Last updated: 12 May 2026

‍

Escea Limited (“Escea”, “we”, “our”, or “us”) is committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy explains how we collect, use, store, disclose, and protect your personal information when you visit our websites, contact us, purchase or enquire about our products, or otherwise interact with us. It applies to individuals in New Zealand, the European Union, the United Kingdom, the United States (including California) and all other regions in which we operate.

‍

By using our websites or providing personal information to us, you acknowledge that you have read and understood the practices described in this Policy.

‍

‍

1. Information We Collect

We collect personal information that you choose to provide when you interact with our websites, submit an enquiry, register for downloads, enter competitions, sign up for marketing communications, request service or warranty assistance, or otherwise engage with our team. This information may include your name, email address, phone number, residential or postal address, location, and any other details relevant to your enquiry or project.

‍

In addition, when you visit our websites, certain information is collected automatically through cookies, analytics tools, and similar technologies. This may include your IP address, browser type, device information, pages visited, time spent on the site, and your interactions with website features. We may also receive information from third-party platforms that assist us with analytics, advertising, customer service, and operational functions.

‍

2. How We Use Your Information

We use personal information to provide and improve our products, services, and customer experience. This includes responding to enquiries, supplying requested materials or information, fulfilling administrative and support requirements, managing customer relationships, providing technical and warranty support, and maintaining the functionality and security of our websites.

‍

As part of customer support and quality assurance, phone calls may be recorded for training, service quality, dispute resolution, and safety review. Where calls are recorded, individuals are informed at the start of the call. Recordings are retained for 90 days and deleted automatically unless required for an active dispute, complaint, or safety investigation. Recordings retained for training beyond this period are anonymised.

‍

If you subscribe to our newsletters or marketing communications, we will use your information to send you updates, promotional content, product news, and other material we believe may interest you. Where required (such as in the EU), marketing subscriptions use a double opt-in process.

‍

We also use analytics and advertising technologies to understand how our websites are used, improve performance, and present advertising that may be more relevant to you.

‍

Third-Party Tools and Automated Features

Some of the third-party platforms we use to deliver our services — including customer support, analytics, and marketing — may incorporate automated features such as analytics processing, ticket routing, or engagement tracking. Where these tools process personal data, they do so under our instructions and are governed by data processing agreements. We do not use automated decision-making that produces legal or similarly significant effects on individuals.

‍

Legal Bases for Processing (EU & UK GDPR)

Where we process personal information relating to individuals in the European Union or United Kingdom, we rely on one or more of the following lawful bases:

• Consent – for newsletters, marketing communications, and non-essential cookies or tracking technologies.
• Performance of a contract – where processing is necessary to provide a quote, fulfil an order, or provide warranty or service support.
• Legitimate interests – for responding to enquiries, providing customer support, improving our websites, maintaining system security and performance, and conducting limited analytics (where permitted by law).
• Legal obligations – where processing is required to comply with accounting, tax, health and safety, or regulatory requirements.

‍

3. Disclosure of Personal Information

We do not sell your personal information. However, we may disclose your information to trusted service providers who assist us in delivering our products and services. These may include:

• Website hosting and infrastructure providers (such as Webflow and Cloudflare)
• Analytics and advertising partners (such as Google, Meta, Microsoft, LinkedIn, Pinterest, Reddit, DSPs, and other third-party marketing platforms)
• Email and marketing automation providers (such as Campaign Monitor)
• Customer service platforms (such as Zendesk)
• CRM systems (such as SugarCRM or any replacement system we may implement)
• Automation tools (such as Zapier)
• Third-party developers, contractors, or partners who support our digital infrastructure

These service providers may process personal information on our behalf only for the purposes we specify. They are required to maintain the confidentiality and security of the information and may not use it for their own purposes.

‍

We may also disclose personal information where required to comply with legal or regulatory obligations, to protect the rights and safety of Escea or others, or where you have otherwise authorised the disclosure.

