Privacy policy

Vildune Privacy Policy

Last updated: June 4, 2026

Vildune ("we," "us," or "our") operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). Vildune is powered by Shopify, which enables us to provide the Services to you.

Because Vildune is physically operated out of Christchurch, New Zealand, we operate as an Agency under the New Zealand Privacy Act 2020. For global customers accessing our Services from Australia, the United States, the United Kingdom, or the European Union, we serve as the data controller or entity responsible for ensuring your data is handled in accordance with your local regional privacy protections (including the Australian Privacy Act 1988, US State Privacy Laws/CCPA, and the UK/EU GDPR).

If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information. Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read and understand this policy.

1. Personal Information We Collect or Process

When we use the term "personal information," we refer to data that identifies or can reasonably be linked to you. We may collect or process the following categories of personal information depending on how you interact with our store:

  • Contact details: including your name, address, billing address, shipping address, phone number, and email address.

  • Financial information: including transaction details, form of payment, payment confirmations, and related details. Please note: Your raw payment card numbers are encrypted and processed directly by our Level 1 PCI-DSS compliant payment gateway (Shopify Payments); Vildune never sees or stores your full credit card numbers.

  • Account information: including your username, password, security questions, preferences, and settings.

  • Transaction information: including the items you view, put in your cart, add to your wishlist, or purchase, return, exchange, or cancel, and your past transactions.

  • Communications with us: including the information you include in customer support inquiries, emails, or messages.

  • Device and Usage information: including information about your device, browser, network connection, IP address, unique identifiers, and data regarding how and when you navigate our website via cookies and tracking pixels.

2. Personal Information Sources

We collect personal information from the following sources:

  • Directly from you: when you create an account, make a purchase, or communicate with us.

  • Automatically through the Services: from your device via cookies, tracking pixels, and similar technologies.

  • From our service providers and partners: including Shopify, payment processors, fulfillment/shipping partners, and marketing platforms acting on our behalf.

3. How We Use Your Personal Information

We use your personal information to:

  • Provide, Tailor, and Improve the Services: Process payments, fulfill orders, arrange shipping, manage your account, process returns, and personalize your shopping experience.

  • Marketing and Advertising: Send promotional emails or text messages (where you have opted in) and show you targeted online ads based on your browsing activity.

  • Security and Fraud Prevention: Authenticate your account, detect fraudulent transactions, protect public safety, and secure our system infrastructure.

  • Legal Compliance: Comply with applicable local laws, respond to valid legal requests from law enforcement, or enforce our policies.

4. How We Disclose Personal Information

We may disclose your personal information to third parties for legitimate operational purposes, including:

  • With Shopify and third-party vendors who perform services on our behalf (e.g., IT management, payment processing, cloud storage, data analytics, and shipping).

  • With business and marketing partners to deliver personalized advertising. Shopify may use data from your interactions here and with other merchants to enhance cross-store targeted marketing. You can opt out of targeted marketing at any time.

  • When you explicitly direct or consent to disclosure, such as using social media login integrations.

  • In connection with a corporate business transaction, such as a merger or asset transfer, or to satisfy legal obligations (subpoenas, court orders).

5. Relationship with Shopify

Our store is hosted by Shopify. Shopify collects, transmits, and processes your data globally to support and optimize our operations. Because Shopify operates internationally, your information may be processed in jurisdictions outside of your home country. Shopify may also use data from your interactions across multiple merchants to protect network security and provide predictive fraud metrics. To manage your Shopify-specific data rights, you may review the Shopify Consumer Privacy Policy or visit the Shopify Privacy Portal.

6. International Data Transfers

Vildune operates globally, meaning your data will be transferred and stored outside of your home jurisdiction.

  • For New Zealand & Australia Residents: In accordance with Information Privacy Principle 12 (NZ) and the Australian Privacy Principles, we ensure that any overseas recipients (including Shopify's cloud data centers) are bound by privacy laws or contractual agreements that provide safeguards comparable to your local standards.

