Effective date: 2/11/2026
Kia ora. Your privacy matters to us. This Privacy Policy explains what personal information The Moody Bohotique collects, why we collect it, how we use, share and protect it, and the rights you have. We follow the Privacy Act 2020 and its Information Privacy Principles, and the Unsolicited Electronic Messages Act 2007 for marketing messages.
1. Who we are
1.1 In this policy, “we”, “us” and “our” mean The Moody Bohotique Limited, a New Zealand company 9460850, trading as The Moody Bohotique, based in Christchurch, New Zealand. We run the online store at https://themoodybohotique.com (the “website”).
1.2 We are the agency responsible for the personal information we collect through the website, by email and on social media. This policy forms part of our Terms and Conditions of Sale and Website Use.
Our Privacy Officer
1.3 Our Privacy Officer looks after privacy questions, requests and complaints. You can contact them at:
- Email: themoodybohotique@gmail.com
- Post: The Moody Bohotique, 493A Greers Road, Christchurch, New Zealand
2. What personal information we collect
2.1 We only collect personal information that we need for the purposes set out in this policy. Depending on how you use the website, this may include:
Information you give us
- Account details: your name, email address, password (stored in encrypted form) and account preferences, if you create an account.
- Order details: what you buy, order history, discount codes used, returns and refunds.
- Shipping and billing details: your name, delivery and billing addresses, and any delivery instructions (including rural delivery).
- Contact details: your email address and phone number, which we and our carriers use to send order updates and contact you about delivery.
- Reviews and user content: reviews, ratings, photos and comments you submit, and the name you choose to display.
- Communications: messages you send us by email, contact forms or social media, and records of our replies, including any information about faulty or damaged items (such as photos).
- Marketing preferences: whether you’ve agreed to receive our newsletter or marketing messages, and when.
Payment information
2.2 Card payments are processed by our payment gateway, Stripe. Your card details go directly to them and we do not see or store your full card number, expiry date or security code. We receive limited information such as the payment status, card type, the last four digits of your card and fraud-check results.
2.3 If you choose Afterpay, Afterpay collects and handles your personal information under its own privacy policy to assess your eligibility and manage your instalments. We share your order details with Afterpay and receive confirmation of whether the payment was approved, but we don’t receive Afterpay’s credit or identity checks.
Information collected automatically
- Device and usage data: your IP address, browser type, device type, operating system, pages viewed, links clicked, referring website, and the date and time of your visit.
- Cookies and similar technologies: small files and tags that help the website work and, where used, help us understand and market to visitors (see clause 8).
- Approximate location: worked out from your IP address (for example, city or region). We don’t collect your precise location.
Information we receive from others (indirect collection)
2.4 Sometimes we receive personal information about you from someone other than you. This includes:
- payment status and fraud-screening results from our payment gateway and Afterpay;
- delivery updates, proof of delivery and any delivery issues from NZ Post or our courier;
- the name and address of a gift recipient, when someone orders a gift to be sent to them;
- information from social media platforms when you interact with our pages or tag us.
2.5 From 1 May 2026, Information Privacy Principle 3A requires us to take reasonable steps to let you know when we collect your personal information from someone else, unless an exception applies (for example, where you’ve already been told). This policy is one of the ways we do that. If you place an order for someone else, such as a gift, please let them know you’re sharing their name and address with us for delivery and point them to this policy.
2.6 You don’t have to give us your personal information, but if you don’t provide the details we need (such as a delivery address), we may not be able to process your order or respond to you.
3. How and why we use your personal information
3.1 We use your personal information to:
- process, pack, deliver and track your orders, and handle returns, refunds and faulty-goods claims;
- take payment and help prevent fraud and misuse of the website;
- create and manage your account;
- communicate with you about your orders, delivery, account and enquiries;
- publish reviews and user content you choose to share;
- send you newsletters and marketing, if you’ve agreed (see clause 4);
- understand how the website is used and improve our products, website and service;
- keep business, accounting and tax records, and meet our legal obligations; and
- protect our rights and deal with disputes or legal claims.
