the following mechanisms:
- Security Safeguards & Privacy Breach Notification
- We implement robust administrative, physical, and technical security measures (including end-to-end API encryption, secure cloud infrastructure, and strict role-based access controls) to protect personal data against unauthorized entry, loss, misuse, or alteration.
- Notifiable Privacy Breaches: In the event of a privacy breach or security incident that has caused, or is reasonably likely to cause, serious harm to any individual, we will notify the affected individuals and the New Zealand Office of the Privacy Commissioner as soon as practicable, in full compliance with Section 117 of the New Zealand Privacy Act 2020.
- Your Rights Under Privacy Act 2020
- Under the New Zealand Privacy Act 2020, you possess explicit rights to:
- Request confirmation of whether we hold personal information about you;
- Request access to your personal information held by us;
- Request correction of incorrect, incomplete, or out-of-date personal information;
- Opt out of marketing communications at any time via the unsubscribe link in emails or in-app notification toggles.
- Under the New Zealand Privacy Act 2020, you possess explicit rights to:
- Privacy Officer & Contact Information
- If you have any questions, concerns, access requests, or privacy complaints regarding this Privacy Policy or our data processing practices, please contact our designated Privacy Officer:
Privacy Officer
Dollar King Ltd (Trading as TWO DOLLAR THINGS PLUS)
Email: rewards@twodollarthings.co.nz
Address: Auckland, New Zealand - If you are not satisfied with our response, you have the right to lodge a complaint with the New Zealand Office of the Privacy Commissioner (www.privacy.org.nz).
- If you have any questions, concerns, access requests, or privacy complaints regarding this Privacy Policy or our data processing practices, please contact our designated Privacy Officer: