Privacy Policy

1. Data Controller & Contact Information

We are delighted that you are visiting our website. Below we explain how we handle your personal data when you use our site. Personal data is any information that can be used to identify you personally.

The controller responsible for data processing on this website is Lara Wellington. For any privacy-related enquiries, please contact us at support@lara-wellington.nz.

For your security, this website uses SSL/TLS encryption. You can recognise an encrypted connection by the "https://" prefix and the padlock icon in your browser.

2. Data Collection When Visiting Our Website

When you browse our website without registering or submitting any information, we only collect data automatically transmitted by your browser (server log files), including:

Pages visited and date/time of access Amount of data sent (in bytes) Source/referral page Browser and operating system used IP address (where applicable, in anonymised form)

This data is processed in accordance with Art. 6 (1) lit. f GDPR, based on our legitimate interest in maintaining the stability and functionality of our website. It is not shared or used for any other purpose.

3. Cookies

We use cookies to make your visit more enjoyable and to enable certain features. Cookies are small text files stored on your device. We use both session cookies (deleted when you close your browser) and persistent cookies (which remain on your device for a set period).

Cookies may collect browser and location data and IP addresses. They may also be used to simplify the ordering process, for example by saving the contents of your shopping cart.

We may work with advertising partners who use third-party cookies to help us make our website more relevant to you. You will be informed separately whenever this is the case.

You can manage or disable cookies through your browser settings:

Internet Explorer: https://support.microsoft.com/help/17442 Firefox: https://support.mozilla.org/kb/cookies-erlauben-und-ablehnen Chrome: https://support.google.com/chrome/answer/95647 Safari: https://support.apple.com/kb/ph21411

Please note that disabling cookies may limit the functionality of our website.

4. Contact Enquiries

When you contact us (e.g. by email), we collect the personal data you provide. This data is used solely for the purpose of responding to your enquiry and for related administrative purposes, in accordance with Art. 6 (1) lit. f GDPR. Your data will be deleted once your enquiry has been fully resolved, subject to any applicable legal retention obligations.

5. Customer Accounts & Order Processing

If you create a customer account or place an order, we collect and process your personal data in accordance with Art. 6 (1) lit. b GDPR. You may request deletion of your customer account at any time by contacting us at support@lara-wellington.nz. Data will be retained for the duration required by applicable tax and commercial law before being deleted.

6. Email Marketing

Newsletter If you subscribe to our newsletter, we will send you regular updates about our offers. Only your email address is required. We use a double opt-in process, meaning you will receive a confirmation email and must click a link to confirm your subscription.

You may unsubscribe at any time via the link in any newsletter or by contacting us at support@lara-wellington.nz. Your email address will be removed from our mailing list immediately upon unsubscribing.

Existing Customers If you have purchased from us previously, we may send you offers for similar products by email, in accordance with Art. 6 (1) lit. f GDPR. You may object to this use of your email address at any time by contacting us.

7. Order Processing & Data Sharing

We share your personal data with delivery partners to the extent necessary to fulfil your order, and with payment providers to process your payment, in accordance with Art. 6 (1) lit. b GDPR.

8. Review Reminders

With your express consent (Art. 6 (1) lit. a GDPR), we may send you a one-time email reminder to leave a review of your order. You may withdraw your consent at any time by contacting us.

9. Social Media Plugins

Our website may include buttons for Facebook, Google+, and Instagram. To protect your privacy, these are implemented as HTML links rather than direct plugins — meaning no connection to third-party servers is made simply by visiting our website. A connection is only established if you actively click on a button.

For more information on how these platforms handle your data, please refer to their respective privacy policies:

Facebook: https://www.facebook.com/policy.php Google: https://www.google.com/intl/en/policies/privacy/ Instagram: https://help.instagram.com/155833707900388/

10. Online Marketing

We use the following Google advertising tools, each operating on the basis of our legitimate interest in effective marketing (Art. 6 (1) lit. f GDPR):

DoubleClick by Google – used to display relevant ads and prevent repeated display of the same ads. Cookies used do not contain personal information. You may opt out via https://www.google.de/settings/ads or www.aboutads.info.

Google AdWords Conversion Tracking – helps us understand which ads lead to purchases on our site. Conversion cookies expire after 30 days and are not used for personal identification. You may opt out via your browser settings or the plugin at https://www.google.com/settings/ads/plugin.

11. Web Analytics – Google Analytics

We use Google Analytics to analyse how visitors use our website. This tool uses cookies and transmits anonymised IP addresses to Google servers. We use the _anonymizeIp() extension to ensure IP addresses are truncated before processing.

You may opt out of Google Analytics data collection by installing the browser plugin available at: https://tools.google.com/dlpage/gaoptout

12. Retargeting & Remarketing

Facebook Custom Audiences (Facebook Pixel) With your express consent (Art. 6 (1) lit. a GDPR), we use the Facebook Pixel to track user behaviour following interaction with our Facebook ads, for statistical and optimisation purposes. The data is anonymous to us but may be linked to your Facebook profile by Facebook. Consent may only be given by users aged 13 or older.

You may opt out via: https://www.aboutads.info/choices/

Google AdWords Remarketing We use Google AdWords Remarketing to display interest-based ads in Google search results and on third-party websites. Google places a pseudonymous cookie in your browser for this purpose. You may permanently disable this via: https://www.google.com/settings/ads/onweb/

13. Your Rights

Under applicable data protection law, you have the following rights regarding your personal data:

Right of access (Art. 15 GDPR) – request information about the data we hold about you Right to rectification (Art. 16 GDPR) – request correction of inaccurate or incomplete data Right to erasure (Art. 17 GDPR) – request deletion of your data, subject to legal obligations Right to restriction of processing (Art. 18 GDPR) – request that we limit how we use your data Right to data portability (Art. 20 GDPR) – receive your data in a structured, machine-readable format Right to withdraw consent (Art. 7 (3) GDPR) – withdraw consent at any time without affecting prior processing Right to lodge a complaint (Art. 77 GDPR) – contact your local supervisory authority

Right to Object Where we process your data based on legitimate interests, you have the right to object at any time on grounds relating to your particular situation. If you object to processing for direct marketing purposes, we will cease such processing immediately. To exercise this right, contact us at support@lara-wellington.nz.

14. Data Retention

We retain personal data only for as long as required by applicable legal retention periods (e.g. under commercial or tax law). Once these periods have expired, data is deleted unless it is still needed for the fulfilment of a contract or we have a legitimate interest in retaining it.

If you have any questions about this Privacy Policy, please contact us at support@lara-wellington.nz.