3.2 We’ll only use your personal information for the purpose we collected it for, a directly related purpose, or another purpose permitted by the Privacy Act 2020 (for example, with your consent, or where needed to prevent a serious threat or for law enforcement).
4. Marketing emails and your consent
4.1 New Zealand privacy law doesn’t use “legal bases” in the way some overseas laws do. Instead, we collect and use your information for the lawful purposes connected with our business described in this policy, and we ask for your consent where it’s needed, such as for marketing.
4.2 We will only send you marketing emails or texts (such as our newsletter, new arrivals and promotions) if you have consented, in line with the Unsolicited Electronic Messages Act 2007. You can give consent by ticking the unticked opt-in box at checkout or when creating an account, or by signing up to our newsletter on the website.
4.3 Every marketing message we send will clearly identify The Moody Bohotique, include our contact details, and include a working unsubscribe link.
4.4 You can unsubscribe at any time by clicking “unsubscribe” in any marketing email, replying STOP to a marketing text, or emailing us. We’ll stop sending you marketing within 5 working days. Unsubscribing won’t affect transactional messages we need to send about your orders, returns or account.
4.5 We send marketing emails. It may record whether you open emails or click links so we can improve our messages.
5. Who we share your personal information with
5.1 We don’t sell your personal information. We share it only where needed to run our business, with:
- NZ Post and our courier – your name, address, phone number and email, to deliver your order and send tracking updates;
- our payment gateway Stripe – to process card payments and screen for fraud;
- Afterpay – if you choose to pay with Afterpay;
- our website host Ionos and WordPress and WooCommerce plugin providers – who store or process data to run the website;analytics and advertising providers – to understand how the website is used and measure our ads;
- our professional advisers, such as our accountant, bookkeeper or lawyers – for accounting, tax and legal purposes;
- government agencies, such as Inland Revenue, the Police or the courts – where we’re required or permitted by law, for example to comply with a lawful request or to prevent or investigate fraud or a crime; and
- a buyer of our business – if our business is sold or restructured, in which case your information will continue to be protected in line with this policy.
5.2 Our service providers may only use your information to provide their services to us, and we take reasonable steps to make sure they keep it secure.
6. Sending information overseas
6.1 Many of the service providers we use are based overseas or store data on servers outside New Zealand, for example in Australia, the United States, the European Union. This includesoverseas providers, e.g. Stripe, Afterpay, Google, Meta, your hosting and email marketing providers.
6.2 Where a provider stores or processes information only on our behalf (such as cloud hosting or email software), the Privacy Act treats this as our use of the information, and we remain responsible for it.
6.3 Where we disclose personal information to an overseas organisation for its own use, we will only do so in line with Information Privacy Principle 12 – for example, where the organisation is subject to privacy laws or binding agreements that give comparable protection to New Zealand law, or where you have authorised the disclosure after we’ve told you that it may not be protected in this way. Afterpay, Google and Meta handle some information under their own privacy policies, which we encourage you to read.
7. Storage and security
7.1 We take reasonable steps to protect your personal information from loss, unauthorised access, use, changes and disclosure. These include:
- using an SSL/TLS certificate so information sent to the website is encrypted;
- using reputable payment providers so we never handle your full card details;
- strong passwords and two-factor authentication on our website, email and service accounts ;
- keeping WordPress, WooCommerce, our theme and plugins up to date, and using security tools ;
- limiting access to personal information to people who need it to run the business.
7.2 No website or online service is completely secure, so we can’t guarantee the security of information you send online. Please keep your account password private and let us know straight away if you think your account has been compromised.
8. Cookies and similar technologies
8.1 Cookies are small files placed on your device when you visit a website. We use the following types:
- Essential cookies – needed for the website to work, such as keeping items in your cart, keeping you signed in, processing checkout and protecting against fraud. These are set by WordPress, WooCommerce and our payment providers.
