Privacy policy

Last updated: 3 September 2026

Piki Toi (“Piki Toi”, “we”, “us” or “our”) respects your privacy and is committed to protecting the personal information you share with us.

This Privacy Policy explains how we collect, use, store and disclose personal information when you visit our website, purchase our products, communicate with us, or otherwise interact with Piki Toi.

Piki Toi is based in Aotearoa New Zealand and operates its online store using Shopify.

By using our website or services, you acknowledge that your personal information will be handled as described in this Privacy Policy and in accordance with applicable privacy laws.

Information We Collect

The personal information we collect depends on how you interact with Piki Toi.

This may include:

• your name;
• email address;
• telephone number;
• billing and shipping addresses;
• order and transaction information;
• products you purchase, view or add to your cart;
• account information, where you create an account;
• correspondence and customer service enquiries;
• information required to process returns, refunds or delivery enquiries;
• device, browser and network information;
• IP address;
• information about how you use our website; and
• information collected through cookies, pixels and similar technologies.

Payment information may be collected and processed securely by Shopify and our payment providers. Piki Toi does not necessarily receive or store your complete credit or debit card details.

How We Use Your Information

We may use your personal information to:

• process and fulfil your orders;
• process payments;
• arrange domestic and international shipping;
• provide tracking and delivery information;
• communicate with you about your purchase;
• provide customer service;
• manage returns, refunds, cancellations and exchanges;
• provide digital products you have purchased;
• maintain customer accounts;
• detect and prevent fraud or misuse;
• investigate payment or transaction disputes;
• maintain appropriate business and transaction records;
• comply with our legal obligations;
• improve our website, products and services;
• understand how customers use our website; and
• provide marketing and advertising where permitted by law.

We only collect and use personal information where we have a legitimate business purpose or other lawful basis for doing so.

Orders, Payments & Payment Disputes

When you make a purchase, we collect and retain information reasonably necessary to process and fulfil the transaction.

This may include your order details, contact information, billing and delivery information, payment confirmation and shipping records.

If a payment dispute, chargeback, fraud investigation or similar claim is initiated in relation to a transaction, we may use and disclose relevant information to Shopify, our payment processors, banks, card networks, fraud-prevention providers or other parties involved in resolving the dispute.

Information provided may include, where relevant:

• order and transaction records;
• billing and shipping information;
• product information;
• pre-order information;
• applicable store policies;
• communications relating to the order;
• tracking information;
• dispatch records; and
• proof of delivery.

We will only provide information that is reasonably relevant to investigating or responding to the transaction or dispute.

Shopify & Payment Providers

Our online store is hosted through Shopify, which provides the ecommerce platform that allows us to sell our products and services.

Shopify and our payment providers may process personal information on our behalf or for their own legitimate purposes in connection with providing payment, ecommerce, fraud prevention and related services.

These providers may process information in countries outside New Zealand.

Your information will also be subject to the applicable privacy policies of those providers.

Shipping & Fulfilment Providers

To fulfil physical orders, we may provide necessary information to postal services, couriers, freight providers and other delivery partners.

This may include your:

• name;
• delivery address;
• telephone number;
• email address; and
• information necessary to deliver and track your parcel.

For international orders, this information may also be provided to international postal or courier networks, customs authorities or other organisations where necessary to deliver your order or comply with applicable laws.

Cookies & Similar Technologies

Like many online stores, our website uses cookies and similar technologies.

These technologies may help us:

• operate our website;
• remember your preferences;
• maintain your shopping cart;
• understand how customers interact with our website;
• measure website performance;
• prevent fraud; and
• provide and measure advertising.

Our ecommerce, analytics and advertising partners may also use cookies, pixels and similar technologies.

You can usually control cookies through your browser settings. Blocking some cookies may affect the functionality of our website.

Marketing & Advertising

Where permitted, we may use your information to communicate with you about Piki Toi products, promotions, releases and other news.

You may unsubscribe from promotional emails at any time by using the unsubscribe link contained in the email.

Unsubscribing from marketing does not prevent us from sending transactional communications that are necessary to service your order, such as order confirmations, shipping notifications or customer-service messages.

We may also use advertising and analytics services to understand the effectiveness of our marketing and show relevant advertising.

How We Share Personal Information

We do not sell your personal information as part of our ordinary business operations.

We may disclose personal information where reasonably necessary to organisations that help us operate Piki Toi, including:

• Shopify;
• payment processors;
• banks and financial institutions;
• shipping and fulfilment providers;
• technology and website providers;
• analytics providers;
• marketing and advertising platforms;
• customer-service providers;
• professional advisers; and
• government, regulatory or law-enforcement authorities where required by law.

We may also disclose information where reasonably necessary to protect our rights, investigate fraud, enforce our policies or respond to legal proceedings or payment disputes.

International Processing

Piki Toi is based in New Zealand, but some of the services we use operate internationally.

As a result, your personal information may be processed or stored outside New Zealand, including by Shopify, payment providers, technology providers, advertising platforms and international shipping providers.

Where required, we take reasonable steps to ensure that personal information disclosed overseas is appropriately protected.

How Long We Keep Your Information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected.

This may include retaining records to:

• fulfil orders;
• provide customer service;
• maintain financial and tax records;
• resolve disputes;
• respond to chargebacks;
• prevent fraud;
• enforce our agreements; and
• comply with legal obligations.

Different categories of information may therefore be retained for different periods.

Security

We take reasonable steps to protect personal information from loss, misuse, unauthorised access, disclosure or alteration.

However, no website, electronic transmission or storage system can be guaranteed to be completely secure.

Please do not send sensitive payment information or passwords to us through unsecured communication channels.

Your Privacy Rights

Depending on where you live, you may have rights concerning the personal information we hold about you.

These may include the right to:

• request access to your personal information;
• request correction of inaccurate information;
• request deletion in circumstances where applicable;
• object to or restrict certain processing;
• withdraw consent where processing relies on consent; and
• unsubscribe from marketing communications.

For customers in New Zealand, you may request access to or correction of personal information we hold about you in accordance with the Privacy Act 2020.

To make a privacy request, contact us at hello@pikitoi.co.nz.

We may need to verify your identity before providing or changing personal information.

Children's Privacy

Our website and online store are intended for people capable of making purchases or for parents, caregivers and other adults purchasing products.

Although some Piki Toi products are designed for children and whānau, we do not knowingly require children to provide personal information directly to us in order to use those products.

If you are a parent or guardian and believe a child has provided personal information to us without appropriate authorisation, please contact us at hello@pikitoi.co.nz.

Third-Party Websites

Our website may contain links to third-party websites or services.

Piki Toi is not responsible for the privacy, security or content practices of websites or services we do not control. We recommend reviewing the privacy policy of any third-party service you choose to use.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes to our business, website, services, technology or legal obligations.

The current version will be published on our website with an updated revision date.

Privacy Questions & Complaints

If you have a question, request or complaint regarding your personal information, please contact:

Piki Toi
Aotearoa New Zealand
hello@pikitoi.co.nz

We will endeavour to respond to privacy enquiries within a reasonable timeframe and in accordance with applicable law.

If you are in New Zealand and are not satisfied with how a privacy matter has been handled, you may also have the right to make a complaint to the Office of the Privacy Commissioner.