Privacy policy

Last updated: July 6, 2026

DIY Xpanda operates this website and online store, including all related information, content, features, tools, products and services (the “Services”).

Throughout this Privacy Policy, “DIY Xpanda”, “we”, “us”, and “our” refer to DIY Xpanda, located at:

DIY Xpanda
1/28A Poland Road
Wairau Valley
Auckland 0627
New Zealand

Our online store is powered by Shopify, which enables us to provide products and services to customers throughout New Zealand.

This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services, or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described in this Privacy Policy.

Personal Information We Collect or Process

When we use the term “personal information,” we are referring to information that identifies you or can reasonably be linked to you or another person. Personal information does not include information that is collected anonymously or that has been de-identified, so that it cannot identify or be reasonably linked to you.

We may collect or process the following categories of personal information, depending on how you interact with the Services, where you live, and as permitted or required by applicable law:

Contact Details

Including:

  • Name
  • Address
  • Billing address
  • Shipping address
  • Phone number
  • Email address

Financial Information

Including:

  • Payment card information
  • Transaction details
  • Form of payment
  • Payment confirmations
  • Other payment-related information

DIY Xpanda does not store complete credit card details. Payment processing is handled by Shopify and approved payment providers.

Account Information

Including:

  • Username
  • Password
  • Preferences
  • Account settings

Transaction Information

Including:

  • Products viewed
  • Products added to cart
  • Products purchased
  • Returns and exchanges
  • Previous transactions

Communications

Including information you provide when:

  • Contacting us
  • Requesting support
  • Sending enquiries
  • Submitting reviews

Device Information

Including:

  • IP address
  • Browser information
  • Device information
  • Network information
  • Unique device identifiers

Usage Information

Including information regarding:

  • Website activity
  • Product browsing
  • Cart activity
  • Website navigation
  • Interactions with our Services

Personal Information Sources

We may collect personal information from the following sources:

Directly From You

Including when you:

  • Create an account
  • Place an order
  • Contact us
  • Subscribe to communications
  • Submit information through our website

Automatically Through the Services

Including through:

  • Cookies
  • Analytics technologies
  • Tracking technologies
  • Device information collected when using our website

From Service Providers

Including service providers engaged to help us operate our business and provide Services.

From Partners or Other Third Parties

Where permitted by applicable law.

How We Use Your Personal Information

Depending on how you interact with us or which Services you use, we may use personal information for the following purposes:

Provide, Tailor and Improve the Services

Including:

  • Processing orders
  • Processing payments
  • Arranging shipping
  • Managing returns and exchanges
  • Maintaining customer accounts
  • Providing customer support
  • Remembering preferences
  • Improving website functionality
  • Improving customer experience

Marketing and Advertising

Including:

  • Sending marketing communications
  • Sending promotional emails
  • Showing relevant advertising
  • Measuring advertising effectiveness
  • Providing information about products and services

You may unsubscribe from marketing communications at any time.

Security and Fraud Prevention

Including:

  • Account authentication
  • Fraud prevention
  • Security monitoring
  • Risk management
  • Protection of our Services

Communicating With You

Including:

  • Customer support
  • Service notifications
  • Order updates
  • Responding to enquiries

Legal Reasons

Including:

  • Compliance with applicable laws
  • Responding to legal requests
  • Protecting our legal rights
  • Enforcing our policies and agreements

Cookies and Analytics

DIY Xpanda uses cookies and similar technologies to improve website functionality, analyse website traffic, measure advertising performance, and provide a better customer experience.

These technologies may be provided by:

  • Shopify
  • Google Analytics
  • Google Ads
  • Meta (Facebook and Instagram)
  • TikTok
  • Other approved analytics and advertising providers

Cookies and similar technologies may collect information including:

  • IP address
  • Browser information
  • Device information
  • Pages viewed
  • Products viewed
  • Website interactions

You can manage cookie preferences through your browser settings. Disabling cookies may affect the functionality of certain parts of the Services.

