PRIVACY POLICY

Last updated: 11 November 2026

Who we are
This policy covers Gregory and Ricochet: our stores, our websites gregory.net.nz and ricochet.co.nz, and the ways we keep in touch with you. Both websites are run by Gregory Limited, 84 Newton Road, Eden Terrace, Auckland 1010. "We" and "us" means Gregory Limited and its related companies.

We follow the New Zealand Privacy Act 2020. We only collect what we need, we tell you why, and you can see and correct what we hold about you.

What we collect
– Contact details: your name, email, phone number and address.
– Purchase details: what you buy, in store and online, your sizes and favourite styles, returns, gift vouchers and laybys.
– Styling and events: appointments you book, your preferences, and short notes from our team to help us look after you (for example "prefers sleeves").
– Online activity: pages you visit, items you view or add to your bag, your device, browser and IP address, collected through cookies and similar tools.
– Messages: anything you send us by email, phone, text or social media.

We don't collect your full card details. Payments are handled by our payment providers.

Security camera. Our Ponsonby store has a security camera covering the entrance. We use the footage only to keep our customers, staff and stock safe, and to look into incidents.

How we collect it
– From you: when you shop in store or online, create an account, sign up for emails, book a styling appointment or contact us.
– Automatically: through cookies and similar tools when you use our websites or open our emails.
– From others: occasionally from service providers who work for us (such as Shopify or our payment providers), or from a stylist who books an appointment with us on your behalf. When we receive your information this way, we use it only as this policy describes.

You don't have to give us your details to shop with us. Without them we can't deliver online orders, invite you to events or keep track of your sizes and preferences.

How we use it
– To sell to you, deliver online orders, and handle returns, exchanges, laybys and gift vouchers.
– To keep a record of your purchases and sizes, so our team can help you in store.
– To invite you to private styling appointments, new arrivals and sale previews.
– To send you our newsletter and other updates you've agreed to.
– To run our websites, understand how they're used, and measure our advertising.
– To prevent fraud, and to meet our legal and tax obligations.

Our team sees only what they need. In our stores, staff look up your details in our point-of-sale system rather than keeping separate lists.

Marketing and your choices
We only send marketing emails or texts if you've agreed, or if you've bought from us and could reasonably expect to hear from us. Every email has an unsubscribe link, and you can reply STOP or NO to a text. You can also tell any of our stores, or email us, that you'd rather not be invited to styling events or sales, and we'll record it.

Who we share it with
We don't sell your personal information. We share it only with companies that help us run the business, and only what they need:

– Shopify: our online stores, checkout and customer accounts. Stored in Canada, the US and elsewhere.
– Lightspeed: our in-store point-of-sale system and customer records. Stored overseas in Lightspeed's cloud.
– Payment providers (such as Shopify Payments, PayPal, Apple Pay and Google Pay): taking payments. Stored overseas.
– Mailchimp: our email newsletters. Stored in the US.
– Google (Analytics and Workspace): website analytics, and our internal email and documents. Stored in the US and elsewhere.
– Meta (Facebook and Instagram): advertising and measuring it. Stored in the US and elsewhere.
– GoSweetSpot and DHL: delivering online orders. Stored in New Zealand, and overseas for international orders.
– Our accountants and professional advisers: accounts, tax and advice. Stored in New Zealand.
– Business software and AI tools (such as Anthropic's Claude): preparing reports and customer lists for our team. Stored in the US.

We may also share information when the law requires it, to prevent fraud, or if the business or part of it is sold.

Information stored overseas. Several of these providers store information outside New Zealand. We choose providers that protect personal information in ways comparable to the New Zealand Privacy Act.

Cookies and tracking
Our websites use cookies and similar tools to keep your bag and account working, to understand how the sites are used, and to measure and tailor our advertising on Google, Facebook and Instagram. You can block or delete cookies in your browser settings, although some parts of the sites may not work properly without them. You can also manage the ads you see in your Google, Facebook and Instagram ad settings.

Keeping it safe and how long we keep it
We keep your information in secure, password-protected systems and limit who can see it. If a privacy breach is likely to cause you serious harm, we will tell you and the Privacy Commissioner as the law requires.

We keep your information only as long as we need it:

– Purchase and tax records: 7 years, as tax law requires.
– Your customer profile and preferences: while you're a customer, and for up to 7 years after your last purchase or contact with us, unless you ask us to delete it sooner. After that, we remove your name and contact details and keep only anonymous sales history.
– Marketing preferences, including any request not to be contacted: for as long as we need to respect them.
– Security camera footage: up to 30 days, unless we need it to look into an incident.

Your rights
You can ask us at any time:

– what personal information we hold about you, and for a copy of it;
– to correct anything that's wrong; and
– to delete your details or stop contacting you.

Just email us or ask in any of our stores. We'll respond within 20 working days, and there's no charge. We may need to check your identity first.

Questions and complaints
Our privacy officer is Lauren Ormond. Email customerservice@gregory.net.nz or customerservice@ricochet.co.nz, or write to: Privacy Officer, Gregory Limited, 84 Newton Road, Eden Terrace, Auckland 1010.

If you're not happy with how we handle your concern, you can complain to the Office of the Privacy Commissioner at privacy.org.nz or on 0800 803 909.

Changes to this policy
We may update this policy from time to time. The latest version is always on our websites, with the date it was last updated.