Privacy Policy — Stolen Girlfriends Club

Last updated: March, 2026

1. Who we are

This Privacy Policy explains how Stolen Girlfriends Club (“we”, “us”, “our”) collects, uses, stores, and shares your personal information when you visit our website, create an account, place an order, contact us, or otherwise interact with us.

For the purpose of this policy, personal information means information about an identifiable individual.

If you have any questions about this Privacy Policy or our privacy practices, please contact us at:

Email: online@stolengirlfriendsclub.com
Postal address: 608C Rosebank Road, Avondale, Auckland, New Zealand 1026
Privacy Officer: 

2. Your privacy matters to us

We are committed to protecting your personal information and handling it in accordance with the Privacy Act 2020 (New Zealand) and other applicable privacy laws.

We may update this Privacy Policy from time to time to reflect changes in our business, technology, or legal requirements. The latest version will always be available on our website.

It is important that the personal information we hold about you is accurate and up to date. Please let us know if your details change.

3. Information we collect

We may collect the following types of personal information:

Identity information
Such as your first name, last name, username, title, and date of birth where relevant.

Contact information
Such as your billing address, delivery address, email address, phone number, and social media handle if you contact us through social channels.

Transaction information
Such as details of products you purchase from us, order history, payment status, shipping details, and returns.

Payment information
Such as payment method details and billing-related information. We generally do not store full card details ourselves where payments are processed by third-party payment providers.

Technical information
Such as your IP address, device type, browser type and version, time zone setting, operating system, and other technology identifiers from the devices you use to access our website.

Usage information
Such as information about how you browse and use our website, products, and services.

Marketing and communications information
Such as your preferences for receiving marketing from us and your communication preferences.

User-generated content
Such as reviews, survey responses, feedback, photographs, videos, or other content you choose to submit to us.

We may also create aggregated or de-identified information for analytics, reporting, research, and business improvement. This information does not identify you.

4. Sensitive information

We do not generally seek to collect sensitive personal information unless it is reasonably necessary for a legitimate business purpose and permitted by law.

In limited circumstances, you may choose to provide information that could be considered sensitive, for example:

• sizing or fit-related information;

• information about accessibility needs;

• opinions or preferences you share with us; or

• information relevant to a customer service issue.

Where sensitive information is collected, we will only use it for the purpose for which it was provided or another permitted purpose, and we will take appropriate care in handling it.

5. How we collect your information

We collect personal information in a number of ways, including:

Directly from you
When you:

• create an account;

• place an order;

• sign up for emails or SMS;

• enter a competition or promotion;

• contact customer support;

• submit feedback, reviews, images, or other content;

• respond to surveys; or

• otherwise communicate with us.

Automatically
When you interact with our website, we may collect technical and usage information through cookies, pixels, server logs, and similar technologies.

From third parties
We may receive personal information from:

• payment providers;

• ecommerce and website platform providers;

• logistics and fulfilment partners;

• analytics providers;

• advertising and social media partners; and

• public sources or social platforms where you have made information publicly available.

6. Why we collect and use your information

We collect, use, and disclose personal information only where we have a lawful and legitimate reason to do so. This may include the following purposes:

To provide products and services

We use your information to:

• create and manage your account;

• process and fulfil your orders;

• take payment;

• arrange shipping, delivery, returns, and refunds;

• provide customer support; and

• communicate with you about your order.

To manage and improve our business

We use your information to:

• operate, maintain, and improve our website and services;

• troubleshoot technical issues;

• prevent fraud and misuse;

• conduct testing, analytics, and reporting;

• improve customer experience; and

• develop new products, services, and campaigns.

To communicate with you

We use your information to:

• answer questions and resolve issues;

• send service-related communications;

• notify you of changes to our terms, website, or this Privacy Policy; and

• request feedback or reviews.

Marketing

Where permitted by law, we may send you marketing communications about our products, launches, promotions, events, rewards, and brand updates by email, SMS, or similar channels.

We may use platforms such as Klaviyo, Meta, and Google to:

• send direct marketing;

• better understand customer interests and engagement;

• create customer audiences;

• deliver personalised advertising; and

• measure the effectiveness of our campaigns.

