Privacy Policy
How we collect, use, and protect your personal information when you use our services.
Effective Date: June 2025
Dresshire Limited ("we", "us", "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy outlines how we collect, use, disclose, and safeguard your data when you use our website, www.dresshire.co.nz (the "Site"), and our services.
1. What Information We Collect
A. Automatically Collected Data
When you visit the Site, we collect certain information automatically, including:
- IP address
- Browser type and version
- Device identifiers
- Time zone settings
- Pages viewed, referral URLs, and activity logs
- Cookies, pixels, and analytics tags
This helps us optimise performance, detect fraud, and improve your experience.
B. User-Provided Data
When you create an account, place an order, or contact us, we may collect:
- Name
- Email address
- Phone number
- Shipping and billing addresses
- Dress hire preferences and event date
- Photos submitted for damage waiver purposes
Payment Information
All payments are processed securely by Stripe. We do not collect or store your full credit card details. Stripe is PCI-DSS compliant and may retain your payment data in accordance with its own privacy policy. We only retain limited billing metadata (e.g. billing address, last four digits of the card, transaction reference) for verification and support.
2. How We Use Your Personal Data
| Purpose | Data Used |
|---|---|
| Fulfil orders and bookings | Personal and delivery details |
| Process secure payments | Payment metadata only (Stripe handles payment info) |
| Customer service and support | Contact details, order history |
| Assess damage waiver claims | Submitted photos and related data |
| Improve website functionality | Device and usage data |
| Marketing and promotions (if opted-in) | Email address, preferences |
| Fraud detection and legal compliance | All relevant data types |
3. Legal Grounds for Processing
We process your data based on the following legal grounds:
- Fulfilling a contract (e.g. your booking)
- Your consent (e.g. marketing emails)
- Our legitimate interests (e.g. fraud prevention, analytics)
- Legal obligations (e.g. tax and regulatory compliance)
4. Cookies & Tracking Technologies
We use cookies and similar technologies for website functionality, analytics, and marketing. You can manage cookie preferences via your browser or opt out of non-essential cookies through our banner (where applicable).
We may use:
- Google Analytics
- Facebook/Meta Pixel
- Shopify and Stripe tracking
5. Data Sharing and Third Parties
We may share your personal data with:
Service Providers:
- Shopify (hosting and storefront)
- Stripe (payments)
- Couriers and logistics providers
- Analytics and marketing platforms (Google, Meta, Mailchimp)
Legal and Compliance:
We may disclose your data if required by law, regulation, or in response to lawful requests.
Business Restructuring:
In the event of a merger, acquisition, or sale, your data may be transferred under confidentiality protections.
We do not sell your personal data.
6. Cross-Border Data Transfers
Your information may be stored or processed outside of New Zealand (e.g. the United States) through platforms like Shopify and Stripe. We ensure appropriate safeguards are in place to protect your data in accordance with New Zealand law.
7. Data Retention
We retain your information only for as long as necessary to:
- Provide our services
- Comply with legal and tax obligations
- Resolve disputes or enforce agreements
Photos for damage waivers are deleted within 12 months unless needed for a claim or investigation.
8. Your Rights
Under the New Zealand Privacy Act 2020, you have the right to:
- Access the personal information we hold about you
- Request correction of your personal information
- Request deletion of your personal data
- Withdraw consent for marketing communications
- Lodge a complaint with the Privacy Commissioner
To exercise your rights, contact us using the details below.
9. Data Security
We take data security seriously and implement technical and organisational measures including:
- SSL encryption (HTTPS)
- PCI-DSS-compliant payments via Stripe
- Access controls and secure platforms
- Breach response protocols
10. Children's Privacy
Our services are not directed to individuals under 16. If you're under 16, please do not use our services without parental consent.
11. Changes to This Policy
We may update this policy from time to time to reflect changes in our practices or legal requirements. Updated versions will be posted on our website with the effective date.
12. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:
DressNZ Limited
158 Longlands Rd East, Longlands, Hastings, HKB, New Zealand 4172
You may also contact the Office of the Privacy Commissioner at www.privacy.org.nz.