Privacy Policy

Last updated: August 11, 2026

Romova operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). Romova is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us.

If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described in this Privacy Policy.

Personal Information We Collect or Process

When we use the term "personal information," we are referring to information that identifies or can reasonably be linked to you or another person. Personal information does not include information that is collected anonymously or that has been de-identified so that it cannot identify or be reasonably linked to you.

We may collect or process the following categories of personal information, including inferences drawn from this personal information, depending on how you interact with the Services, where you live, and as permitted or required by applicable law:

• Contact details, including your name, address, billing address, shipping address, phone number, and email address.

• Financial information, including credit card, debit card, financial account numbers, payment card information, transaction details, form of payment, payment confirmation, and other payment details.

• Account information, including your username, password, security questions, preferences, and settings.

• Transaction information, including the items you view, put in your cart, add to your wishlist, purchase, return, exchange, or cancel, as well as your past transactions.

• Communications with us, including information you provide when contacting Romova, such as through a customer support inquiry.

• Device information, including information about your device, browser, network connection, IP address, and other unique identifiers.

• Usage information, including information regarding your interaction with the Services, including how and when you interact with or navigate the Services.

Personal Information Sources

We may collect personal information from the following sources:

• Directly from you, including when you create an account, visit or use the Services, communicate with us, place an order, or otherwise provide us with your personal information.

• Automatically through the Services, including from your device when you use our Services or visit our website, and through the use of cookies and similar technologies.

• From our service providers, including when we engage providers to enable certain technology or services and they collect or process your personal information on our behalf.

• From our partners or other third parties.

How We Use Your Personal Information

Depending on how you interact with Romova or which Services you use, we may use personal information for the following purposes:

Provide, Tailor, and Improve the Services

We use your personal information to provide you with the Services, including to perform our contract with you, process payments, fulfil orders, remember your preferences and items you are interested in, send notifications relating to your account or orders, process purchases, returns, exchanges or other transactions, create and manage your account, arrange shipping, facilitate returns and exchanges, enable reviews, and create a customised shopping experience.

This may include using your personal information to better tailor and improve the Services and recommend products related to your interests or previous purchases.

Marketing and Advertising

We may use your personal information for marketing and promotional purposes, such as sending marketing, advertising, and promotional communications by email, text message, or other channels.

We may also use information to show you online advertisements for Romova products or services on our Services or other websites and platforms, including based on products you have previously viewed, purchased, or added to your cart and your other interactions with our Services.

Security and Fraud Prevention

We use your personal information to authenticate accounts, provide a secure payment and shopping experience, detect and investigate possible fraudulent, illegal, unsafe, or malicious activity, protect public safety where appropriate, and secure our Services.

If you create an account, you are responsible for keeping your account credentials secure. We recommend that you do not share your username, password, or other account access details with anyone else.

Communicating With You

We use your personal information to provide customer support, respond to inquiries, provide effective Services, communicate regarding your orders, and maintain our business relationship with you.

Legal Reasons

We may use your personal information to comply with applicable laws and regulations or respond to valid legal processes, including requests from law enforcement or government agencies.

We may also use personal information in connection with civil discovery, potential or actual litigation, other legal proceedings, and to enforce or investigate potential violations of our terms, policies, or legal rights.

How We Disclose Personal Information

In certain circumstances, we may disclose your personal information to third parties for legitimate purposes and subject to this Privacy Policy.

These circumstances may include:

• With Shopify, vendors, and other third parties who perform services on our behalf, including IT management, payment processing, data analytics, customer support, cloud storage, fulfilment, and shipping.

• With business and marketing partners that help us provide marketing services and advertise Romova products to you.

• When you direct or request us to disclose certain information or otherwise consent to disclosure, such as when necessary to ship products to you or through your use of social media integrations.

• With our affiliates or otherwise within our corporate group.

• In connection with a business transaction such as a merger, acquisition, restructuring, financing, sale of assets, or bankruptcy.

• Where disclosure is necessary to comply with applicable legal obligations, respond to subpoenas, search warrants, court orders or similar lawful requests, enforce applicable terms and policies, or protect Romova, our Services, our customers, or others.

Relationship With Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve the Services.

Information you submit through the Romova store may be transmitted to and shared with Shopify and third-party service providers, including providers located in countries other than the country where you reside, where necessary to provide and improve the Services.

To help protect, grow, and improve our business, we may use Shopify features that incorporate data and information obtained from your interactions with our store, other merchants, and Shopify.

In these circumstances, Shopify may be responsible for certain processing of your personal information, including responding to requests to exercise rights relating to information processed by Shopify.

You can learn more through Shopify's Consumer Privacy Policy and Shopify Privacy Portal.

Third-Party Websites and Links

The Services may provide links to websites, applications, or other online platforms operated by third parties.