- Analytics cookies – Google Analytics help us understand how visitors use the website (such as pages visited and time spent) so we can improve it.
- Marketing cookies – Meta Pixel help us measure the results of our ads and show relevant ads to you on other platforms, such as Facebook and Instagram.
8.2 You can manage or delete cookies in your browser settings, and most browsers let you block cookies altogether. Blocking essential cookies may stop parts of the website, such as the cart and checkout, from working. You can also opt out of Google Analytics using Google’s browser add-on, and manage ad preferences in your Facebook and Instagram settings.
9. How long we keep your information
9.1 We keep personal information only for as long as we need it for the purposes in this policy, or as required by law. As a guide:
- order, payment and invoice records – 7 years, as required for tax purposes under the Tax Administration Act 1994 (Inland Revenue record-keeping rules);
- account information – while your account is active, and for [2] years after your last activity, unless you ask us to close it sooner;
- marketing preferences – until you unsubscribe, after which we keep a record of your unsubscribe so we don’t contact you again;
- customer service emails and messages – [2] years after the matter is resolved ;
- analytics data – in line with the retention settings of our analytics provider .
9.2 When we no longer need personal information, we’ll securely delete it or de-identify it.
10. Accessing and correcting your information
10.1 Under Information Privacy Principles 6 and 7, you have the right to ask for access to the personal information we hold about you, and to ask us to correct it if you think it is wrong.
10.2 You can update many of your details yourself by logging in to your account. For anything else, please contact our Privacy Officer (see clause 1.3). We may need to confirm your identity before we act on your request.
10.3 We’ll respond to your request as soon as reasonably practicable, and no later than 20 working days after we receive it. Access and correction requests are free.
10.4 If we decide not to give you access or not to correct your information, we’ll explain why (where the law allows us to). If we don’t correct it, you can ask us to attach a statement of the correction you asked for to your information.
10.5 You can also ask us to close your account and delete your personal information. We’ll do this unless we need to keep some of it, for example our order records for tax purposes.
11. Privacy breaches
11.1 If a privacy breach happens (for example, unauthorised access to or loss of personal information), we’ll act quickly to contain it and reduce any harm.
11.2 If we believe a breach has caused, or is likely to cause, serious harm, we will notify the Office of the Privacy Commissioner and the people affected as soon as practicable, as required by the Privacy Act 2020.
12. Children
12.1 Our website and products are not directed at children under 16, and we don’t knowingly collect personal information from them. To place an order, you must be 18 or over, or have the involvement and permission of a parent or guardian (see our Terms and Conditions).
12.2 If you believe a child under 16 has given us personal information, please contact us and we’ll delete it.
13. Links to other websites
13.1 Our website may link to other websites, such as Afterpay, carrier tracking pages and social media. We’re not responsible for the privacy practices of those websites, so please read their privacy policies.
14. Changes to this policy
14.1 We may update this Privacy Policy from time to time, for example to reflect changes in the law, our services or the providers we use. The updated policy will be posted on this page with a new effective date. If we make a significant change, we’ll take reasonable steps to let you know, such as by email if you have an account.
15. Questions and complaints
15.1 If you have a question or concern about your privacy, please contact our Privacy Officer first (see clause 1.3). We’ll acknowledge your message within [2] business days and try to resolve it fairly and quickly.
15.2 If you’re not satisfied with our response, you can make a complaint to the Office of the Privacy Commissioner (complaints can be made online through its website):
- Website: privacy.org.nz
- Phone: 0800 803 909
- Post: PO Box 10 094, Wellington 6140
16. Contact us
- The Moody Bohotique Limited (trading as The Moody Bohotique)
- Company number: 9460850
- Email: themoodybohotique@gmail.com
- Christchurch, New Zealand
- Website: https://themoodybohotique.com
Ngā mihi.