Privacy policy

PRIVACY POLICY

SECTION 1 – WHAT DO WE DO WITH YOUR INFORMATION?

When you purchase something from our store, we collect personal information you give us—such as your name, address, and email address—as part of the buying and selling process.

When you browse our store, we also automatically receive your computer’s IP address to help us learn about your browser and operating system.

With your permission, we may send you emails about our store, new products, and updates.

SECTION 2 – CONSENT

How do we get your consent? When you provide us with personal information to complete a transaction—like placing an order, arranging delivery, or returning a purchase—we imply that you consent to our collecting and using it for that purpose only.

For secondary purposes (e.g., marketing), we will ask you directly for your express consent or provide a clear opportunity to decline.

How do you withdraw your consent? You may withdraw your consent for us to contact you or to continue collecting or using your information at any time by contacting us at sales@thespashop.co.nz or by mailing us at:

The Spa Shop
[Re: Privacy Compliance Officer]
1135 Fenton Street
Rotorua 3010
New Zealand

SECTION 3 – DISCLOSURE

We may disclose your personal information if required by law or if you violate our Terms of Service.

SECTION 4 – SHOPIFY

Our store is hosted on Shopify Inc. They provide us with the e-commerce platform to sell our products and services.

Your data is stored through Shopify’s secure data storage and infrastructure behind a firewall.

Payments: If you use a direct payment gateway, Shopify stores your credit card data encrypted through the Payment Card Industry Data Security Standard (PCI-DSS). Transaction data is stored only as long as necessary to complete your purchase.

All payment gateways adhere to PCI-DSS standards managed by the PCI Security Standards Council (a collaboration of Visa, MasterCard, American Express, and Discover).

For more information, please review Shopify’s Terms of Service and Privacy Policy.

SECTION 5 – THIRD-PARTY SERVICES

Third-party providers used by us will only collect, use, and disclose your information as necessary to perform their services.

However, some providers (e.g., payment gateways) have their own privacy policies regarding your data. We recommend reviewing their policies to understand how they manage your information.

If you proceed with a transaction involving a third-party provider, your data may become subject to the laws of the provider’s jurisdiction. For example, if you're in New Zealand and the provider is in the U.S., your data may be subject to U.S. laws (e.g., the Patriot Act).

Once you leave our store or are redirected to a third-party website, this Privacy Policy no longer applies.

Links: Our website may contain links to external sites. We are not responsible for their privacy practices and encourage you to review their policies.

SECTION 6 – SECURITY

To protect your personal information, we take reasonable precautions and follow industry best practices to ensure it is not inappropriately accessed, altered, disclosed, or destroyed.

If you provide credit card information, it is encrypted using SSL and stored with AES-256 encryption. While no method of electronic transmission is 100% secure, we follow all PCI-DSS requirements.

SECTION 7 – COOKIES

We use cookies to enhance your shopping experience. Examples include:

  • _session_id: session token used by Shopify.

  • _shopify_visit: no data held, used for internal stats.

  • _shopify_uniq: counts store visits per customer.

  • cart: stores cart contents.

  • _secure_session_id, storefront_digest: used for secure access and session management.

You can choose to opt out of cookies in your browser settings.

SECTION 8 – AGE OF CONSENT

By using this site, you confirm you are at least the age of majority in your jurisdiction, or have given us consent to allow any of your minor dependents to use this site.

SECTION 9 – CHANGES TO THIS PRIVACY POLICY

We may update this policy at any time. Changes take effect immediately upon posting. If significant changes occur, we will note them here.

If our business is acquired or merged, your data may be transferred to the new owner so that we may continue to sell products to you.

SECTION 10 – INDEPENDENT BUSINESS NOTICE

The Spa Shop is an independent retailer and service provider. While we are an approved Hot Spring Spas New Zealand retailer and repair agent, we are not affiliated with, sponsored by, or owned by Watkins Wellness® (USA), the manufacturer of Hot Spring® products.

All trademarks and brand names belong to their respective owners and are used for descriptive purposes only.

QUESTIONS AND CONTACT INFORMATION

To access, correct, amend, or delete any personal data we have about you, register a complaint, or ask questions, contact:

Privacy Compliance Officer
sales@thespashop.co.nz
The Spa Shop
1135 Fenton Street
Rotorua 3010
New Zealand