Privacy policy

Last updated: 24 August 2026

Salty Surf & Co. respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store and share personal information when you visit saltysurf.co.nz, place an order, contact us, subscribe to our marketing or otherwise interact with Salty Surf & Co.

We handle personal information in accordance with the New Zealand Privacy Act 2020 and its Information Privacy Principles.

ABOUT US

Salty Surf & Co. is a New Zealand-owned online clothing business based in Whakatāne, Bay of Plenty.

Salty Surf & Co. is responsible for the personal information we collect through our website and business activities.

Our online store is hosted by Shopify, which provides the ecommerce platform we use to sell our products.

PERSONAL INFORMATION WE COLLECT

Depending on how you interact with us, we may collect:

• Your name
• Email address
• Telephone number
• Billing and delivery addresses
• Order and transaction information
• Products you view, purchase, return or exchange
• Account information, if you create a customer account
• Messages, enquiries, reviews and other communications you send us
• Marketing and communication preferences
• Information about how you use our website
• Your device type, browser, IP address and approximate location
• Cookie identifiers and related website activity
• Information required to detect or prevent fraud and unauthorised transactions

Payment information is processed securely by Shopify and the payment providers available through our checkout. Salty Surf & Co. does not normally receive or store your complete payment card number.

HOW WE COLLECT PERSONAL INFORMATION

We may collect personal information:

• Directly from you when you place an order, create an account, contact us, submit a review or join our mailing list
• Automatically when you visit or use our website, including through cookies and similar technologies
• From Shopify and the service providers that help us operate our store
• From payment providers in connection with your transaction
• From courier and delivery providers
• From social-media platforms when you interact with us through those services
• From advertising, analytics or fraud-prevention providers where those services are enabled
• From another person where they provide your details for a legitimate purpose, such as sending an order or gift to you

Where required by law, we will take reasonable steps to let you know if we collect personal information about you from someone other than you.

WHY WE COLLECT AND USE PERSONAL INFORMATION

We collect and use personal information only where reasonably necessary for our business activities, including to:

• Process, confirm and fulfil orders
• Take and verify payment
• Arrange delivery and provide tracking information
• Communicate with you about an order
• Respond to questions, requests or complaints
• Process returns, exchanges and refunds
• Maintain customer accounts
• Provide customer service
• Detect, investigate and prevent fraud or unauthorised activity
• Improve our products, website and customer experience
• Understand how customers use our website
• Display customer reviews where submitted for publication
• Send marketing communications where you have consented or where otherwise permitted by law
• Comply with our legal, accounting and record-keeping obligations
• Establish, exercise or defend legal claims

If you do not provide information needed to process an order, we may be unable to accept payment, deliver your purchase or provide the requested service.

MARKETING COMMUNICATIONS

If you subscribe to our mailing list or otherwise agree to receive marketing, we may send you news, product updates, offers and other promotional communications.

You can unsubscribe at any time by:

• Selecting the unsubscribe link in a marketing email; or
• Emailing saltysurf@xtra.co.nz

Unsubscribing from marketing will not prevent us from sending necessary service messages, such as order confirmations, delivery updates or replies to your enquiries.

We send commercial electronic messages in accordance with the New Zealand Unsolicited Electronic Messages Act 2007.

COOKIES AND WEBSITE ANALYTICS

Our website uses cookies and similar technologies to operate the store, remember preferences, understand website use, maintain security and support advertising or analytics where enabled.

Cookies may collect information such as:

• Your IP address
• Browser and device information
• Pages and products viewed
• Time spent on the website
• Referring websites
• Items added to your cart
• Interactions with advertisements or marketing

Some cookies are necessary for the website and checkout to work. Other cookies may support analytics, personalisation or advertising.

You can manage or block cookies through your browser settings. Blocking some cookies may affect how parts of the website function.