‍

Requesting a Quote (Design Your Fire): If you use our Design Your Fire tool to request a quote, the details you provide are sent to the authorised retailer you select so they can prepare your quote and respond to your enquiry. That retailer is an independent controller of your information and is responsible for how it uses your details under its own privacy policy. We send these requests using our email provider, Campaign Monitor, and retain a record of the request for 24 months.

‍

4. International Data Transfers

Escea stores personal information on secure servers located in New Zealand. Some of our third-party service providers process information in other countries, including the United States and potentially other jurisdictions.

‍

Where personal information relating to individuals in the European Economic Area (EEA) or United Kingdom is transferred outside those regions, we rely on the European Commission’s Standard Contractual Clauses (SCCs) or equivalent lawful transfer mechanisms. Additional safeguards are applied where required to ensure that your information remains protected.

‍

5. Cookies and Tracking Technologies

Our websites use cookies and similar technologies to support essential site functionality, understand how the site is used, and improve the overall visitor experience. Cookies may also be used for advertising and measurement purposes, including remarketing and audience insights.

‍

Visitors from regions requiring consent for non-essential cookies (such as the EU and UK) will be presented with a cookie banner that enables you to accept, reject, or manage your cookie preferences. You can also modify your browser settings to manage or delete cookies at any time.

‍

Global Privacy Control (GPC)

We recognise browser-based Global Privacy Control (GPC) signals. Where a GPC signal is detected, we treat it as a valid request to opt out of the sharing of personal information for applicable purposes under California privacy law.

‍

6. Marketing Communications

If you choose to receive marketing communications from us, we will use your personal information to send newsletters, promotions, product updates, and other relevant material. You may unsubscribe from marketing communications at any time by using the link provided in our emails or by contacting us directly.

‍

Where applicable, including in the EU, newsletter subscriptions use a double opt-in process to confirm your consent before communications commence.

‍

7. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by law. We maintain internal data retention schedules that guide how long different categories of information are held. These schedules are available upon request.

‍

8. Your Rights (EU & UK GDPR)

If you are located in the European Union or United Kingdom, you have certain rights in relation to your personal information. These may include the right to:

• Access the personal information we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of your personal information
• Object to or restrict the processing of your information
• Withdraw consent at any time where consent is the lawful basis for processing
• Request the transfer of your information to another organisation
• Lodge a complaint with your local data protection authority

‍

To exercise any of these rights, please contact us using the details below.

‍

You also have the right to lodge a complaint with your local supervisory authority. A list of EU data protection authorities is available at: https://www.edpb.europa.eu/about-edpb/about-edpb/members_en

‍

9. Your Rights (Australia)

If you are located in Australia, the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) give you the right to access the personal information we hold about you, request correction of inaccurate information, and make a complaint about how we handle your personal information. We will respond to requests within a reasonable period. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

‍

10. Your Rights (California – CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act as amended by the California Privacy Rights Act (CPRA) provides you with the following rights in relation to your personal information:

• Know the categories and specific pieces of personal information we have collected about you, the sources of that information, the purposes for which it is collected, and the categories of third parties with whom it is shared
• Access the personal information we hold about you
• Request deletion of personal information we have collected from you, subject to certain legal and operational exceptions
• Correct inaccurate personal information
• Opt out of the sale or sharing of personal information, including sharing for cross-context behavioural advertising
• Limit the use and disclosure of sensitive personal information, where applicable
• Not be discriminated against for exercising any of your privacy rights

‍

Escea does not sell personal information.

‍

Escea may share personal information for purposes such as website analytics, performance measurement, and advertising, which may be considered “sharing” under California law. Sharing does not involve monetary consideration.

‍

Categories of Personal Information We Collect and Share

We collect this information directly from you, automatically through cookies and analytics when you use our websites, and from analytics and advertising partners.

