lacepetal

policies

privacy & terms

last updated august 2026 · lacepetal, aotearoa new zealand

who we are

lacepetal is a small, independent vintage reseller based in New Zealand — one person, sourcing one-of-one pieces by hand. This page explains what we collect, why, who else sees it, and how to reach us about any of it: hello@lacepetal.nz.

your information

When you buy something we collect your name, email address, and New Zealand postal delivery address — only so we can take the payment, post your parcel, and email you the receipt and tracking.

secure payments

Payments are handled by PayPal's secure checkout. You can pay with your PayPal account, or directly with a credit or debit card. Card numbers and security details are entered on PayPal's encrypted, certified infrastructure and processed by PayPal — lacepetal never sees, collects, or stores them. If you pay with a PayPal account, PayPal shares the email address linked to that account with us so we can send your receipt and shipping updates. We do not store your PayPal or card information beyond the order record we keep to fulfil your purchase.

how the website itself works

There are no advertising or tracking cookies on this site, and nothing follows you around the internet. Three things do touch your device:

sharing & storage

We do not sell, rent, or trade your personal information. It is shared only with the parties needed to get a piece to your door: PayPal (to take the payment), our courier (to deliver the parcel), and Cloudflare (which hosts the shop and its records).

sending information overseas

Some of those providers store or process information outside New Zealand — PayPal, Google and Cloudflare all operate globally, with servers in places including the United States and Australia. We choose providers that are contractually required to protect personal information to a standard comparable with the Privacy Act 2020.

how long we keep it

Order records (what was bought, where it went, the buyer's email) are kept for seven years — Inland Revenue requires it, and so do consumer-guarantee claims. Listing records are kept while a piece is on the rack and for a while after it sells, so we can answer questions about something we sold. Anything we no longer have a reason to keep is deleted.

keeping it safe

Your details sit behind a password-protected back office, in an encrypted database, and are only ever accessed to pack and post an order. If a privacy breach happened that we believed had caused — or was likely to cause — serious harm, we would tell the people affected and report it to the Office of the Privacy Commissioner, as the Privacy Act 2020 requires.

one-of-one vintage & consumer guarantees

Every garment on lacepetal is a unique, one-of-a-kind vintage piece. We measure each garment flat and document its character and flaws up front. Please choose carefully as all sales are final. However, under the New Zealand Consumer Guarantees Act 1993, your statutory consumer guarantees always apply: if a piece is faulty or substantially differs from its listing description, we will put it right with a repair, replacement, or full refund.

your rights under the privacy act 2020

Under the Privacy Act 2020 you can ask for a copy of the personal information we hold about you, and ask for it to be corrected if it is wrong. New Zealand law does not give a general right to have information deleted, and we are required to keep order records for tax and consumer-law reasons — but if you ask us to remove something we are not obliged to keep, we will, and we will always tell you plainly what we can and cannot do, and why. Questions and requests: hello@lacepetal.nz. If you are not happy with our answer, you can complain to the Office of the Privacy Commissioner.

changes to this policy

If this policy changes in a way that matters, the new version goes up on this page. The shop is small enough that we will also tell you directly if anything affects an order you have already placed.