Privacy Policy

Last updated: May 21, 2025

This Privacy Policy describes how Aroha Christchurch (the "Site", "we", "us" or "our") collects, uses and discloses your personal information when you visit arohachristchurch.com (the "Site"), use our services, make a purchase or otherwise interact with us regarding the Site (collectively, the "Services"). "You" and "your" refers to you as a user of the Services, whether you are a customer, website visitor or any other person whose personal information we have collected in accordance with this Privacy Policy.

Please read this Privacy Policy carefully.

CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time, for example to reflect changes in our practices or for other operational, legal or regulatory reasons. We will post the updated Policy on the Site, update the "Last updated" date and take any other steps required by law.

HOW WE COLLECT AND USE YOUR PERSONAL INFORMATION
To provide the Services, we collect personal information as described below. The information we collect and use depends on how you interact with us.

In addition to the specific purposes below, we may use collected information to communicate with you, provide or improve the Services, fulfil applicable legal obligations, enforce applicable terms of service and protect or defend the Services, our rights and the rights of our users or third parties.

WHAT PERSONAL INFORMATION DO WE COLLECT?
The type of personal information we collect about you depends on how you interact with our Site and use our Services. "Personal information" means information that identifies, relates to, describes or can be associated with you.

Information you provide directly
Personal information you provide directly through the Services may include:

Contact details, such as name, address, phone number and email address.
Order information, such as billing and shipping addresses, payment confirmation, email address and phone number.
Account information, such as your username, password, security questions and other security-related information.
Customer support data, including information you provide in communications with us.

Some features of the Services may require you to provide certain personal information. If you choose not to provide this information, some features may not be accessible.

Information we collect automatically
We may automatically collect information about your interactions with the Services ("Usage Data"). This includes data about how you access and use the Site and your account, device data, browser information, network data, IP address and other technical details. We may use cookies, pixels and similar technologies to collect usage data.

Information we receive from third parties
We may receive information from third parties, such as:

Service providers that support our Site and Services, including Shopify.
Payment processors that handle your payment information.
Marketing partners or platforms that use cookies or pixels.

HOW WE USE YOUR PERSONAL INFORMATION
Providing products and services: to fulfil orders, process payments, manage accounts and facilitate shipping, returns or exchanges.

Marketing and advertising: to send promotional messages by email, SMS or post and to display targeted ads. If you are located in the European Economic Area (EEA), we rely on legitimate interest under Article 6(1)(f) of the GDPR.

Security and fraud prevention: to detect, investigate or take action against fraud or harmful behaviour. For users in the EEA, this is based on our legitimate interest.

Communication and improvement: to provide customer support and improve our services.

COOKIES
We use cookies to operate and improve our Site and Services. For detailed information about Shopify cookies, please visit: https://www.shopify.com/legal/cookies

Cookies help us remember user preferences and analyse your activity. You can set your browser to refuse cookies, but this may affect the functionality of the Services.

HOW WE SHARE PERSONAL INFORMATION
We may share your personal information in the following situations:

With service providers who perform functions such as payment processing, data analysis, customer support and hosting.
With business and marketing partners.
With affiliated companies or within our corporate group.
With third parties based on your consent (e.g. social networks).
In legal situations, such as mergers, subpoenas or regulatory compliance.

CATEGORIES OF RECIPIENTS
Identifiers: Service providers, business partners, affiliates.
Business information: Service providers, business partners.
Internet/network activity: Analytics providers, IT service providers.
Geolocation data: Technical service providers.

We do not sell or share your data without your consent.

THIRD-PARTY LINKS
Our site may contain links to third-party websites. We do not control these sites and they are subject to their own privacy policies. We are not responsible for the content or practices of these sites.

MINORS' DATA
Our services are not intended for minors and we do not knowingly collect data from persons under the age of 16. Parents or guardians may contact us to request deletion of data submitted by minors.

SECURITY AND DATA RETENTION
We take commercially reasonable security measures, but cannot guarantee absolute security. Data retention depends on our legal obligations and the need to manage accounts and services.

YOUR RIGHTS
Depending on your location, you may have the following rights:

Right to access your personal information
Right to request deletion
Right to correct inaccuracies
Right to data portability
Right to opt out of sale/sharing or targeted advertising
Right to restrict processing
Right to withdraw consent
Right to appeal against a rejected request
Right to manage marketing preferences

COMPLAINTS
If you have any questions about how we process your personal information, please contact us. You may also file a complaint with your local data protection authority.

INTERNATIONAL USERS
We may transfer, store and process your personal information outside your country. When transferring data from Europe, we use recognised mechanisms such as EU standard contractual clauses.

CONTACT US
If you have any questions or wish to exercise your rights, please contact us at support@arohachristchurch.com.

Unless otherwise stated, Aroha Christchurch is the controller of your personal information under applicable law.