Last updated: 20 July 2026

1. Introduction

Star Products Limited trading as The Aromatherapy Company ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, hold, use, and disclose personal information in connection with our website and online store at www.thearomatherapycompany.co.nz (the "Site"), in accordance with the Privacy Act 2020 (including the Information Privacy Principles, as amended by the Privacy Amendment Act 2025).

This policy applies to our ecommerce operations only. We do not sell, rent, or otherwise share your personal information with third parties for their own marketing purposes.

2. What personal information we collect

When you browse our Site or place an order, we may collect:

• Contact details, including your name, email address, phone number, and delivery and billing address
• Order information, including products purchased, order value, and order history
• Payment information processed through our payment provider (we do not store full card details ourselves)
• Account information, if you create an account with us
• Correspondence you send us, such as customer service enquiries
• Technical information, such as your IP address, browser type, and device information, collected automatically when you use the Site

3. How we collect personal information

We collect most personal information directly from you, for example when you place an order, create an account, subscribe to our mailing list, or contact us.

In some cases, we may also collect personal information indirectly, from a source other than you. In line with Information Privacy Principle 3A, where we do this we will take reasonable steps to make sure you are aware of the source, the purpose of collection, and your rights, unless an exception under the Privacy Act applies (for example, where you have already been made aware of these matters). Sources of indirect collection relevant to our ecommerce operations may include:

• Our payment processor, who may share limited transaction information with us for the purpose of processing and verifying your payment and preventing fraud
• Couriers and delivery partners, who may share delivery status and tracking information with us so we can keep you updated on your order
• Our ecommerce and email marketing platforms, which may provide us with information about how you have interacted with our Site or emails, for the purpose of order fulfilment and, where you have opted in, marketing communications

4. How we use personal information

We use personal information to:

• Process and fulfil your orders, including payment, delivery, and returns
• Communicate with you about your order or account
• Respond to your enquiries and provide customer service
• Send you marketing communications, where you have opted in, and in accordance with your preferences
• Improve our Site, products, and services
• Meet our legal and regulatory obligations, including under the Consumer Guarantees Act 1993 and Fair Trading Act 1986
• Detect and prevent fraud

5. Disclosure of personal information

We do not share your personal information with third parties for their own marketing or commercial purposes.

We may disclose personal information to trusted third parties who help us operate our business, strictly for the purposes described in this policy. This includes our payment processor, couriers and delivery partners, IT and website hosting providers, and email marketing platform. These providers are only permitted to use your information to provide services to us and are required to protect it appropriately.

We may also disclose personal information where required by law, or to protect our rights or the safety of others.

We do not transfer your personal information overseas except where necessary to use the service providers described above, and only where those providers are subject to privacy protections comparable to those in New Zealand, or where you have authorised the disclosure.

6. Cookies and website data

Our Site may use cookies and similar technologies to support essential website functions, remember your preferences, and understand how our Site is used. You can manage cookie preferences through your browser settings. We do not use website data to build profiles that are shared with or sold to third parties.

7. Data security

We take reasonable steps to protect the personal information we hold from loss, misuse, unauthorised access, disclosure, alteration, or destruction.

8. Retention

We retain personal information for as long as necessary to fulfil the purposes described in this policy, including to meet our legal, accounting, and reporting requirements.

9. Your rights

Under the Privacy Act 2020, you have the right to:

• Ask us to confirm whether we hold personal information about you, and to access that information
• Ask us to correct any personal information we hold about you that you believe is inaccurate
• Opt out of marketing communications at any time, using the unsubscribe link in our emails or by contacting us directly

To exercise any of these rights, please contact us using the details below.

10. Complaints

If you have a concern about how we have handled your personal information, please contact us first so we can try to resolve it. If you remain unsatisfied, you may contact the Office of the Privacy Commissioner at [www.privacy.org.nz](https://www.privacy.org.nz).

11. Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date.

12. Contact us

If you have any questions about this Privacy Policy or how we handle your personal information, please contact us at:

The Aromatherapy Co.

Phone: NZ +64 9 636 4484 or Australia 1800 104 029

Email: enquiries@thearomatherapyco.co.nz

Post: PO Box 9119, Newmarket, Auckland 1149, New Zealand