Privacy policy

Last updated: October 2026

Who we are
This website is operated by Golly Gosh (2011) Limited, trading as Golly Gosh Creations (“we”, “us”, “our”), based in Auckland, New Zealand. This policy explains how we collect, use, store and share your personal information, and your rights under the New Zealand Privacy Act 2020.

What we collect
When you place an order or create an account, we collect your name, delivery and billing address, email address, phone number (if you give one), and your order details. When you browse our store, we automatically collect technical information such as your IP address, device and browser type, and the pages you view. If you sign up to our emails, write a review, or use the wishlist, we collect the information you give us for those purposes. We do not store your full payment card details. These are handled securely by our payment providers.

Why we collect it and how we use it
We use your information to process and deliver your order, contact you about it, provide customer service, handle returns and refunds, prevent fraud, meet our legal and tax obligations, and improve our website and products. With your permission, we also send you emails about our products and news. You can unsubscribe at any time using the link in any email, or by contacting us.

Who we share it with
We share information only as needed with:

  • Shopify, which hosts our store and processes orders
  • payment providers, including Shopify Payments, PayPal and Shop Pay
  • couriers and postal services, to deliver your order
  • Klaviyo, our email marketing provider, if you subscribe to our emails
  • Judge.me, which collects and displays product reviews
  • Google, through the Google & YouTube channel, which lists our products on Google and measures how our site is used
  • Pinterest, through its tag, which measures activity on our site and helps us show relevant ads and products on Pinterest
  • Meta (Facebook and Instagram). We use the Meta Pixel and Meta’s Conversions API with advanced matching. This shares information about your activity on our site, such as pages viewed, items added to your cart and purchases, along with details such as your email address, phone number and location, usually in a scrambled (hashed) form. Meta uses this to measure and improve our advertising and may match it to your Facebook or Instagram account. You can manage this in your Meta account settings under Off-Facebook Activity.

We do not sell your personal information. We may also disclose information if the law requires it.

Cookies and tracking
Our website and the tools above use cookies, pixels and similar technologies to keep your cart working, measure traffic, and show relevant advertising on Google, Facebook, Instagram and Pinterest. You can manage or block cookies in your browser settings, and adjust ad personalisation in your Google, Meta and Pinterest account settings. Blocking some cookies may affect how the store works.

Overseas storage and disclosure
Many of the providers above, including Shopify, Google, Meta, Pinterest and Klaviyo, store or process information outside New Zealand. By using our store you understand your information may be handled overseas. We choose providers that have their own privacy and security safeguards, but their laws and standards may differ from New Zealand’s.

How long we keep it
We keep personal information only as long as needed to provide our services, handle returns and queries, and meet our legal and tax record-keeping requirements. After that, we delete it or make it anonymous.

Security
We take reasonable steps to protect your information from loss, misuse and unauthorised access. No online system is completely secure, so we can’t guarantee absolute security.

Your rights
You can ask us for a copy of the personal information we hold about you, and ask us to correct it. To make a request, or to ask us to delete your information where we’re not required to keep it, contact us at info@gollygosh.co.nz. We’ll respond within the time required by law. If you’re unhappy with how we handle your information, please contact us first. You can also make a complaint to the Office of the Privacy Commissioner at privacy.org.nz.

Children
Our store is not directed at children under 16, and we do not knowingly collect their personal information. If you believe a child has given us their information, please contact us and we’ll delete it.

Changes to this policy
We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.

Contact us
Golly Gosh (2011) Limited, trading as Golly Gosh Creations
Email: info@gollygosh.co.nz