Privacy policy

Last updated: 31 May 2026

Arkilla operates this store and website, including all related information, content, features, tools, products and services, to provide you, the customer, with a curated shopping experience (the “Services”). Arkilla is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described in it. For the purposes of applicable data protection laws, Arkilla is the data controller of your personal information.

Personal Information We Collect or Process

When we use the term “personal information,” we are referring to information that identifies or can reasonably be linked to you or another person. Depending on how you interact with the Services, where you live, and as permitted or required by applicable law, we may collect or process the following categories of personal information, including inferences drawn from it:

•     Contact details including your name, address, billing address, shipping address, phone number, and email address.

•     Financial information including payment card information, transaction details, form of payment, and payment confirmation. Full card details are handled by our payment providers, not stored by us.

•     Account information including your username, password, security questions, preferences and settings.

•     Transaction information including items you view, add to your cart or wishlist, or purchase, return, exchange or cancel, and your past transactions.

•     Communications with us including the information you include when you contact us, for example a customer support enquiry.

•     Device information including information about your device, browser or network connection, your IP address, and other unique identifiers.

•     Usage information including information about how and when you interact with or navigate the Services.

Personal Information Sources

We may collect personal information directly from you; automatically through the Services (including through cookies and similar technologies); from our service providers when they collect or process information on our behalf; and from our partners or other third parties.

How We Use Your Personal Information

•     Provide, tailor and improve the Services — to perform our contract with you, process payments, fulfil and ship your orders, manage your account, handle returns and exchanges, enable reviews, and personalise and improve your experience.

•     Marketing and advertising — to send you marketing communications (where permitted) and show you relevant online advertisements. You can opt out at any time.

•     Security and fraud prevention — to authenticate your account, provide a secure payment and shopping experience, and detect or prevent fraudulent or unlawful activity.

•     Communicating with you — to provide customer support and maintain our business relationship with you.

•     Legal reasons — to comply with applicable law, respond to valid legal process, and enforce our terms and policies.

How We Disclose Personal Information

In certain circumstances we may disclose your personal information to third parties for legitimate purposes subject to this Privacy Policy, including:

•     With our fulfilment partners, suppliers and delivery carriers — including partners and warehouses located overseas, such as in China — who pack and ship your order to you. See “Overseas Disclosure of Your Personal Information” below for important details.

•     With Shopify and other vendors who perform services on our behalf, such as IT management, payment processing, data analytics, customer support and cloud storage.

•     With business and marketing partners to provide marketing services and advertise to you, in accordance with their own privacy notices. Depending on where you live, you may have a right to opt out of this sharing.

•     When you direct, request or otherwise consent to our disclosure of certain information to third parties.

•     With our affiliates or within our corporate group, and in connection with a business transaction such as a merger or sale, or to comply with legal obligations and protect our rights and the rights of others.

Overseas Disclosure of Your Personal Information

Arkilla is based in New Zealand, and we handle your personal information in accordance with the New Zealand Privacy Act 2020.

To process, fulfil and deliver your order, we share certain personal information — including your name, shipping address, email address and phone number, together with your order details — with our third-party fulfilment partners, their suppliers and delivery carriers. These partners and warehouses are located overseas, including in China.

Because these recipients are located outside New Zealand, they may not be subject to privacy laws that provide the same level of protection as the New Zealand Privacy Act 2020, and your personal information may not be protected to the standards required in New Zealand.

We share only the information necessary to fulfil and deliver your order. By placing an order and providing your delivery and contact details, you authorise us to disclose that information to our overseas fulfilment partners for the purpose of processing, fulfilling and delivering your order. If you do not wish your information to be disclosed overseas in this way, we will be unable to fulfil your order.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve them. Information you submit to the Services will be transmitted to and shared with Shopify, as well as third parties that may be located in countries other than where you reside. Shopify may also use certain data from your interactions with our store, other merchants and Shopify to provide enhanced features. In these circumstances, Shopify is responsible for the processing of your personal information. To learn more, you can review the Shopify Consumer Privacy Policy at https://www.shopify.com/legal/privacy/app-users and the Shopify Privacy Portal at https://privacy.shopify.com/en.

Third-Party Websites and Links

The Services may link to websites or platforms operated by third parties. We are not responsible for the privacy or security practices of those sites, and we encourage you to review their policies before providing them with your information.

Children’s Data

The Services are not intended to be used by children, and we do not knowingly collect personal information from children under the age of majority in your jurisdiction. If you believe a child has provided us with personal information, please contact us using the details below and we will take steps to delete it.

Security and Retention of Your Information

No security measures are perfect, and we cannot guarantee “perfect security.” Information you send to us may not be secure while in transit, so we recommend you do not use unsecure channels to send us sensitive information. We retain your personal information for as long as necessary to provide the Services, maintain your account, comply with our legal obligations, resolve disputes and enforce our policies.

Your Rights and Choices

Depending on where you live, you may have some or all of the following rights in relation to your personal information: the right to access or know what we hold, to request deletion, to request correction, to request portability, and to opt out of the “sale” or “sharing” of personal information for targeted advertising. These rights are not absolute and may apply only in certain circumstances. If you are in the UK or European Economic Area, you may also have the right to object to or restrict processing, and to withdraw consent where we rely on it. You can exercise these rights by contacting us using the details below; we may need to verify your identity first.

Complaints

If you have a complaint about how we process your personal information, please contact us using the details below. If you are in New Zealand, you may also raise a complaint with the Office of the Privacy Commissioner (www.privacy.org.nz). If you are in the UK or EEA, you may lodge a complaint with your local data protection authority.

International Transfers

Please note that we may transfer, store and process your personal information outside the country you live in, including as described in “Overseas Disclosure of Your Personal Information” above. If we transfer personal information out of the European Economic Area or the United Kingdom, we will rely on recognised transfer mechanisms such as the European Commission’s Standard Contractual Clauses, or equivalent UK clauses, unless the transfer is to a country recognised as providing an adequate level of protection.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for other operational, legal or regulatory reasons. We will post the revised version on this website, update the “Last updated” date, and provide notice as required by applicable law.

Contact

If you have any questions about our privacy practices or this Privacy Policy, or wish to exercise any of your rights, please contact us at support@arkilla.store.