Privacy Policy

Last updated: January 2025

Karü (“we”, “us”) is committed to protecting your privacy. This policy describes how we collect, use, store, and disclose your personal information. We comply with the Privacy Act 2020 (New Zealand) and the Information Privacy Principles (IPPs).

1. What we collect

We may collect:

  • Account information: name, email address, password (hashed).
  • Order information: name, email, billing and shipping address, phone (if provided), and order details.
  • Payment information: payment is processed by Stripe; we do not store full card numbers. We may store payment method type and last four digits for reference.
  • Usage information: IP address, browser type, device information, and how you use the site (e.g. for security and improving the service).

2. How we use it

We use your information to:

  • Process and fulfil orders and send order confirmations.
  • Communicate with you (e.g. about your order, password reset, or support).
  • Improve our website and services.
  • Comply with law and protect our rights (e.g. fraud prevention).

We do not sell your personal information to third parties.

3. Who we share it with

We may share your information with service providers who help us run the business (e.g. hosting, payment processing, email delivery, analytics). These providers are required to protect your information and use it only for the purposes we specify. Our main providers include Supabase (database/auth), Stripe (payments), Resend (email), and Cloudinary (images). Some of these may hold data outside New Zealand; we take reasonable steps to ensure they protect your information in line with NZ privacy standards.

4. Storage and security

We store your information only for as long as needed (e.g. to fulfil orders, comply with tax/legal requirements, or resolve disputes). We use appropriate technical and organisational measures to protect your data against unauthorised access, loss, or misuse.

5. Your rights (Privacy Act 2020)

You have the right to:

  • Ask whether we hold personal information about you and to request access to it.
  • Request correction of inaccurate or incomplete information.
  • Complain to us or to the Office of the Privacy Commissioner (New Zealand) if you believe we have interfered with your privacy.

To access or correct your information, or to ask questions about this policy, contact us at hello@karu.com.

6. Cookies and tracking

We use cookies and similar technologies for essential site operation (e.g. login, cart), security, and to understand how the site is used. You can adjust your browser settings to refuse cookies; some features may not work if you do.

7. Changes

We may update this policy from time to time. The current version will be posted on this page with an updated “Last updated” date.

For privacy enquiries or to exercise your rights, email hello@karu.com.