If you follow links to websites that are not affiliated with or controlled by Romova, you should review their privacy policies, security practices, and applicable terms and conditions.

We do not guarantee and are not responsible for the privacy or security practices of third-party websites or platforms, including the accuracy, completeness, or reliability of information available through them.

Information you provide through public or semi-public platforms, including third-party social networking platforms, may also be viewable by other users of those platforms.

Our inclusion of a third-party link does not, by itself, constitute an endorsement of that platform or its owners or operators.

Children's Data

The Services are not intended to be used by children, and we do not knowingly collect personal information about children under the age of majority applicable in their jurisdiction.

If you are the parent or guardian of a child who has provided Romova with their personal information, you may contact us using the details below to request that the information be deleted.

We do not knowingly sell or share, as those terms may be defined under applicable privacy laws, the personal information of individuals under 16 years of age.

Security and Retention of Your Information

We take reasonable measures to protect the personal information we process.

However, no security measures are perfect or impenetrable, and we cannot guarantee absolute security. Information transmitted over the internet or through other electronic channels may also be subject to security risks while in transit.

We recommend that you do not use unsecured channels to communicate sensitive or confidential information to us.

How long we retain personal information depends on several factors, including whether we need the information to maintain your account, fulfil or manage orders, provide the Services, comply with legal obligations, resolve disputes, prevent fraud, or enforce applicable contracts and policies.

Your Rights and Choices

Depending on where you live, you may have some or all of the following rights in relation to your personal information.

These rights are not absolute and may apply only in certain circumstances. In some cases, we may decline a request where permitted or required by applicable law.

Right to Access / Know

You may have the right to request access to personal information that we hold about you.

Right to Delete

You may have the right to request that we delete certain personal information we maintain about you.

Right to Correct

You may have the right to request that we correct inaccurate personal information we maintain about you.

Right of Portability

You may have the right to receive a copy of certain personal information we hold about you and, in some circumstances, request that it be transferred to a third party.

Managing Communication Preferences

We may send promotional emails or other marketing communications to you.

You can opt out of promotional emails at any time by using the unsubscribe option provided in our marketing emails.

If you opt out of marketing communications, we may still send you non-promotional communications, such as information regarding your orders, transactions, customer service requests, or account.

UK and European Economic Area Rights

If you reside in the United Kingdom or European Economic Area, subject to exceptions and limitations provided by applicable law, you may have additional rights, including:

• Objection to Processing and Restriction of Processing: You may have the right to ask us to stop or restrict the processing of your personal information for certain purposes.

• Withdrawal of Consent: Where we rely on your consent to process personal information, you may withdraw that consent. Withdrawal does not affect the lawfulness of processing carried out before your consent was withdrawn.

You may exercise applicable privacy rights by contacting us using the details provided below.

We will not discriminate against you for exercising applicable privacy rights.

We may need to verify your identity before processing certain requests, as permitted or required by applicable law.

Where permitted, you may designate an authorised agent to make requests on your behalf. We may require evidence that you have authorised that person to act on your behalf and may require you to verify your identity directly with us.

We will respond to valid requests within the timeframes required by applicable law.

Complaints

If you have a complaint regarding how Romova processes your personal information, please contact us using the contact information below.

Depending on where you live, you may also have the right to lodge a complaint with the relevant privacy or data protection authority.

For customers in New Zealand, this may include the Office of the Privacy Commissioner.

Customers located in other jurisdictions may have rights to contact their applicable local privacy or data protection authority.

International Transfers

Romova is based in New Zealand and may work with service providers, technology providers, fulfilment partners, payment processors, and other third parties located in other countries.

As a result, your personal information may be transferred, stored, or processed outside the country in which you live.

Where required by applicable law, we will use appropriate safeguards or recognised transfer mechanisms when transferring personal information internationally.

Where personal information is transferred outside the European Economic Area or United Kingdom, this may include recognised mechanisms such as the European Commission's Standard Contractual Clauses or equivalent mechanisms recognised by the relevant UK authority, unless the recipient country has been recognised as providing an adequate level of data protection.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our business practices, Services, technologies, or for operational, legal, or regulatory reasons.

When we update this Privacy Policy, we may post the revised version on our website, update the "Last updated" date, and provide additional notice where required by applicable law.

Governing Jurisdiction

Romova operates from New Zealand.

This Privacy Policy and our handling of personal information are subject to applicable New Zealand privacy laws, including the Privacy Act 2020, as well as other privacy and data protection laws that may apply depending on where our customers are located.

Contact

If you have any questions about Romova's privacy practices or this Privacy Policy, or if you would like to exercise any privacy rights available to you, please contact us at:

Email: support@romova.shop
Country: New Zealand

For the purposes of applicable data protection laws, where required, Romova is the controller of personal information processed in connection with the Services.