  • For UK & European Union Residents: Because New Zealand holds formal "Adequacy Status" with the European Union, data flows legally from Europe to our operations. For transfers out of the UK or EEA to non-adequate third countries, we and our partners rely on recognised transfer mechanisms, such as the European Commission's Standard Contractual Clauses.

7. Security, Retention, and Mandatory Breach Notification

While we employ industry-standard measures to protect your data, no security system is completely impenetrable. We retain your personal information only as long as necessary to maintain your account, provide our Services, resolve disputes, or satisfy mandatory statutory business record-keeping laws.

Mandatory Privacy Breach Notification: If we experience a data security breach that causes, or is highly likely to cause, serious harm to you, we will immediately comply with our local and international statutory requirements—including notifying you and the Office of the Privacy Commissioner (New Zealand) or other relevant regional regulators as soon as practicable.

8. Children's Data

Our Services are not designed for or targeted to children. We do not knowingly collect personal information from individuals under the age of majority in their respective jurisdictions. If a parent or guardian believes a minor has provided us with personal information, please contact our Privacy Officer below to request deletion.

9. Your Regional Rights and Choices

Depending on where you live, you have specific, legally enforceable rights regarding your data. We will not discriminate or penalise you in any way for exercising these rights.

New Zealand & Australia

Your local rights are protected under the Privacy Act 2020 (NZ) and Privacy Act 1988 (AUS). These rights can only be withheld under strict legal exceptions defined by law:

  • Right to Access: You have an absolute right to request a copy of the personal information we hold about you.

  • Right to Correction: You can request that we update or correct inaccurate or outdated information. If we decline to change it, you have the right to request that a "statement of correction sought" be permanently attached to the record.

United States (CCPA / State Privacy Laws)

If you reside in a US state with active consumer privacy protections (such as California), you have the right to access, delete, correct, or obtain a portable copy of your data.

  • Opting Out of Sale or Sharing for Targeted Ads: We use tracking tools for tailored digital advertising. You have the right to opt out of this "sharing" or "sale" of your data.

  • Global Privacy Control (GPC): If your browser transmits a Global Privacy Control signal, our website is configured via our Shopify privacy parameters to automatically interpret this as a valid opt-out request for that specific browser session. You may also explicitly opt out via our cookie preferences banner.

United Kingdom & European Union (GDPR)

If you are located in the UK or EEA, you possess extended rights under the GDPR:

  • Right to Deletion ("Right to be Forgotten"): Request that we wipe your personal records from our system.

  • Right to Restriction & Objection: Ask us to halt or limit specific automated data processing profiles.

  • Right to Withdraw Consent: Where we rely on your explicit consent to process data (such as marketing cookies), you can strip that consent away at any moment via our cookie controls.

10. Complaints & Regulatory Escalation

If you have a concern regarding how your data is handled, please reach out to our Privacy Officer directly using the contact details below. If we cannot resolve your issue, you have the statutory right to file a complaint with your local data protection authority:

  • In New Zealand: The Office of the Privacy Commissioner (www.privacy.org.nz)

  • In Australia: The Office of the Australian Information Commissioner (www.oaic.gov.au)

  • In the UK: The Information Commissioner's Office (www.ico.org.uk)

  • In the EU: Your specific nation's Data Protection Supervisory Authority.

11. Contact Our Privacy Officer

In accordance with New Zealand statutory frameworks, Vildune has appointed a Privacy Officer to oversee our data handling compliance, answer inquiries, and execute your local rights requests.

To protect our operational security and the privacy of our personnel, all formal privacy requests, inquiries, or statutory notices must be directed to our designated digital point of contact:

  • Attention: The Privacy Officer

  • Email: anna@vildune.com

  • Jurisdiction of Operation: Christchurch, Canterbury, New Zealand

12. Changes to This Privacy Policy

We may periodically update this policy to reflect operational adjustments or changing international regulations. We will post any updated policy versions directly on this page and revise the "Last updated" date at the top of the document.