How We Disclose Personal Information

In certain circumstances, we may disclose your personal information to third parties for legitimate purposes subject to this Privacy Policy.

Such circumstances may include:

Service Providers

Including:

  • Shopify
  • Payment processors
  • Shipping providers
  • Cloud hosting providers
  • Customer support providers
  • Analytics providers

Business and Marketing Partners

To help provide:

  • Advertising services
  • Marketing services
  • Website analytics
  • Personalised advertising

Our business and marketing partners may use your information in accordance with their own privacy policies.

When You Direct or Consent

When you request or consent to information being shared with third parties.

Corporate Transactions

Including:

  • Business sales
  • Mergers
  • Acquisitions
  • Reorganisations

Legal Requirements

To comply with:

  • Applicable laws
  • Court orders
  • Legal requests
  • Regulatory obligations

Relationship with Shopify

The Services are hosted and powered by Shopify.

When you visit our website, place an order, create an account, or otherwise interact with our store, Shopify may collect and process personal information in order to provide e-commerce, payment, security, analytics, and website functionality services.

Information submitted through this website may be transmitted to and processed by Shopify and its service providers in countries outside New Zealand, including Canada, the United States, Singapore, and other jurisdictions where Shopify operates.

To learn more about how Shopify collects, uses, and protects personal information, please visit:

https://www.shopify.com/nz/legal/privacy

Order Fulfilment and Shipping

To process and deliver your orders, we may share necessary personal information such as:

  • Name
  • Delivery address
  • Email address
  • Phone number

with courier companies, freight providers, and shipping partners.

These providers may use your information solely for delivering products and providing delivery-related services.

Third-Party Websites and Links

The Services may provide links to websites or online platforms operated by third parties.

If you follow links to websites not affiliated with or controlled by us, you should review their privacy policies and terms.

We are not responsible for the privacy, security, accuracy, or practices of third-party websites.

Children’s Data

The Services are not intended to be used by children.

We do not knowingly collect personal information from children.

If you believe that a child has provided personal information to us, please contact us and we will take reasonable steps to remove that information.

Security and Retention of Your Information

We take reasonable measures to help protect personal information against loss, misuse, unauthorised access, disclosure, alteration, and destruction.

However, no security measure is completely secure, and we cannot guarantee absolute security.

We retain personal information only for as long as necessary to:

  • Provide the Services
  • Fulfil orders
  • Meet legal obligations
  • Resolve disputes
  • Enforce agreements and policies

Retention periods may vary depending on the nature of the information and applicable legal requirements.

Your Rights and Choices

Depending on where you live and applicable law, you may have some or all of the following rights:

  • Right to access personal information
  • Right to request correction of personal information
  • Right to request deletion of personal information
  • Right to receive a copy of personal information
  • Right to object to certain processing activities
  • Right to withdraw consent where consent is the basis for processing

You may exercise these rights by contacting us using the contact details below.

We may need to verify your identity before processing certain requests.

We will not discriminate against you for exercising your privacy rights.

International Transfers

Your personal information may be stored, processed, or transferred outside New Zealand where necessary to provide our Services, process payments, fulfil orders, operate our website, or comply with legal obligations.

Where required, we take reasonable steps to ensure appropriate safeguards are in place for international transfers of personal information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices, operational requirements, legal obligations, or regulatory requirements.

We will post any revised Privacy Policy on this website and update the “Last updated” date accordingly.

Complaints

If you have concerns about how we process your personal information, please contact us using the details below.

If you are not satisfied with our response, you may contact the New Zealand Office of the Privacy Commissioner:

https://www.privacy.org.nz

Contact

If you have any questions about this Privacy Policy, our privacy practices, or would like to exercise any available privacy rights, please contact us:

DIY Xpanda
1/28A Poland Road
Wairau Valley
Auckland 0627
New Zealand

Phone: 021 532 035

Email: diy@xpanda.co.nz

Last updated: July 6, 2026