index

Privacy policy

Privacy Policy
Last updated: September 10, 2025

Coastys operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). Coastys is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

We respect your privacy and are committed to complying with the New Zealand Privacy Act 2020, including the Information Privacy Principles (IPPs).


Personal Information We Collect or Process

We may collect or process the following categories of personal information:

  • Contact details (name, address, billing and shipping address, phone number, email address)

  • Financial information (credit/debit card details, account numbers, payment confirmations)

  • Account information (username, password, security questions, preferences)

  • Transaction information (items viewed, cart contents, purchases, returns, cancellations)

  • Communications with us (customer support inquiries)

  • Device and technical information (browser, network connection, IP address, cookies)

  • Usage information (interaction with our Services)

We collect this information directly from you, automatically via our Services, and from service providers, partners, and third parties.


How We Use Your Personal Information

We use your personal information for the following purposes:

  • To provide and improve the Services: including processing payments, fulfilling orders, arranging shipping, returns, account management, and tailoring your shopping experience.

  • Marketing and advertising: to send marketing communications (email, SMS, or voice) where you have provided consent. You may opt out at any time by clicking "unsubscribe" in an email or replying "STOP" to an SMS.

  • Security and fraud prevention: to protect accounts, detect fraudulent or malicious activity, and safeguard our systems.

  • Customer support and communication: to respond to inquiries and provide updates about your account or orders.

  • Legal compliance: to meet our obligations under applicable law and respond to lawful requests.


How We Disclose Personal Information

We may disclose your personal information:

  • To Shopify, which hosts and powers our Services.

  • To service providers (e.g., IT, payment processors, analytics, couriers, cloud storage).

  • To trusted business and marketing partners, where you have consented.

  • Within our corporate group or affiliates.

  • Where required by law, legal proceedings, or to enforce our terms.


Relationship with Shopify

The Services are hosted by Shopify, which processes your personal information to operate and improve its platform. Shopify may process your data in other countries, including Canada and the United States. For more information, see the Shopify Privacy Policy.


Cross-Border Transfers (IPP 12)

Your personal information may be transferred and stored outside New Zealand. We take reasonable steps to ensure that recipients provide privacy safeguards comparable to those under New Zealand law. If adequate safeguards cannot be ensured, we will seek your express authorization before transferring your personal information.


Your Rights (IPP 6 & 7)

Under the New Zealand Privacy Act 2020, you have the right to:

  • Access your personal information

  • Request correction of your information

  • Request deletion of your information

We will respond to verified requests within 20 working days. To make a request, please contact us at info@coastys.nz. If we refuse your request, we will provide reasons and explain how you can complain.


Security and Retention

We take reasonable steps (technical, organisational, and contractual) to protect your personal information from loss, misuse, or unauthorised access. While no system is completely secure, we regularly review and improve our safeguards.

We retain personal information only as long as necessary for the purposes described in this policy or as required by law.


Breach Notification

If a privacy breach occurs that is likely to cause serious harm, we will notify affected individuals and the Office of the Privacy Commissioner as required by the New Zealand Privacy Act 2020.


Children’s Data

Our Services are not intended for use by children under 16. We do not knowingly collect information from children. Parents or guardians may contact us if they believe a child has provided information, and we will delete it.


Complaints

If you have concerns about how we handle your personal information, please contact us at info@coastys.nz. You also have the right to complain to the New Zealand Privacy Commissioner: www.privacy.org.nz.


Updates

We may update this Privacy Policy from time to time. When significant changes are made, we will notify you by email or SMS and provide an opt-out option before new uses of your personal information take effect.


Contact Us
Coastys Limited
917 Karamu Road North, Mayfair, Hastings, HKB, 4122, NZ
Email: info@coastys.nz