Privacy Policy

Information we collect

We collect personal information in a few ways:

• Information you give us — when you place an order, create an account, apply for finance, subscribe to our newsletter, leave a review, contact us, or visit our showroom. This may include your name, email address, phone number, billing and delivery addresses, order details and payment information.
• Information we collect automatically — when you use our website, including device and browser information, IP address, pages visited and similar data gathered through cookies and analytics tools.
• Information from others — we may receive information from finance and credit providers, couriers and payment processors in connection with your order or finance application.
• In our showroom — our premises are monitored by CCTV for security, which may record your image when you visit.

How we use your information

We use your personal information to:

• process, fulfil and deliver your orders;
• manage your account and saved details;
• process payments and finance applications;
• provide customer service and respond to your enquiries;
• send order updates and, where you've opted in, marketing about our products and offers;
• improve our website, products and service, including through analytics;
• show you relevant advertising;
• protect against fraud and keep our website and showroom secure; and
• meet our legal and tax obligations.

We only collect and use personal information for these lawful purposes.

Cookies, analytics & advertising

Our website uses cookies — small files stored on your device — to make the site work, remember your preferences, and understand how it's used. These include:

• Essential cookies that keep the site and checkout working;
• Analytics cookies (including Google Analytics) that help us understand how visitors use our site; and
• Advertising cookies (including Meta/Facebook) that help us show you relevant ads and measure how they perform.

You can control or delete cookies through your browser settings, and opt out of personalised advertising through your Google and Meta ad settings. Blocking some cookies may affect how parts of the site work.

Payments

Payments are processed securely through Shopify's checkout and trusted third-party payment providers that comply with PCI-DSS standards. Your full card details are encrypted and are never stored on our servers.

Finance applications

If you apply for finance or a payment plan, we share the information you provide with the relevant finance provider — which may include Gilrose Finance, Finance Now, NOW Card, Q Mastercard, Afterpay or Zip. These providers may carry out credit checks and exchange information with credit-reporting agencies as part of assessing your application.

Each provider handles your information under its own privacy policy, which we recommend you read before applying.

Who we share your information with

We do not sell or rent your personal information. We share it only as needed to run our business and serve you, with:

• Shopify, which hosts our website and online store;
• payment processors, to take payment;
• couriers and delivery partners, to deliver your order;
• finance and credit providers, where you apply for finance;
• email and marketing tools, to send communications you've opted into;
• analytics and advertising partners, including Google and Meta;
• our reviews provider, to display customer reviews;
• professional advisors, such as our accountants or lawyers; and
• government agencies or law enforcement, where required by law.

We require these parties to protect your information and use it only for the purposes we engage them for.

Storage and overseas disclosure

Some of our providers — including Shopify, Google and Meta — store and process information on servers outside New Zealand. Where your information is held or disclosed overseas, we take reasonable steps to ensure it is protected by comparable safeguards, as required by the Privacy Act 2020.

Keeping your information secure

We take reasonable steps to protect your personal information from loss, misuse and unauthorised access — including secure (SSL-encrypted) connections, access controls, and trusted service providers. No method of transmission or storage is completely secure, but we work hard to keep your information safe.

How long we keep your information

We keep your personal information only for as long as we need it for the purposes described in this policy, or as required to meet our legal and tax obligations. When it is no longer needed, we securely delete or anonymise it.

Privacy breaches

If a privacy breach occurs that is likely to cause you serious harm, we will notify you and the Office of the Privacy Commissioner, as required by the Privacy Act 2020.

Children's privacy

Our website and products are intended for adults. We don't knowingly collect personal information from children. If you believe a child has provided us with their information, please contact us and we'll remove it.

Changes to this policy

We may update this policy from time to time. The "last updated" date at the top shows when it was last revised, and the current version always applies.