PRIVACY POLICY
Last updated: November 30, 2025
ISLA & LILY BOUTIQUE (“we”, “our”, “us”) operates this website and online store, including all related information, content, features, tools, products, and services collectively referred to as the “Services”. Our store is powered by Shopify, which enables us to provide our Services securely and efficiently.
This Privacy Policy explains how we collect, use, disclose, store, and protect your personal information when you visit our website, make a purchase, contact us, or otherwise interact with us.
By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy.
PERSONAL INFORMATION WE COLLECT
“Personal information” refers to information that identifies you or can reasonably be linked to you. We may collect the following categories of personal information:
- Contact information: name, billing address, shipping address, email address, and phone number.
- Payment information: payment method details, transaction confirmations, and billing-related information. Payments are securely processed by third-party payment providers, and we do not store full payment card details.
- Account information: login credentials, preferences, account settings, and purchase history.
- Order and transaction data: products viewed, added to cart, purchased, returned, exchanged, or otherwise interacted with.
- Communications: messages, enquiries, reviews, support requests, and other communications you send to us.
- Device and technical data: IP address, browser type, device identifiers, operating system, referral URLs, and similar technical information.
- Usage data: information about how you interact with our website, products, pages, features, and Services.
SOURCES OF PERSONAL INFORMATION
We collect personal information from:
- You directly, when you place an order, create an account, subscribe to communications, contact us, or otherwise provide information to us.
- Automatically, through cookies, pixels, analytics tools, and similar technologies when you use our website.
- Service providers, such as Shopify, payment processors, shipping partners, fulfilment partners, analytics providers, marketing platforms, and customer support tools.
- Third-party partners, where legally permitted and where relevant to providing, improving, securing, or marketing our Services.
HOW WE USE YOUR PERSONAL INFORMATION
We use your personal information to:
- Provide and manage our Services, including processing orders, payments, shipping, returns, refunds, exchanges, and customer support.
- Create, manage, and maintain your customer account.
- Communicate with you about your order, account, enquiries, delivery updates, returns, refunds, and service-related notices.
- Improve, personalise, and optimise your shopping experience.
- Provide marketing and advertising communications where permitted by law. You may opt out of marketing communications at any time.
- Analyse website performance, customer behaviour, product interest, and Service usage.
- Prevent fraud, unauthorised activity, misuse, and security incidents.
- Comply with legal obligations, enforce our policies, resolve disputes, and protect our rights
DISCLOSURE OF PERSONAL INFORMATION
We may share your personal information with:
- Shopify and trusted service providers (payment processing, logistics, IT services)
- Marketing and advertising partners, where permitted by law
- Authorities or legal entities if required by law
- Affiliated businesses as part of normal business operations
- Third parties with your consent
RELATIONSHIP WITH SHOPIFY
Our store is hosted by Shopify, which processes personal data to provide and improve its services. Shopify may process your data across multiple jurisdictions.
You can learn more about Shopify’s privacy practices here:
https://privacy.shopify.com/en
THIRD-PARTY LINKS
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites.
CHILDREN’S DATA
Our Services are not intended for children. We do not knowingly collect personal data from individuals under the age of majority in their jurisdiction.
DATA SECURITY & RETENTION
We take reasonable measures to protect your personal data, but no system is completely secure.
We retain personal information only as long as necessary to:
- Provide Services
- Comply with legal obligations
- Resolve disputes
- Enforce agreements
YOUR RIGHTS UNDER NEW ZEALAND PRIVACY LAW
Depending on your location and applicable law, you may have the right to:
- Request access to the personal information we hold about you.
- Request correction of inaccurate or incomplete personal information.
- Withdraw consent for marketing communications.
- Object to or request restriction of certain processing activities where applicable.
- Ask questions or make a complaint about how we handle your personal information.
Under New Zealand privacy law, you may request access to and correction of your personal information.
To exercise your rights, please contact us using the details below. We may need to verify your identity before processing your request.
INTERNATIONAL DATA TRANSFERS
Your personal information may be transferred and processed outside your country of residence. Where required, we rely on appropriate legal safeguards such as Standard Contractual Clauses.
INTERNATIONAL DATA TRANSFERS
Your personal information may be transferred to, stored, or processed outside New Zealand, including by Shopify, payment providers, fulfilment partners, shipping providers, and other service providers.
Where personal information is transferred internationally, we take reasonable steps to ensure it is handled securely and in accordance with applicable privacy requirements.
CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date.
CONTACT
If you have any questions or wish to exercise your data rights, contact us at:
support@islalilyboutique.com