Last updated: 5 October 2026

Ironclad makes cookware to be used, kept and handed down. The Ironclad Vault is designed to carry the knowledge that belongs with it: your guarantee, recipes, care information, product details, and the family recipes and stories you choose to preserve.

This Privacy Policy explains how The Ironclad Pan Company Limited (including its subsidiaries (whether incorporated in New Zealand or elsewhere), related companies (as defined in section 2(3) of the Companies Act 1993), and its and their respective successors and permitted assigns), trading as The Ironclad Co. (Ironclad, we, us or our), collects, holds, uses and shares personal information through the Ironclad Vault, our websites, customer service and related services.

We handle personal information in accordance with applicable privacy laws, including the Australian Privacy Act 1988 and the Australian Privacy Principles, and the New Zealand Privacy Act 2020 and its Information Privacy Principles.

1. What information we collect

Depending on how you use our website, customer services, Ironclub membership and the Ironclad Vault, we may collect:

• Account information, including your name, email address, phone number, country, password or other sign-in credentials.
• Product and guarantee information, including the Ironclad product you own or have purchased from us, its serial or registration details, date and place of purchase, proof of purchase, gift details and guarantee history.
• Ironclad Vault content, including recipes, notes, photographs, stories, traditions, people or family members named in that content, and any other material you choose to add.
• Family and invitation information, including the name and email address of anyone you invite to view or contribute to your Ironclad Vault or receive it in the future.
• Order and customer-service information, including delivery and billing details, purchase history, returns, enquiries, feedback, complaints and correspondence with us. Payment card details are processed by our payment providers and are not stored by us in full.
• Marketing preferences, including whether you want to receive Ironclad news, recipes, product releases and other communications.
• Technical and usage information, including your IP address, device and browser information, login activity, pages or features used, referring pages, approximate location, cookie identifiers, and diagnostic or security information.
• Information from connected services, if you choose to sign in through, link to, or interact with a third-party service.

You can choose not to provide this information to us, but that may impact on our ability to provide services and products to you and the functionality of our websites and the Ironclad Vault. Please do not add sensitive personal information to the Ironclad Vault unless it is genuinely needed and you are comfortable with us holding it.

2. How we collect information

We may collect personal information directly from you when you:

• create or use an Ironclad Vault account;
• register an Ironclad product or guarantee;
• add a recipe, image, story or other content to your Ironclad Vault;
• invite someone to your Ironclad Vault;
• place an order or contact us;
• join Ironclub or subscribe to marketing;
• respond to a survey, competition or promotion; or
• use our websites, emails and digital services.

We may also receive information from an authorised family member, a gift purchaser, our ecommerce and delivery partners, sign-in providers, or other service providers that support us and the Ironclad Vault.

If you give us personal information about another person, including in a recipe, story, photograph or invitation, you must ensure that you have their (or their parent/legal guardian if they are under 18) explicit permission to do so and you have informed them of how we may use it under this policy.

You may sometimes deal with us without identifying yourself or by using a pseudonym. This may not be possible where we need your identity to provide a service, register a guarantee, respond to a request, or meet a legal obligation.

3. Why we use personal information

We collect, hold, use and share personal information where reasonably necessary to:

• create, operate and secure your Ironclad Vault account;
• register and administer your Three Generation Guarantee®;
• connect the right recipes, care advice and product knowledge to the Ironclad product that you own;
• store, organise and display the content you add to your Ironclad Vault;
• allow you to invite family members or other people to your Ironclad Vault and manage their access;
• preserve and transfer an Ironclad Vault when you ask us to, including when an Ironclad product is handed to another generation;
• process orders, deliveries, returns and payments;
• provide customer service and respond to enquiries, feedback or complaints;
• improve the Ironclad Vault, our websites, our products and our services;
• carry out marketing and product analysis;
• understand how our websites, emails and services are used;
• send service messages, security notices and important changes;
• send marketing communications where you have consented or where the law otherwise permits it;
• detect fraud, misuse, security incidents and technical problems;
• protect our rights, our customers and the public; and
• comply with the law, regulatory, tax and/or accounting requirements and resolve disputes.

We may combine information from your Ironclad Vault, purchases and interactions with Ironclad so that we can provide one connected service and avoid asking you for the same information repeatedly.

We do not sell your personal information.

4. Your Ironclad Vault content

The recipes, photographs, stories and traditions you add to the Ironclad Vault remain your content. We use that content only as needed to provide, maintain, protect and improve the Ironclad Vault, follow your instructions, and meet our legal obligations.

You control who you invite to your Ironclad Vault. People you authorise may be able to see, add, change, download or remove content, depending on the permissions available. Please invite only people you trust. You are responsible for checking that an invitation is sent to the right person.

If ownership or control of an Ironclad Vault is transferred, the new authorised holder may be able to access its existing content. Before completing a transfer, we will take reasonable steps to confirm that the person requesting it is authorised and to protect the interests of existing Ironclad Vault members.

We will not use private Ironclad Vault recipes, photographs or family stories in Ironclad advertising or public content without separate permission from the person entitled to give it.

5. Who we share information with

We may share personal information with:

• people you invite or authorise to access your Ironclad Vault;
• companies that provide hosting, data storage, authentication, website, ecommerce, payment, email, analytics, customer support, security, fulfilment and delivery services;
• our service providers and suppliers to enable our use of your information for the purposes set out above;
• professional advisers, insurers, auditors and other advisers who owe duties of confidentiality;
• a purchaser, investor or successor if all or part of our business is reorganised, financed, sold or transferred, subject to appropriate confidentiality and privacy protections;
• our related companies who may need to use your personal information for the same purposes as us;
• debt collection agencies where necessary to help us collect any money that you may owe us;
• regulators, courts, law-enforcement agencies or other parties where required or authorised by law; and
• any other person with your consent or at your direction.

