Operator: Dollar King Ltd (Trading as TWO DOLLAR THINGS PLUS)
Effective Date: October 2026 | Jurisdiction: New Zealand
- Scope & Objective
1.1 Dollar King Ltd (“we”, “our”, “us”) is committed to protecting the privacy and personal
information of our customers and members of the TWO DOLLAR THINGS PLUS Loyalty
Programme (“My Pocket Plus”, hereinafter referred to as “the Programme”).
1.2 This Privacy Policy governs the collection, storage, use, disclosure, transfer, and
destruction of personal data in strict compliance with the New Zealand Privacy Act 2020
(including the 13 Information Privacy Principles), Meta Platform Terms, Meta Developer
Policies, and Google Play Developer Policies. - Information We Collect
2.1 Information You Provide Directly:
Information provided during manual registration, including full name, email address,
phone number, residential suburb and postcode, date of birth (or age verification
confirmation), and gender;
Communications, customer support inquiries, and feedback submitted to us.
2.2 Information Collected via Social Authentication (Google & Facebook):
When you register or sign in using Google Sign-In or Facebook Login, we receive
authorized public profile information from Meta or Google via secure APIs. This may
include your full name, profile email address, and unique third-party user identifier
(User ID);
We strictly do NOT collect, access, or store password credentials associated with
your Google or Facebook accounts.
2.3 Transaction & Loyalty Activity Data:
Purchase history, eligible spent amounts, point earn/redemption records, issued
vouchers, and Member Price transaction history across participating stores.
2.4 Technical & Mobile Device Information:
Mobile device identifier (IP address, OS version, device model), app usage analytics,
unique loyalty barcode identifiers, and push notification tokens.
3. Purpose & Legal Basis for Data Use
3.1 We collect and process personal data solely for legitimate business purposes, including:
Administering and operating the My Pocket Plus Programme, points calculation, and
voucher issuance;
Verifying identity, validating eligibility, and preventing duplicate or fraudulent
accounts;
Facilitating secure social sign-in via Google and Meta API protocols;
Sending transactional messages, point balance updates, and voucher expiration
alerts;
Delivering personalized promotional offers, marketing communications, and store
news (where explicit consent has been granted);
Complying with statutory obligations under New Zealand tax, commercial, and
consumer protection laws.
- Disclosure & Data Sharing
4.1 Zero Sale Policy: Dollar King Ltd DOES NOT sell, rent, trade, or commercialize
personal data or user contact lists to third parties under any circumstances.
4.2 Authorized Service Providers: We may share data strictly with trusted service
providers who perform operational functions on our behalf (e.g., cloud hosting providers,
mobile app infrastructure platforms, SMS/email gateway providers). All such service
providers are bound by strict contractual confidentiality agreements and privacy safeguards.
4.3 Legal Necessity: We may disclose personal information where required by New
Zealand law, court order, regulatory direction, or law enforcement authority. - Third-Party Social Login Compliance (Google & Meta/Facebook)
5.1 Data access granted through Google Sign-In or Facebook Login is strictly confined to
scope limits explicitly approved by the user during the OAuth authorization prompt.
5.2 Data retrieved via Meta APIs or Google APIs is handled in full adherence to Meta
Developer Policies, Meta Data Processing Terms, and Google Play Developer Policies. - Data Retention & Erasure
6.1 Retention Period: We retain personal data only for as long as necessary to fulfill the
purposes outlined in this Privacy Policy, maintain active membership accounts, or comply
with New Zealand statutory record-keeping requirements.
6.2 Erasure Standard: When personal information is no longer required, we securely
destroy or permanently anonymize the data in accordance with Privacy Act 2020 standards. - Account Deletion & User Data Removal
Members may request immediate account deletion and full data erasure through any of the
following mechanisms:
7.1 In-App Deletion: Directly via the Mobile App Settings menu.
7.2 Meta (Facebook) Account Integration: By removing the My Pocket Plus app
via Facebook Account Settings (“Apps and Websites”), which triggers an automated
or manual data deletion request.
7.3 Google Account Integration: By revoking My Pocket Plus access via Google
Account Settings (“Security” > “Third-party apps with account access”).
7.4 Direct Email or Web Request: By submitting a formal request via email to
rewards@twodollarthings.co.nz or through our dedicated web form.
7.5 Processing Timeframe & Effect: Upon receipt and confirmation of a deletion
request through any channel, all associated personal records, authentication tokens,
accumulated points, and vouchers will be permanently erased within thirty (30) days.
8. Security Safeguards & Privacy Breach Notification
8.1 We implement robust administrative, physical, and technical security measures
(including end-to-end API encryption, secure cloud infrastructure, and strict role-based
access controls) to protect personal data against unauthorized entry, loss, misuse, or
alteration.
8.2 Notifiable Privacy Breaches: In the event of a privacy breach or security incident that
has caused, or is reasonably likely to cause, serious harm to any individual, we will notify the
affected individuals and the New Zealand Office of the Privacy Commissioner as soon as
practicable, in full compliance with Section 117 of the New Zealand Privacy Act 2020.
- Your Rights Under Privacy Act 2020
9.1 Under the New Zealand Privacy Act 2020, you possess explicit rights to:
Request confirmation of whether we hold personal information about you;
Request access to your personal information held by us;
Request correction of incorrect, incomplete, or out-of-date personal information;
Opt out of marketing communications at any time via the unsubscribe link in emails
or in-app notification toggles. - Privacy Officer & Contact Information
10.1 If you have any questions, concerns, access requests, or privacy complaints regarding
this Privacy Policy or our data processing practices, please contact our designated Privacy
Officer:
Privacy Officer
Dollar King Ltd (Trading as TWO DOLLAR THINGS PLUS)
Email: rewards@twodollarthings.co.nz
Address: Auckland, New Zealand
10.2 If you are not satisfied with our response, you have the right to lodge a complaint with
the New Zealand Office of the Privacy Commissioner (www.privacy.org.nz).