Privacy Policy — Royalburn

This policy explains what personal information we collect, why, and the choices you have. We keep it short and plain.

What we collect

Contact and order details you give us: name, email, phone, shipping address.
Order history and the contents of your basket.
Technical data such as device, browser and pages visited, via cookies.

How we use it

To process orders, take payment, and ship your kit.
To provide customer support and respond to your messages.
To improve the site and understand how it is used.
To meet our legal and accounting obligations.

Payment data

Card payments are processed by Stripe. We never see or store your full card details — they are entered directly on Stripe's secure, PCI-compliant systems.

Who we share it with

We share data only with the providers that help us run the store — our payment processor (Stripe), our database and hosting providers, and the carriers who deliver your order — and only as needed. We do not sell your personal information.

International transfers

We are based in New Zealand and ship worldwide, so your information may be processed in other countries. Where it is, we take steps to ensure it remains protected.

Your rights

Wherever you live, we honour these rights over your personal information for every customer:

Access — ask for a copy of the data we hold about you.
Correction — ask us to fix inaccurate or incomplete data.
Deletion — ask us to delete your data, subject to our legal and accounting obligations.
Restriction & objection — ask us to limit or stop certain processing.
Portability — receive your data in a portable, machine-readable format.
Withdraw consent — where we rely on consent (such as optional analytics cookies), withdraw it at any time.
Complain — lodge a complaint with your local data protection authority, including the New Zealand Office of the Privacy Commissioner.

Legal basis

We process your data to perform our contract with you (fulfilling orders), to meet legal obligations (tax and accounting), on the basis of your consent (optional analytics cookies), and for our legitimate interest in running and improving the store.

California residents

We do not sell or share your personal information, and have not done so in the past 12 months. California residents may exercise the access and deletion rights described above, and we will not discriminate against you for doing so.

Children's privacy

This site is intended for adults. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us data, contact us and we will delete it.

Retention

We keep order records for as long as needed to fulfil orders and meet tax and legal requirements, then delete or anonymise them.

Cookies

We use cookies as described in our Cookie Policy.