Our service providers may process personal information only for the services they provide to us, subject to their contracts and applicable law.

6. Information held or accessed overseas

Ironclad operates across Australia and New Zealand and uses service providers that may store or access personal information in other countries.

Personal information may be disclosed to recipients in Australia, New Zealand, the United States and other countries in which our technology and support providers operate.

When personal information is disclosed outside of Australia or New Zealand, we take reasonable steps to ensure it receives appropriate protection. This may include checking the privacy laws that apply to the recipient, using contractual safeguards, and limiting the information disclosed and how it may be used.

7. Cookies, analytics and similar technologies

We and our service providers may use cookies and similar technologies to:

• provide you with a more enjoyable, customised service and experience on our website;
• keep you signed in and remember your preferences;
• operate and secure the Ironclad Vault;
• help us develop and deliver better services and products which are customised to our customers' interests;
• understand performance and how features are used;
• help us manage security and fraud risks;
• diagnose errors; and
• measure advertising and show more relevant Ironclad communications.

You can control cookies through the privacy settings made available on our websites and through your browser settings. Blocking some cookies may prevent parts of our websites or the Ironclad Vault from working properly.

Our online store uses advertising and analytics technologies that may use information about activity across different websites. Where required, we will ask for consent or provide a way to opt out.

8. Marketing

If you choose to receive Ironclad marketing communications, we may send you product news, recipes, offers and other communications. You can unsubscribe at any time using the link in an email or by contacting us.

Unsubscribing from marketing will not stop service messages that are needed to operate your account, administer your guarantee, protect security or tell you about important changes.

We will send commercial electronic messages in accordance with applicable Australian and New Zealand law.

9. Children and family information

Our websites and the Ironclad Vault are intended for people who have reached the age of 18. A parent or guardian may add family recipes, photographs or stories involving children, but should consider the child’s privacy and share only what is appropriate. Photos of children in any state of undress, or in vulnerable positions should not be uploaded to the Ironclad Vault and may be removed by us.

If we learn that a child has created an account or provided personal information without the required permission, we may suspend the account and delete the information. A parent or guardian can contact us at hello@ironcladpan.com if they believe that this has happened.

10. How we protect information

We use reasonable administrative, technical and physical safeguards designed to protect personal information from loss, misuse, interference, and unauthorised access, modification or disclosure. These include encrypted connections and controls designed to limit access to personal information.

No internet service can be guaranteed to be completely secure. Please use a strong, unique password, keep your sign-in details private and tell us promptly if you believe your account has been compromised.

If a privacy breach occurs, we will investigate it and notify affected people and the relevant regulator where required by law.

11. How long we keep information

We keep personal information only for as long as it is reasonably needed for the purposes described in this policy, to provide the Ironclad Vault as an intergenerational archive, or to meet legal, tax, accounting, fraud-prevention and dispute-resolution requirements.

The Ironclad Vault is intended to remain with an Ironclad product across generations. For that reason, Ironclad Vault content and product-registration records may be held for longer than ordinary customer-account information. We will not treat a long period without a login as an instruction to delete an intergenerational Ironclad Vault.

If you close your account or request deletion, we will delete or de-identify information that we are not required or permitted to retain. Some information may remain for a limited period in backups or where it forms part of a shared Ironclad Vault. We may retain order, guarantee and support records where reasonably needed to meet our legal obligations, honour the guarantee, prevent fraud or resolve disputes.

12. Access, correction, deletion and other choices

You may ask us to:

• give you access to personal information we hold about you;
• correct information that is inaccurate, out of date, incomplete, irrelevant or misleading;
• delete information where applicable;
• close your account or remove content you have added;
• withdraw consent where our use depends on consent; or
• change your marketing choices.

Some information may be viewed or changed directly in your Ironclad Vault settings. For other requests, contact our Privacy Officer at hello@ironcladpan.com, +64 22 317 9565 or 300 Richmond Road, Grey Lynn, Auckland 1021, New Zealand.

We may need to verify your identity before acting on a request. In some circumstances, the law allows or requires us to refuse or limit a request. If that happens, we will explain why, unless we are legally prevented from doing so.

If your request concerns content added by, shared with or controlled by another Ironclad Vault member, we may need to consider that person’s rights as well as yours.

13. Privacy questions and complaints

If you have a privacy question or complaint, contact:

Please explain what happened and include any information that will help us investigate. We will acknowledge your complaint and aim to respond within 30 days. If we need more time, we will tell you why and when you can expect a response.

If you are not satisfied with our response, you may contact the regulator in your country:

• Australia: Office of the Australian Information Commissioner, oaic.gov.au
• New Zealand: Office of the Privacy Commissioner, privacy.org.nz

This privacy policy is governed by New Zealand law. For more information about privacy issues in New Zealand and protecting your privacy, visit the New Zealand Privacy Commissioner's website.

14. Changes to this policy

We may update this Privacy Policy when the Ironclad Vault, our practices or the law changes. The current version will always show the date it was last updated. This version was last updated on 5th October 2026.

If a change materially affects how we use information already held by us, we will take reasonable steps to tell you before it takes effect, such as by email or a notice on our websites or in the Ironclad Vault. Where required, we will ask for your consent.

15. Contact us

For privacy enquiries or to request this policy in another accessible form, contact: