This Privacy Policy explains how Gillian Ann Mark, trading as Kina & Co, collects, uses, stores, shares and protects your personal information.
In this Privacy Policy, we, us and our refer to Gillian Ann Mark, trading as Kina & Co. You and your refer to anyone who uses our website, interacts with us through social media, provides information to us, or purchases our products or services.
We are committed to handling your personal information in accordance with the New Zealand Privacy Act 2020. Where the privacy or data protection laws of another jurisdiction apply to our activities, we will also take reasonable steps to comply with those requirements.
We take reasonable steps to ensure that personal information is accurate, securely stored and retained only for as long as it is reasonably required. We also take appropriate measures to protect personal information from loss, misuse, unauthorised access, modification or disclosure.
What is personal information?
Personal information is information about an identifiable individual.
This may include your name, contact details, username and password, IP address, payment information, customer survey responses, correspondence with us, and details of the products or services that we provide to you.
Your obligations when giving us personal information
You are responsible for ensuring that the personal information you provide to us is accurate, complete and up to date.
You must not provide us with personal information about another person unless you are authorised to do so and that person has agreed to their information being provided to us in accordance with this Privacy Policy.
Where we collect your information from
Where reasonably practicable, we collect personal information directly from you.
This may occur when you:
-
create an account;
-
contact us by email, telephone, through our website or through social media;
-
submit content or information to us; or
-
place an order for products or services.
We may also collect personal information from:
-
other websites or platforms, including social media;
-
businesses, service providers or individuals that work with us;
-
publicly available sources; or
-
another person whom you have authorised to provide information to us.
We may also automatically collect certain information when you use our website through cookies and similar technologies, as described below.
Cookies and other tracking technologies
We may use cookies and similar tracking technologies to collect information about how you use our website and to store certain information.
Cookies are small data files placed on your device. They help us operate our website, personalise your experience, understand how the website is used and improve our products and services.
The cookies used on our website may include:
-
Essential cookies, which are necessary for the website to operate properly;
-
Performance cookies, which help us understand how visitors use the website;
-
Functional cookies, which allow the website to remember your preferences; and
-
Targeting or advertising cookies, which may be used to provide personalised content or advertisements.
You can manage or withdraw your consent to the use of non-essential cookies through the cookie settings available on our website or through your browser settings.
Further information about managing and deleting cookies is available from websites such as aboutcookies.org and allaboutcookies.org.
Disabling certain cookies may affect your experience of the website or prevent some features from operating correctly. Essential cookies cannot be disabled because they are required for the security and operation of the website.
Why we collect your information
We may collect and use your personal information for the following purposes:
-
to provide and deliver our products or services;
-
to communicate with you, including responding to your enquiries;
-
to personalise and improve your experience on our website;
-
to carry out analytics and research;
-
to obtain feedback and improve our products or services;
-
to process payments and recover money owed to us;
-
to manage complaints, disputes and customer service matters;
-
to comply with our legal and contractual obligations;
-
to establish, exercise or protect our legal rights;
-
to promote our products or services and provide information that we consider may be relevant or of interest to you, including information relating to our business partners;
-
to verify your identity and protect against fraud or impersonation; or
-
for any other purpose that you have expressly authorised.
Using your information
We will only use your personal information for the purposes for which it was collected, for a directly related purpose, or where its use is otherwise authorised or required by law.
We will not retain personal information for longer than is reasonably necessary. When it is no longer required, we will take reasonable steps to securely delete, destroy or anonymise it.
Who we share your information with
We may share your personal information where this is reasonably necessary for the purposes described in this Privacy Policy.
This may include sharing information with:
-
businesses or individuals that assist us in providing our products or services or operating our business, including distributors, suppliers, service providers, technology providers, cloud service providers and professional advisers;
-
any person or organisation where disclosure is required or authorised by law;
-
prospective purchasers, advisers or other relevant parties in connection with a proposed sale, transfer or restructuring of all or part of our business or assets; or
-
any other person or organisation that you have expressly authorised us to disclose your information to.
Relationship with Shopify
Our website and online store are hosted by Shopify.
Shopify collects and processes personal information relating to your access to and use of our website in order to provide, maintain and improve its services. Information that you submit through our website may be transmitted to and shared with Shopify and its service providers, including service providers located outside the country in which you reside.
We may also use Shopify features that incorporate information obtained from your interactions with our store, Shopify and other Shopify merchants. These features may assist us and Shopify in protecting, operating, growing and improving our respective businesses and services.
Where Shopify processes personal information for its own purposes, Shopify is responsible for that processing, including responding to requests relating to the exercise of applicable privacy rights.
Further information about how Shopify collects and uses personal information is available in the Shopify Consumer Privacy Policy and through Shopify’s Privacy Portal.
Transfer of information to other countries
Your personal information may be transferred to, processed in or stored in countries outside the country in which you provided it.
The privacy and data protection laws of those countries may differ from those applying in New Zealand.
Where personal information collected in New Zealand is disclosed outside New Zealand, we will only make that disclosure where:
-
the recipient carries on business in New Zealand and is subject to the New Zealand Privacy Act 2020;
-
we reasonably believe that the recipient is required to protect the information in a manner comparable to the protections provided by the Privacy Act 2020;
-
the recipient is subject to privacy laws that provide comparable safeguards; or
-
you have expressly authorised the disclosure after being informed that the recipient may not be required to protect the information in a manner comparable to the Privacy Act 2020.
How we keep your information safe and secure
Security and Retention of Your Information
We take reasonable physical, technical and administrative measures to protect personal information from loss, misuse, unauthorised access, modification or disclosure.
Our website is hosted by Shopify, which uses encrypted connections and established security controls to protect information processed through its platform. Shopify is certified as Level 1 PCI DSS compliant and maintains SOC 2 Type II and SOC 3 assurance reports.
We also limit access to personal information to individuals and service providers who reasonably require access to operate our business or provide services on our behalf.
However, no security system or method of transmitting or storing information electronically can be guaranteed to be completely secure. You should therefore take reasonable care when transmitting sensitive or confidential information to us online and avoid using insecure communication channels.
How you can access and correct your information
You may request access to the personal information that we hold about you and ask us to correct any information that you believe is inaccurate, incomplete or out of date.
Requests can be made by emailing hello@kinaandco.nz.
In some circumstances, we may be permitted or required by law to withhold access to certain information. If we are unable to provide access, or if we decline to make a requested correction, we will explain our reasons where required by law.
If we do not make a requested correction, you may ask us to attach a statement to the information recording the correction that you requested.
Direct Marketing
Where permitted by law, we may contact you by telephone, post, email, SMS or another electronic method with promotional information and offers relating to our products or services, our related businesses, or selected business partners that we believe may be relevant or of interest to you.
You may withdraw your consent to receive marketing communications at any time.
You can unsubscribe by using the unsubscribe or opt-out facility included in the relevant communication or by emailing hello@kinaandco.nz.
Unsubscribing from marketing communications will not prevent us from sending you messages that are reasonably necessary to process an order, provide a service or respond to an enquiry.
How to make a privacy complaint
If you believe that we have not handled your personal information in accordance with our privacy obligations, please contact us at hello@kinaandco.nz.
We will consider your complaint and take reasonable steps to investigate and respond to your concerns.
You may also make a complaint to the New Zealand Office of the Privacy Commissioner through its website at privacy.org.nz.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our business practices, services, technology or legal obligations.
The current version of this Privacy Policy will be published on our website. Where appropriate, we may also notify you of significant changes by email or through a notice on the website.
If you have any questions about this Privacy Policy, please contact us at hello@kinaandco.nz.
Effective date: 1 September 2026