In the past 12 months we have collected the following categories of personal information. For each, this is what it includes, why we collect it, and the categories of third parties we may share it with:

• Identifiers — such as your name, email address, phone number, postal address, IP address, and cookie or device identifiers. Collected to respond to enquiries, provide products and support, deliver marketing you have opted into, and maintain site security. Shared with hosting, CRM, email and marketing, customer support, advertising partners, and automation providers.
• Customer records — such as your name, contact details, postal address, warranty and product registration, and transaction data. Collected to fulfil enquiries, provide warranty and service support, and for accounting. Shared with our CRM, support platforms, and accounting systems.
• Commercial information — such as enquiry and project details, products enquired about, and purchase and warranty history. Collected to manage the customer relationship and provide support. Shared with our CRM and support platforms.
• Internet or network activity — such as pages viewed, clicks, time on site, and interactions with ads and site features. Collected for analytics, site performance, and advertising measurement. Shared with analytics and advertising partners.
• Geolocation data — approximate location derived from your IP address. Collected for regional content, analytics, and security. Shared with analytics and advertising partners.
• Audio and electronic information — phone call recordings and transcripts. Collected for training, quality assurance, dispute resolution, and safety review. Shared with telephony and support providers, and used internally.
• Inferences — interest and audience profiles drawn from your browsing and ad interactions. Collected for advertising relevance and measurement. Shared with advertising partners.
• Sensitive personal information — we do not intentionally collect any.

‍

The categories we “share” for cross-context behavioural advertising under California law are Internet or network activity, Geolocation data, and Inferences, disclosed to our advertising partners. We do not sell personal information for monetary consideration. You may opt out of this sharing using the “Do Not Sell or Share My Personal Information” link in our website footer or by sending a Global Privacy Control (GPC) signal, which we honour automatically.

‍

Automated Decision-Making Technology (ADMT)

We do not use automated decision-making technology to make significant decisions about California consumers (such as those affecting housing, employment, credit, healthcare, or education). If this changes in the future, we will update this Policy and provide any required pre-use notices and opt-out rights.

‍

Exercising Your California Privacy Rights

You may submit a request by:

• Emailing digital@escea.com; or
• Using the “Do Not Sell or Share My Personal Information” link available on our website

We may need to verify your identity before processing your request. We will respond to verified requests within 45 days, unless an extension is permitted under law, in which case you will be notified.

‍

Non-Discrimination

We will not discriminate against you for exercising any of your rights under the CCPA/CPRA. This means we will not deny you goods or services, charge you different prices, or provide a different level of quality because you exercised a privacy right.

‍

11. Security

We take reasonable and appropriate technical, administrative, and physical measures to safeguard personal information from loss, misuse, unauthorised access, disclosure, alteration, or destruction. While no method of storage or transmission is completely secure, we continuously work to protect your information.

‍

12. Children’s Privacy

Our products and services are not directed to children under the age of 16, and we do not knowingly collect personal information from minors. If we become aware that a child’s information has been collected unintentionally, we will take reasonable steps to delete it.

‍

13. External Links

Our websites may contain links to external sites. We are not responsible for the privacy practices or content of these third-party websites, and we encourage you to review their privacy policies before providing personal information.

‍

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices, technology, or legal requirements. The latest version will always be available on our website, and significant changes will be communicated where appropriate.

‍

15. Contact Us

If you have any questions about this Privacy Policy or the way your personal information is handled, please contact:

‍

Escea Limited

17 Carnforth Street

Dunedin 9018

New Zealand

digital@escea.com

+64 3 478 8220

For individuals located in the European Union, Escea Limited has appointed the following representative under Article 27 of the EU GDPR:

‍

EU Representative

Mike Van Loon – European Sales Manager

Email: mike.vanloon@escea.com

Address: Escea Fireplaces, Boulevard du Régent 54 PMB, Bruxelles, 1000

EU residents may contact our representative for matters relating to the processing of their personal data or to exercise any of their rights under the GDPR.

‍