Last updated: 1 June 2026
This policy covers both Starlight Guardians (starlightguardians.co.nz) and Spooky (spooky.nz), both operated by Spooky Ltd, Dunedin, New Zealand. We take privacy seriously — particularly the privacy of children and their families.
Spooky Ltd operates two brands:
We are based in Dunedin, New Zealand. You can contact us at hello@spooky.nz.
This policy complies with the New Zealand Privacy Act 2020 and its 13 Information Privacy Principles.
A note on children's privacy: We deliberately minimise the information we hold about children. We collect a Guardian name (which we encourage to be a pseudonym), not a real name. We do not collect date of birth, school, or any other identifying information about your child. The Guardian name combined with your delivery address is the minimum required to personalise the programme.
We use the information we collect to:
We do not use your information for advertising, profiling, or any purpose not listed above.
We share your information only where necessary to operate the business:
We do not sell your information. We do not share it with advertisers. We do not share it with any third party beyond those listed above.
All third-party providers are required to handle your information securely and in accordance with applicable privacy law.
Your information is stored on:
We use industry-standard security practices including:
We retain your order information for seven years as required by NZ tax law. We retain Guardian programme information for the duration of your subscription plus one year. You may request earlier deletion — see Section 7.
Our websites use minimal cookies necessary for the site to function, including session cookies for shopping cart functionality. We do not use advertising cookies, tracking pixels, or third-party analytics that identify you personally.
You have the right to:
To exercise any of these rights, email us at hello@spooky.nz. We will respond within 20 working days as required by the Privacy Act 2020.
If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner at privacy.org.nz.
We send the following emails, which are necessary to operate the service:
You may unsubscribe from non-essential communications at any time using the unsubscribe link in any email, or by contacting us directly. Order confirmation and shipping emails cannot be disabled as they are essential to fulfilling your order.
Starlight Guardians is a programme for children aged 4–8, purchased by their parents or guardians. We do not knowingly collect personal information directly from children. All personal information is collected from the purchasing adult.
We strongly encourage parents to use a Guardian identity name (pseudonym) at checkout rather than their child's real name. This is the name that appears on all HQ communications and is the only child-identifying information we hold.
If you believe we have inadvertently collected personal information about a child without appropriate parental consent, please contact us at hello@spooky.nz and we will delete it promptly.
We may update this policy from time to time. We will notify you of significant changes by email if you are an active customer. The current version will always be available at starlightguardians.co.nz/privacy and spooky.nz/privacy.
Continued use of our services after a policy update constitutes acceptance of the updated policy.
For any privacy-related questions or requests: