Privacy policy

Last updated: July 20, 2026

ARLO THOMPSON owns and operates this online store and website, alongside all associated content, features, tools, merchandise and services, aiming to deliver a curated shopping experience for all customers (collectively referred to as the “Services”). This store is hosted on Shopify, which supports us to deliver the Services to you. This Privacy Policy outlines how we collect, utilise and disclose your personal data when you browse, use, place orders or communicate with our store. If there is any inconsistency between our Terms of Service and this Privacy Policy, this document shall prevail for all matters concerning the collection, processing and disclosure of your personal information.
Please read this Privacy Policy thoroughly. By accessing and using any of our Services, you confirm that you have read and fully understood our rules for collecting, using and sharing your personal data set out below.

Personal Information We Collect and Process

“Personal information” means data that can identify you individually, or can be reasonably linked to you or any other natural person. Anonymous or de-identified data that cannot trace back to a specific individual is not classified as personal information. Subject to your interaction with our Services, your residential location and applicable local laws, we may gather and process the following categories of personal information, including reasonable inferences generated from such data:

Contact details: full name, residential address, billing address, delivery address, mobile phone number and email address;

Financial data: credit/debit card numbers, bank account details, payment records, transaction receipts and all other payment-related information;

Account credentials: username, login password, security recovery questions, personal preferences and page settings;

Transaction history: viewed items, cart additions, wishlist entries, purchase, return, exchange and cancellation records, full order archives;

Customer communications: all details you submit when contacting our support team;

Device identifiers: device model, browser type, network data, IP address and other unique hardware tags;

User behaviour data: records of your browsing paths, operation timing and interactions with our website.

Sources of Personal Information

We obtain your personal information via the following channels:

Direct submissions from you: when you register an account, visit our site, reach out to support or actively provide personal data;

Automatic site collection: data captured from your device via cookies and comparable tracking technologies while you browse our Services;

Authorised service providers: third-party vendors who process your data on our behalf to deliver technical support;

Official business partners and other regulated third-party platforms.

How We Utilise Your Personal Information

We process your personal data for the following legitimate purposes based on how you engage with our Services:
  1. Deliver, customise and optimise our Services

    We use your information to fulfil our sales contract, process payments, arrange delivery and complete order fulfilment. We store your shopping preferences and favourite products, send account updates, manage returns and exchanges, maintain your user account, enable customer reviews and generate personalised product recommendations to refine your shopping experience.
  2. Marketing and targeted advertising

    We send promotional notifications via email, SMS and post, and display tailored ads on our site and third-party platforms based on your browsing and purchasing history.
  3. Account security and fraud prevention

    We verify user identities to secure payment and shopping environments, detect and resolve fraudulent, illegal or malicious activities, and safeguard public safety. If you register an account with us, you are fully responsible for protecting your login credentials and must not share your username, password or access details with any third party.
  4. Customer service communication

    We rely on your contact information to respond to enquiries, provide after-sales support and maintain consistent customer relations.
  5. Legal compliance obligations

    We comply with local regulatory requirements, respond to official requests from law enforcement and government bodies, participate in civil litigation and dispute resolution, and investigate potential breaches of our site terms and policies.

Circumstances of Personal Information Disclosure

We will only share your personal information with third parties for legitimate reasons under the terms of this Privacy Policy, including the scenarios listed below:
  • Authorised service partners including Shopify, logistics providers, payment processors, data analytics agencies, cloud storage operators and customer support vendors who perform operational services for our store;
  • Marketing collaborators to deliver targeted promotions and advertisements. Shopify supports cross-store personalised advertising based on your online activity across multiple merchants. Our marketing partners will process your data in accordance with their independent privacy policies. Depending on your region of residence, you hold the right to request us to stop sharing your data for cross-platform targeted marketing;
  • Third-party disclosure authorised or requested explicitly by you, such as delivery logistics, social media login plugins and content sharing widgets;
  • Internal sharing within our corporate affiliated entities;
  • Business restructuring events including mergers and bankruptcy; compliance with legal subpoenas, warrants and official investigations; enforcement of our site terms; protection of legitimate rights of our store, customers and third parties.