WHO WE SHARE PERSONAL INFORMATION WITH

We may share personal information where reasonably necessary with trusted providers that help us operate our business, including:

• Shopify, which hosts and operates our ecommerce store
• Payment and fraud-prevention providers
• Courier and delivery companies
• Website hosting, technical support and cloud-storage providers
• Email and marketing service providers
• Customer review providers
• Analytics and advertising providers
• Professional advisers, such as accountants, insurers or legal advisers
• Government agencies, regulators, courts or law-enforcement authorities where required or permitted by law

We provide these organisations only with the information reasonably necessary for them to perform the relevant service.

We may also share information:

• With your consent or at your direction
• To protect the rights, property or safety of Salty Surf & Co., our customers or another person
• In connection with the sale, transfer or restructuring of the business
• Where disclosure is otherwise authorised or required by New Zealand law

We do not sell customer contact information as mailing lists.

SHOPIFY

Our store is hosted by Shopify.

Shopify collects and processes personal information to provide the ecommerce services used by Salty Surf & Co., including hosting, checkout, payment processing, security, analytics and customer-experience features.

You can learn more about Shopify’s handling of personal information in the Shopify Consumer Privacy Policy:

https://www.shopify.com/legal/privacy/consumers

OVERSEAS STORAGE AND PROCESSING

Some of our service providers, including Shopify, may store or process personal information outside New Zealand.

Where personal information is disclosed to an overseas organisation, we will take reasonable steps to ensure it is protected in a manner consistent with the New Zealand Privacy Act 2020, as required by Information Privacy Principle 12.

Where an overseas provider stores or processes information solely on our behalf, we remain responsible for ensuring that appropriate privacy and security safeguards are in place.

SECURITY

We take reasonable steps to protect personal information against loss, misuse, unauthorised access, alteration and disclosure.

These measures may include:

• Using reputable ecommerce, payment and service providers
• Restricting access to personal information
• Using passwords and account security controls
• Using secure website and payment technology
• Keeping business systems and software appropriately protected

No internet transmission or storage system can be guaranteed to be completely secure. Please contact us promptly if you believe your personal information or customer account may have been compromised.

PRIVACY BREACHES

If a privacy breach occurs, we will take reasonable steps to contain and assess it.

Where a breach has caused or is likely to cause serious harm, we will notify the New Zealand Privacy Commissioner and affected individuals as soon as reasonably practicable, as required by the Privacy Act 2020.

HOW LONG WE KEEP INFORMATION

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected or to meet our legal, tax, accounting, fraud-prevention and dispute-resolution obligations.

When information is no longer required, we will take reasonable steps to securely delete, destroy or anonymise it.

YOUR RIGHTS

Under the New Zealand Privacy Act 2020, you have the right to:

• Ask whether we hold personal information about you
• Request access to the personal information we hold about you
• Ask us to correct information that is inaccurate or incomplete

We may need to verify your identity before providing access to or correcting personal information.

In limited circumstances, the Privacy Act may allow or require us to withhold certain information. If this applies, we will explain the reason unless the law prevents us from doing so.

To make an access or correction request, email saltysurf@xtra.co.nz.

THIRD-PARTY WEBSITES

Our website may contain links to websites or services operated by other organisations.

Salty Surf & Co. is not responsible for the privacy practices of independent third-party websites. We recommend reviewing their privacy policies before providing them with personal information.

CHILDREN’S INFORMATION

Our website is intended for use by adults purchasing products for themselves or others.

We do not knowingly collect personal information directly from children without appropriate authority. If you believe a child has provided personal information to us without appropriate permission, please contact us so we can review and, where appropriate, delete it.

PRIVACY QUESTIONS AND COMPLAINTS

If you have a question, access or correction request, or complaint about how we have handled your personal information, please contact our Privacy Officer:

Privacy Officer
Salty Surf & Co.
Whakatāne, Bay of Plenty
New Zealand
Email: saltysurf@xtra.co.nz

We will acknowledge and investigate privacy concerns and aim to respond within a reasonable time.

If you are not satisfied with our response, you may contact the New Zealand Office of the Privacy Commissioner:

Website: https://www.privacy.org.nz
Telephone: 0800 803 909

CHANGES TO THIS POLICY

We may update this Privacy Policy to reflect changes to our business practices, website services or legal obligations.

The current version will be published on this page with an updated revision date.