Privacy policy

pokelockbox ("we", "us") respects your privacy and handles personal information in line with the New Zealand Privacy Act 2020 and its Information Privacy Principles. This policy explains what we collect, why, who we share it with and your rights.

1. Information we collect

  • When you order: name, email, phone number, delivery and billing address, the items you buy and your order history.
  • Payment details: card and payment information is entered directly into Shopify's checkout and processed by our payment providers. We never see or store your full card number.
  • When you contact us or subscribe: your name, email and the content of your message; your newsletter consent.
  • When you browse: device and browser information, IP address, pages viewed and cart activity, collected through cookies and similar technologies (see section 5).

2. Why we use it

We use your information to process and deliver orders, send order and shipping updates, handle returns and questions, prevent fraud, meet our legal and tax obligations, and improve our store. We send marketing emails only if you have opted in.

3. Who we share it with

We share only what each provider needs to do its job:

  • Shopify (our e-commerce platform, which hosts our store and checkout)
  • Payment providers (such as Shopify Payments and PayPal) to process payments
  • Delivery carriers to deliver your order
  • Google (Analytics, Ads and Merchant Center), only where you have allowed analytics or marketing cookies
  • Professional advisers or authorities, where the law requires it

We do not sell your personal information.

4. Storage overseas

Some of these providers, including Shopify, store information on servers outside New Zealand (for example in Canada and the United States). Under Information Privacy Principle 12, we only use providers that are required to protect your information with safeguards comparable to those of the Privacy Act 2020.

5. Cookies and consent

We use essential cookies to run the store and remember your cart. Analytics and marketing cookies are used only with your consent where consent is required. You can change your choice at any time using "Cookie preferences" in the footer of our website.

6. Marketing emails

If you tick the consent box when subscribing, we email you about new releases, pre-orders and offers. You can unsubscribe at any time with the link in every email, or by emailing us.

7. Security and retention

We protect your information with reasonable security safeguards, including access controls and Shopify's encrypted checkout. We keep order records for 7 years to meet New Zealand tax requirements, and other information only as long as we need it.

8. Your rights

You have the right to ask for a copy of the personal information we hold about you and to ask us to correct it (Information Privacy Principles 6 and 7). Email us and we will respond within 20 working days. If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.

9. Changes

We may update this policy. The current version is always on this page.

10. Contact

pokelockbox ships from Auckland, New Zealand. Email: contact@pokelockbox.online