Data Relationship with Shopify

Our entire store infrastructure is hosted by Shopify, which independently collects and processes your personal data to power and improve our shopping Services. All data you submit to our store will be transmitted to Shopify and overseas third-party vendors.

We utilise advanced Shopify business tools which integrate your interaction records from our store, other merchant stores and Shopify’s core platform. For these services, Shopify acts as the independent data controller and handles all requests you submit to exercise your data rights. To review Shopify’s full privacy rules and your user entitlements, please visit Shopify’s official consumer privacy policy and privacy portal (rights eligibility varies by jurisdiction).

Third-Party External Links

Our website may contain hyperlinks to external platforms operated by independent third parties. We recommend you review the privacy and security policies of any external website before browsing. We do not take responsibility for the data safety, accuracy or integrity of content hosted on external sites.

Any information you publish on public social media widgets can be viewed and used unrestrictedly by other platform users, both on our site and third-party channels. The inclusion of external links does not constitute official endorsement of the third-party platform, its operators or published content.

Protection of Minors’ Data

Our Services are designed exclusively for adult users, and we do not intentionally collect personal information from minors. If you are a legal guardian and discover a minor has submitted personal data to our store, you may contact us via the listed contact details to request permanent deletion.

As of the effective date of this Privacy Policy, we do not engage in the sale or sharing of personal information belonging to users under 16 years old, as defined by applicable local data protection laws.

Data Security & Information Retention

No digital security measure can guarantee absolute data protection, and data transmitted online carries inherent transmission risks. We advise you to avoid submitting sensitive or confidential personal data via unencrypted communication channels.

We retain your personal information for different durations based on operational needs, including account maintenance, order fulfilment, legal compliance, dispute settlement and enforcement of our contractual terms.

Your Data Rights & Preference Controls

Subject to your local data protection legislation, you may hold some or all of the following rights over your personal information. These rights are conditional and not absolute; we reserve the right to decline your request where permitted by law:
  1. Right to access: Request a full copy of all personal data we store about you;
  2. Right to erasure: Submit a request to delete all your retained personal information;
  3. Right to rectification: Request correction of inaccurate or outdated personal data;
  4. Right to data portability: Obtain a copy of your personal data and request transfer to a third party (subject to specific exceptions and limitations);
  5. Marketing communication management: You may unsubscribe from all promotional emails at any time via the unsubscribe link included in our newsletters. Functional transactional emails regarding your orders and account status will still be delivered after unsubscription.
You may exercise all listed rights via designated site portals or our official contact channels. For data processed by Shopify, please refer to https://privacy.shopify.com/en for full right guidelines.

We will never discriminate against users who exercise their legal data rights. We are required to verify your identity before processing your requests. You may appoint an authorised agent to submit requests on your behalf; the agent must provide valid written proof of authorisation, and we may require direct identity verification from you. We will respond to all valid requests within the statutory timeframe required by local law.

Complaint Procedures

If you have concerns regarding our processing of your personal data, please contact us via the official channels below. Based on your local regulations, you may request a formal review of our decision, or submit a formal complaint to your local data protection authority directly.

Cross-Border Data Transfers

We reserve the right to transfer, store and process your personal information in countries outside your residential jurisdiction.

If data is transferred out of the European Economic Area or the United Kingdom, we will adopt approved legal transfer frameworks including the European Commission Standard Contractual Clauses or equivalent UK official data transfer agreements, unless the receiving country has been officially recognised as providing adequate data protection standards.

Amendments to This Privacy Policy

We may revise this Privacy Policy periodically to reflect operational adjustments, regulatory updates or internal business changes. All updated versions will be published live on our website with an updated “Last updated” date, and formal notifications will be issued in compliance with local legal requirements.

Contact Information

For any enquiries about our data handling practices or this Privacy Policy, or to submit requests to exercise your personal data rights, reach us via:

Phone: +64 226 842 915

Email: info@arlocir.shop

Physical Address: ARLO THOMPSON, 46 High Street, New Plymouth Central, TKI, New Plymouth 4310, New Zealand