Privacy policy
Last Updated: May 20, 2025
Introduction
Your privacy is important to us. This Privacy Policy explains how Probeauty ("we", "us", "our") collects, uses, discloses, and protects your personal information when you use our website and services, including our Shopify-based online store.
This Privacy Policy complies with the New Zealand Privacy Act 2020 and applies to all personal information we collect, use, and process through our website, online store, and related services.
By visiting our website, creating an account, or making a purchase, you are accepting and consenting to the practices described in this Privacy Policy.
Information We Collect
Personal Information
Personal information is information about an identifiable individual. We may collect the following types of personal information:
- Contact information: Name, email address, phone number, physical address, and billing address
- Account information: Username, password, and account preferences
- Transaction information: Details about purchases, product preferences, payment information, and order history
- Technical information: IP address, device information, browser type, operating system, and browsing behavior
- Communications: Records of your communications and interactions with us
- Marketing preferences: Your preferences for receiving marketing communications from us
- Feedback: Reviews, survey responses, and other feedback you provide about our products and services
How We Collect Information
We collect personal information in the following ways:
1. Directly from you when you:
- Create an account on our website
- Place an order or make a purchase
- Sign up for our newsletter or marketing communications
- Contact our customer service
- Complete surveys or provide feedback
- Interact with us on social media
2. Automatically when you:
- Browse our website
- Open our emails or click on links in our communications
3. From third parties:
- Payment processors and financial institutions
- Social media platforms (if you choose to connect your social media accounts)
- Shopify (our e-commerce platform provider)
- Other service providers that help us operate our business
How We Use Your Information
We use your personal information for the following purposes:
- To provide our products and services to you
- To process and fulfill your orders
- To create and manage your account
- To communicate with you about orders, products, services, and promotions
- To personalize your shopping experience
- To improve our website, products, and services
- To process payments and prevent fraud
- To respond to your inquiries and provide customer support
- To comply with our legal obligations
- To send you marketing communications (where you have consented)
- To conduct market research and analysis
Legal Basis for Processing
We collect and process your personal information based on the following legal grounds:
- The performance of our contract with you
- Our legitimate business interests
- Your consent (where applicable)
- Compliance with our legal obligations
Cookies and Similar Technologies
Our website uses cookies and similar technologies to enhance your browsing experience and collect information about how you use our website.
Types of Cookies We Use
- Essential cookies: Necessary for the website to function properly
- Performance cookies: Help us understand how visitors interact with our website
- Functional cookies: Enable enhanced functionality and personalisation
- Analytics cookies: Help us analyse website traffic and usage
- Advertising cookies: Used to deliver relevant advertisements and track campaign performance
You can manage your cookie preferences through your browser settings. However, disabling certain cookies may affect the functionality of our website.
We use services such as Google Analytics to help us understand website traffic and usage. For more information on how Google processes your data, please refer to Google's Privacy Policy.
Data Sharing and Disclosure
We may share your personal information with:
1. Service providers who help us operate our business, including:
- Shopify (our e-commerce platform)
- Payment processors
- Shipping and fulfillment partners
- Marketing and advertising partners
- Customer service providers
- Analytics providers
2. Legal authorities when required by law or to:
- Comply with legal obligations
- Protect and defend our rights and property
- Prevent fraud and reduce credit risk
- Protect the safety of our users or the public
3. Business partners in connection with a business transaction such as a merger, sale of assets, or acquisition.
We require all third parties to respect the security of your personal information and to treat it in accordance with applicable laws.
International Data Transfers
Your personal information may be transferred to, and processed in, countries other than New Zealand. These countries may have different data protection laws than New Zealand.
Specifically, our website is hosted on Shopify's platform, and your data may be stored on Shopify's servers located in various countries including Canada, the United States, and other locations where Shopify operates.
When we transfer your personal information outside New Zealand, we ensure appropriate safeguards are in place to protect your information, including:
- Ensuring recipients are located in countries with adequate privacy protections
- Using specific contracts approved for data transfers
- Obtaining your consent for the transfer (where required)
Data Security
We implement appropriate technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include:
- Encryption of sensitive data
- Secure networks and systems
- Regular security assessments
- Staff training on privacy and security
While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee the absolute security of your information.
Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including:
- Providing our products and services to you
- Meeting our legal and regulatory obligations
- Resolving disputes
- Enforcing our agreements
Specific retention periods include:
- Account information: For as long as your account is active, plus a reasonable period thereafter
- Order information: At least 7 years for tax and accounting purposes
- Marketing preferences: Until you opt-out or request deletion
When we no longer need your personal information, we will securely delete or anonymise it.
Your Privacy Rights
Under the New Zealand Privacy Act 2020, you have certain rights regarding your personal information:
- Right to access: You have the right to request a copy of the personal information we hold about you.
- Right to correction: You have the right to request correction of any inaccurate personal information we hold about you.
- Right to deletion: In certain circumstances, you have the right to request deletion of your personal information.
- Right to object: You have the right to object to processing of your personal information in certain circumstances.
- Right to complain: You have the right to make a complaint to the New Zealand Privacy Commissioner if you believe we have violated your privacy rights.
To exercise any of these rights, please contact us using the details provided in the "Contact Us" section.
Data Breach Notification
In the event of a privacy breach that has caused or may cause serious harm, we will:
- Assess the breach and determine whether it is likely to cause serious harm
- Notify the Privacy Commissioner and affected individuals as soon as practicable
- Work to contain and remedy the breach
- Review our systems and procedures to prevent similar breaches in the future
Marketing Communications
We may send you marketing communications about our products, services, and promotions if you have:
- Requested information from us
- Purchased products or services from us
- Provided your details when registering for a promotion
- Signed up for our newsletter
You can opt-out of receiving marketing communications at any time by:
- Clicking the "unsubscribe" link in any marketing email
- Contacting us directly using the details provided below
- Updating your preferences in your account settings
Children's Privacy
Our website and services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information.
If you believe we may have collected information from a child, please contact us using the details provided below.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. The updated version will be posted on our website with a revised "Last Updated" date.
We recommend that you check this page regularly to stay informed about our privacy practices. Your continued use of our website following the posting of changes constitutes your acceptance of such changes.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:
Email: info@exogrow.co.nz
We will respond to your inquiry as soon as reasonably practicable, and in any event within 20 working days.
Complaints
If you wish to make a complaint about how we handle your personal information, please contact us using the details above. We will investigate your complaint and respond to you within 20 working days.
If you are not satisfied with our response, you can contact the Office of the New Zealand Privacy Commissioner:
Website: www.privacy.org.nz Email: enquiries@privacy.org.nz Phone: 0800 803 909