Privacy Policy — LUA Jewellery

LUA Jewellery ("LUA", "we", "us") operates this website at luajewellery.com, including all related content, features, products, and services (the "Services"). This Privacy Policy describes how we collect, use, and disclose your personal information when you visit the site, make a purchase, or otherwise communicate with us. We handle personal information in accordance with the New Zealand Privacy Act 2020.

By using the Services, you acknowledge that you have read this Privacy Policy and understand how your information is collected, used, and disclosed as described here.

Personal information we collect

"Personal information" means information that identifies, or can reasonably be linked to, you. Depending on how you interact with the Services, we may collect:

Contact details — your name, shipping address, billing address, phone number, and email address.
Payment information — payments are processed by our payment provider (Stripe). We receive transaction details and payment confirmation, but we never see or store your full card number.
Order information — the items you view, add to your cart, purchase, return, or exchange, and your order history.
Communications — the information you include when you email or message us, such as a customer support enquiry.
Device and usage information — information about your device, browser, IP address, and how you interact with the site.

Where we collect it from

Directly from you — when you place an order, contact us, or browse the site.
Automatically — through cookies and similar technologies needed to run the site (for example, remembering your cart).
From our service providers — such as our payment processor and shipping providers, when they handle your information on our behalf.

How we use your personal information

Providing the Services — processing payments, fulfilling and shipping orders, handling returns and exchanges, and keeping you updated about your order.
Customer support — responding to your enquiries and looking after our relationship with you.
Marketing — sending occasional news and updates by email, only where you have asked us to. You can unsubscribe at any time using the link in any marketing email.
Security and fraud prevention — keeping the Services safe and detecting or preventing fraudulent or malicious activity.
Legal compliance — meeting our legal obligations and responding to valid legal requests.

How we disclose personal information

We do not sell your personal information. We may disclose it to:

Service providers who perform services on our behalf — payment processing (Stripe), shipping and delivery (NZ Post and couriers), website hosting and storage, and email services. They may only use your information to provide those services to us.
With your consent or at your direction — for example, to ship a gift to an address you provide.
Where required by law — to comply with legal obligations, respond to lawful requests, or protect our rights and the safety of others.
In a business transition — such as a sale or restructure of the business, in which case this policy continues to apply to your information.

International transfers

Some of our service providers store or process information outside New Zealand. Where that happens, we take reasonable steps to ensure your information is protected by safeguards comparable to those under the Privacy Act 2020.

Cookies

We use a small number of cookies and similar technologies that are necessary for the site to work — for example, remembering what's in your cart. If we add analytics in future, this policy will be updated to describe it.

Security and retention

We take reasonable steps to protect your personal information from loss, misuse, and unauthorised access. No method of transmission or storage is completely secure, so we cannot guarantee absolute security — we recommend not sending sensitive information through unsecured channels.

We keep personal information only as long as we need it — to provide the Services, meet legal obligations (such as tax record-keeping), resolve disputes, or enforce our agreements.

Your rights

Under the Privacy Act 2020, you have the right to:

Access — request a copy of the personal information we hold about you.
Correction — ask us to correct information you believe is wrong or out of date.

You can also ask us to delete information we no longer need, and you can opt out of marketing emails at any time. To exercise any of these rights, email us at hello@luajewellery.com. We may need to verify your identity before acting on a request, and we will respond within the timeframes required by the Privacy Act.

Children

The Services are not intended for children, and we do not knowingly collect personal information from children. If you are a parent or guardian and believe a child has provided us with personal information, contact us and we will delete it.

Complaints

If you have a concern about how we have handled your personal information, please contact us first at hello@luajewellery.com — we will do our best to put it right. If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for legal and operational reasons. We will post the revised policy here and update the "Last updated" date above.

Contact

Questions about this policy or our privacy practices? Email us at hello@luajewellery.com. LUA Jewellery is based in Auckland, New Zealand.