PRIVACY POLICY 

Dress Rental NZ Limited ("we", "us", "our") is committed to protecting the privacy of individuals and complying with the Privacy Act 2020 (New Zealand).

This Privacy Policy explains how we collect, use, disclose, store and protect personal information.

1. Scope

This Privacy Policy applies to all personal information collected by us through:

• our website (including checkout, bookings and enquiries)
• in‑store or try‑on appointments
• email, SMS, social media and other communications
• any related services we provide

2. Personal Information We Collect

We may collect the following categories of personal information:

2.1 Identity and Contact Information

• full name
• email address
• phone number
• billing and delivery address

2.2 Transaction and Booking Information

• rental bookings and dates
• dress selections and sizing information
• damage, late return or dispute records
• payment status (but not full card details)

2.3 Payment Information

Payments are processed by third‑party payment providers. We do not store full credit card details.

2.4 Technical and Usage Information

• IP address
• device type, browser type
• pages visited and interactions
• cookies and similar tracking technologies

2.5 Communications

• correspondence with us
• customer support requests
• feedback and reviews

3. Purpose of Collection

We collect personal information only where necessary for legitimate business purposes, including to:

• process and manage rentals
• verify identity and prevent fraud
• deliver and retrieve rental items
• communicate booking updates
• enforce our Terms of Service
• manage disputes, damage or loss claims
• meet legal, tax and accounting obligations
• improve our services and website functionality
• send marketing communications (where consent is given or permitted by law)

4. Legal Basis for Use

We collect and use personal information where:

• it is necessary to perform a contract with you
• you have provided consent
• we are required to comply with legal obligations
• it is necessary for our legitimate business interests

5. Disclosure of Personal Information

We may disclose personal information to:

• Shopify, our e‑commerce platform provider, which hosts our website and stores customer information for order processing, customer communications, payment facilitation and order fulfilment
• courier and logistics providers
• cleaning and garment care providers
• payment processors and banks (including Afterpay, which receives customer information necessary to process buy-now-pay-later transactions)
• website hosting, analytics and IT service providers
• marketing and email platforms (including Klaviyo for newsletters and marketing communications, and Google services for transactional and operational email communications), and Judge.me for collecting, displaying and verifying customer reviews (including confirming whether a customer has placed an order and processing reviewer details such as name, email address and review content)
• advertising and analytics providers (including Google, Meta and Microsoft)
• debt recovery agencies (where permitted under our Terms)
• legal, accounting or regulatory authorities where required by law

We do not sell personal information.

6. Overseas Storage and Transfers

Some service providers store information outside New Zealand. Where this occurs, we take reasonable steps to ensure overseas recipients provide safeguards comparable to the Privacy Act 2020.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

• operate our website
• analyse usage
• improve user experience
• support marketing and advertising

We use third-party analytics and behaviour tools, including **Microsoft Clarity may collect information through cookies or similar technologies. Data collected by Microsoft Clarity is processed in accordance with Microsoft’s privacy practices and may be stored outside New Zealand.

In addition, we use Google Analytics to analyse website traffic and usage patterns, and Google Ads and Meta (Facebook and Instagram) advertising tools to deliver and measure advertising, including remarketing. These services may collect information such as pages visited, actions taken on the site, IP address, device and browser information, and may use cookies or similar technologies to associate your visit with advertising campaigns.

Information collected through Google and Meta services is processed in accordance with their respective privacy policies and may be stored outside New Zealand.

We also use Klaviyo as an email and marketing automation platform to manage customer communications, including transactional emails and marketing messages (where permitted by law). Klaviyo may process personal information such as names, email addresses, order history, browsing behaviour and engagement data. This information is used to personalise communications, analyse campaign performance and improve marketing effectiveness. Data processed by Klaviyo may be stored outside New Zealand and is handled in accordance with Klaviyo’s privacy practices.

You can manage cookie preferences through your browser settings. Disabling cookies may affect website functionality.

8. Retention of Information

We retain personal information only for as long as necessary, including:

• transaction records: up to 7 years (tax and accounting requirements)
• customer accounts: while active and for a reasonable period thereafter
• marketing data: until you unsubscribe or request removal
• dispute or enforcement records: for as long as reasonably required

9. Security Safeguards

We take reasonable technical and organisational measures to protect personal information from loss, misuse, unauthorised access or disclosure. However, no system is completely secure.

10. Access and Correction Rights

You have the right to:

• request access to your personal information
• request correction of inaccurate or incomplete information

Requests can be made using the contact details below. We will respond within the timeframes required by the Privacy Act 2020.

11. Privacy Breaches

If a privacy breach occurs that is likely to cause serious harm, we will notify affected individuals and the Office of the Privacy Commissioner as required by law.

12. Complaints

If you believe we have breached the Privacy Act 2020, you may contact us first. You may also complain to the Office of the Privacy Commissioner.

13. Contact Details

Privacy Officer: Dress Rental NZ Limited Email: info@dressrentalnz.com

14. Updates

We may update this Privacy Policy from time to time. The latest version will always be available on our website.