The Theory LIMITED respects your privacy and handles personal information in accordance with the Privacy Act 2020.
BUSINESS AND PRIVACY CONTACT
The Theory LIMITED
Contact: hello@thetheory.co.nz
Website: www.thetheory.co.nz
The company email is monitored for privacy access, correction, deletion, complaint and data-use enquiries.
WHAT WE COLLECT DIRECTLY
Depending on how you interact with us, we may collect:
Name
Email address
Phone number
Billing and shipping addresses
Account and login information
Order and purchase history
Gift-card information
Customer-service messages
Marketing preferences
Reviews, photographs, videos and other content you submit
Information you provide through promotions, surveys or contact forms
Information reasonably required to assess fraud, returns or customer-service issues
Payment-card information is processed by payment providers. The Theory LIMITED does not store complete payment-card details.
INFORMATION COLLECTED AUTOMATICALLY
When you use the website, we or our service providers may collect:
IP address and approximate location
Browser, device and operating-system information
Pages, products and search terms viewed
Shopping-cart and checkout activity
Referral source
Session and interaction information
Cookie identifiers and advertising identifiers
Website performance and security information
INDIRECT COLLECTION
We may receive personal information from another person or organisation, including Shopify, payment and fraud-prevention providers, couriers, advertising and analytics platforms, social-media platforms, referral or giveaway partners, or a person who sends a gift or submits content involving you.
Where Information Privacy Principle 3A applies, we will take reasonable steps to notify the affected person of the collection and relevant matters as soon as practicable, unless a lawful exception applies or the person has already been adequately informed.
WHY WE USE PERSONAL INFORMATION
We use personal information where reasonably necessary to:
Process, fulfil and deliver orders
Take and reconcile payments
Create and administer accounts
Provide customer support
Handle returns, exchanges and consumer-law claims
Send order, shipping and service communications
Detect and prevent fraud, misuse and security incidents
Personalise and improve the website and products
Measure website and advertising performance
Administer promotions, reviews and surveys
Send marketing where consent or another lawful basis exists
Meet legal, accounting and record-keeping obligations
Resolve disputes and enforce lawful agreements
Protect customers, staff and the business
We will not use personal information for an unrelated purpose unless authorised by the Privacy Act 2020 or with appropriate consent.
WHEN INFORMATION IS REQUIRED
Providing personal information is generally voluntary. However, if information required to process an order, deliver goods, verify payment or assess a request is not provided, we may be unable to complete that service.
MARKETING COMMUNICATIONS
We send commercial electronic messages only where permitted by the Unsolicited Electronic Messages Act 2007. Marketing messages will identify the sender and include a functional unsubscribe facility.
You may unsubscribe using the link in a message or by emailing hello@thetheory.co.nz. We will action valid unsubscribe requests within the legally required period. Transactional order and service messages may still be sent where necessary.
We do not treat an ordinary purchase as unlimited consent to future marketing.
COOKIES AND SIMILAR TECHNOLOGIES
The website uses cookies and similar technologies for functions such as:
Keeping the cart and checkout working
Remembering preferences
Account and security functions
Measuring traffic and website performance
Understanding product and page engagement
Fraud prevention
Advertising measurement and, where enabled, personalised advertising
Cookie categories may include strictly necessary, functional, analytics and advertising cookies.
You can manage cookies through the website’s consent tools where available and through browser settings. Disabling necessary cookies may affect website operation.
ANALYTICS AND ADVERTISING
Depending on the tools actually enabled on the website, providers may include Shopify, Google Analytics, Google Ads, Meta, Pinterest or TikTok.
The website team must keep this list aligned with the integrations actually installed. A provider should not be listed merely because it may be used in future.
Analytics and advertising providers may receive identifiers, browsing activity, transaction events and related technical information in accordance with their own policies and our configuration.
SHARING PERSONAL INFORMATION
We may share personal information only where reasonably necessary with:
Shopify and website-hosting providers
Payment and buy-now-pay-later providers
Fraud-prevention and security providers
NZ Post and other couriers
Email, customer-support and marketing providers
Analytics and advertising providers that are actually enabled
Cloud-storage and information-technology providers
Professional advisers such as accountants, insurers and lawyers
Government, regulatory or law-enforcement agencies where authorised or required by law
A purchaser or adviser involved in a genuine proposed business transaction, subject to appropriate confidentiality and legal safeguards
We do not sell or rent personal information as a standalone product.
OVERSEAS PROCESSING AND DISCLOSURE
Some service providers operate or store information outside New Zealand.
Where a provider processes information solely on our behalf, we take reasonable steps to select and manage reputable providers. Where information is disclosed overseas for the recipient’s own use, we comply with Information Privacy Principle 12 by using an applicable legal basis, such as comparable safeguards, contractual protection, the recipient being subject to the Privacy Act, or informed authorisation where appropriate.
SECURITY
We use reasonable technical and organisational safeguards appropriate to the nature of the information and business, including access controls, reputable hosted services, account-security practices, software updates and staff procedures.
No internet or storage system is completely secure. Customers should use unique passwords and notify us promptly of suspected account misuse.
PRIVACY BREACHES
We maintain a process for identifying, containing and assessing privacy breaches. Where a breach has caused or may cause serious harm, we will notify the Office of the Privacy Commissioner and affected individuals as required by the Privacy Act 2020.
RETENTION
We retain personal information only for as long as reasonably required for the purpose collected and for legal, tax, accounting, fraud-prevention, dispute and record-keeping obligations. When information is no longer required, we take reasonable steps to securely delete, destroy or anonymise it.
ACCESS AND CORRECTION
You may ask for access to personal information we hold about you and request correction of information you believe is inaccurate. We may need to verify identity before responding.
If a correction is not made, you may ask us to attach a statement of the correction sought where the Privacy Act provides that right.
DELETION REQUESTS
You may ask us to delete personal information. Deletion is not an unconditional right under the Privacy Act 2020. We will consider the request and delete information where appropriate, subject to legal, accounting, fraud-prevention, contractual and record-keeping requirements.
PRIVACY COMPLAINTS
Contact hello@thetheory.co.nz first so we can investigate and respond. You may also make a complaint to the Office of the Privacy Commissioner if you are dissatisfied with the handling of personal information.
CHILDREN AND YOUNG PEOPLE
The website is directed primarily to adults. A person under 18 should use the website and place orders only with parent or guardian permission and supervision.
We do not knowingly seek unnecessary personal information from children. If we learn that information has been collected inappropriately, we will assess and address it under the Privacy Act 2020.
USER CONTENT AND IMAGES
Where reviews, photographs or videos identify another person, the submitter must have authority to provide the content. We will obtain separate express permission before using an identifiable customer image in paid advertising unless that use was already clearly authorised.
THIRD-PARTY LINKS
External websites and services operate under their own privacy practices. Review their privacy information before providing personal information to them.
CHANGES TO THIS POLICY
We may update this policy to reflect legal, technology or business changes. The updated version applies from its publication date. Material changes will be communicated where reasonably practicable.
CONTACT
The Theory LIMITED
Email: hello@thetheory.co.nz
Website: www.thetheory.co.nz