You can opt out of marketing emails at any time by using the unsubscribe link in the message. You can opt out of SMS marketing by following the instructions in the message or contacting us directly.

7. Cookies and similar technologies

We use cookies, pixels, tags, and similar technologies to operate our website, remember your preferences, understand how users interact with our website, improve performance, and deliver more relevant advertising.

These technologies may be provided by us or by third parties such as Shopify, Google, Meta, Klaviyo, and Smile.io.

We may use these technologies to:

• keep our website secure and functioning properly;

• remember your preferences and shopping activity;

• understand website traffic and user behaviour;

• measure the performance of marketing campaigns;

• deliver personalised advertising and remarketing; and

• support loyalty and rewards functionality.

You can usually manage cookie preferences through your browser settings. Blocking some cookies may affect how the website functions.

8. When we share your information

We may share your personal information with trusted third parties where reasonably necessary for the purposes described in this Privacy Policy, including:

• website hosting and ecommerce platform providers;

• payment processors;

• fraud prevention and security providers;

• warehousing, fulfilment, shipping, and logistics providers;

• IT, cloud storage, and software providers;

• analytics and search engine providers;

• marketing, advertising, social media, and email/SMS providers;

• professional advisers such as lawyers, accountants, and auditors; and

• regulators, government agencies, courts, or law enforcement where required or permitted by law.

We may also share your personal information:

• if part of our business or assets are sold, transferred, or restructured;

• where disclosure is necessary to establish, exercise, or defend legal claims; or

• where necessary to protect the rights, property, or safety of our business, customers, or others.

We require service providers handling personal information on our behalf to protect it and only use it for authorised purposes.

9. Overseas disclosure and storage

Some of our service providers may store or process personal information outside New Zealand.

Where we disclose personal information overseas, we will take steps to ensure the recipient is subject to privacy protections that are comparable to those in New Zealand, or otherwise ensure the disclosure is permitted by law.

10. How we protect your information

We take reasonable steps to protect personal information from loss, unauthorised access, use, modification, disclosure, or other misuse.

These steps may include technical, administrative, and physical safeguards such as:

• restricted access to personal information;

• staff training and confidentiality obligations;

• secure systems and authentication controls;

• monitoring for suspicious activity; and

• secure third-party service arrangements.

No method of transmission or storage is completely secure, but we work to protect your information using appropriate safeguards.

11. How long we keep your information

We keep personal information only for as long as it is reasonably necessary for the purposes for which it was collected, including to provide products and services, comply with legal obligations, resolve disputes, and enforce our agreements.

When personal information is no longer required, we will take reasonable steps to delete it, destroy it, or de-identify it.

Retention periods may vary depending on the type of information and the reason we hold it.

12. Children

Our website is intended for a general audience. We do not knowingly collect personal information directly from children in a way that is inconsistent with applicable law.

If you believe a child has provided us with personal information without appropriate authorisation, please contact us and we will investigate and take appropriate action.

13. Your rights

Subject to applicable law, you have the right to:

• request access to the personal information we hold about you; and

• request correction of the personal information we hold about you.

Under New Zealand privacy law, individuals have rights to access and request correction of their personal information. If correction is refused, in some circumstances a statement of correction can be attached.

To exercise either of these rights, please contact us using the details above.

We may need to verify your identity before responding to your request. We will respond within the time required by applicable law.

If you are unhappy with our response, you may make a complaint to the Office of the Privacy Commissioner. The Commissioner encourages people to first raise the issue directly with the organisation involved.

14. Third-party websites and services

Our website may contain links to third-party websites, platforms, plug-ins, and applications. We do not control those third parties and are not responsible for their privacy practices.

We encourage you to read the privacy policies of any third-party websites or services you use.

15. Contact us and complaints

If you have questions, concerns, or complaints about this Privacy Policy or our privacy practices, please contact:

Privacy Officer
Stolen Girlfriends Club
Email: online@stolengirlfriendsclub.com 
Address: 608C Rosebank Road, Avondale Auckland, New Zealand 1026

If we cannot resolve your concern, you can contact the Office of the Privacy Commissioner in New Zealand. The Commissioner recommends raising the matter with the business first before lodging a complaint.