Privacy policy

Last updated: 24 October 2026

The Good Haul is an online-only store at thegoodhaul.co.nz. In this policy, "we", "us" and "our" mean The Good Haul. This policy explains how we collect, use, share, store and protect your personal information, and the rights you have under New Zealand's Privacy Act 2020. If you have any questions, email us at hello@thegoodhaul.co.nz.

What personal information we collect

We only collect the personal information we need to run the store and look after your orders. Depending on how you use the store, this may include:

Contact and delivery details: your name, email address, shipping and billing address, and phone number if you give it at checkout.
Order details: what you buy, order and payment amounts, and any returns, refunds or issues with an order.
Payment details: payments are processed by our payment providers at checkout. We do not see or store your full card number.
Account details: if you create a customer account, the email address and details linked to that account.
Messages: what you tell us when you email us or contact us through our contact form or social media pages.
Email sign-up: your email address if you join our email list.
Device and usage information: information collected automatically when you visit the store, such as your IP address, browser and device type, and the pages and products you view. This is collected through cookies and similar technologies, including Google Analytics (see "Google Analytics" and "Cookies" below).

Where we get it from

We collect most information directly from you, for example when you place an order, create an account, sign up to our emails or contact us. Some information is collected automatically when you use the store, and some comes from our service providers, such as order and payment status from Shopify and our payment providers, and dispatch or tracking updates from the brands that send your order.

Why we collect it and how we use it

We use your personal information to:

process your order and take payment;
pass your order to the brand that sells and ships the item, so it can be sent to you;
send you order confirmations and updates about your order;
answer your questions and handle returns, refunds and problems with orders, including under the Consumer Guarantees Act 1993;
send you marketing emails, but only if you have signed up to receive them. You can unsubscribe at any time using the link in any marketing email;
run, secure and improve the store, including preventing fraud and understanding how the store is used; and
meet our legal obligations, such as keeping tax and accounting records.

We will not use your personal information for a purpose that is unrelated to these purposes unless you agree or the Privacy Act 2020 allows it. You do not have to give us your personal information, but if you don't, we may not be able to process your order or respond to you.

Who we share it with

We do not sell your personal information. We only share it where needed for the purposes above:

Shopify: our store runs on Shopify, which hosts the store, runs the checkout, and stores order and customer information for us. Shopify also provides the store's built-in analytics and our email tools. You can read Shopify's privacy policy.
Payment providers: your payment is handled by the payment provider you choose at checkout (for example Shop Pay, PayPal, Apple Pay or Google Pay, where offered). They use your payment details to process the payment and prevent fraud, under their own privacy policies.
The brands that fulfil your order: the products in our store are supplied and shipped by the brands that sell them, through Shopify Collective. When you order, we share the details needed to send the order, such as your name, shipping address, contact details and the items ordered, with the brand that ships that item. The brand, and the courier it uses, use these details to deliver your order.
Our email provider: emails you send to hello@thegoodhaul.co.nz are handled by our email provider, Google.
Google Analytics: Google receives information about how you use the store so it can provide us with website analytics reports (see "Google Analytics" below).
Others, where required or allowed by law: for example, government agencies or law enforcement where we are legally required to share information, our professional advisers, or a buyer if our business is sold.

We use Shopify's built-in analytics and Google Analytics to understand how the store is used. We do not use Meta (Facebook or Instagram) pixels or any other advertising or ad-tracking pixels on this store, and we do not use Google Analytics for advertising. If that changes, we will update this policy first.

Google Analytics

We use Google Analytics, connected through Shopify's Google & YouTube sales channel, for website analytics only. It helps us understand which pages and products people look at, how they find our store, and where they leave, so we can improve the store.

What it collects: the pages and products you view, your device and browser type, your approximate location (such as city or region, worked out from your IP address; Google Analytics does not store your full IP address), the website or link that referred you to us, and store events such as adding items to your cart, starting checkout and completing a purchase (including the order value and items bought, but not your name, email address, delivery address or payment details).

No advertising use: we do not use Google Analytics data for advertising, we have not linked it to Google Ads, and we have turned off Google Analytics advertising features (such as Google signals and ads personalisation).

Overseas processing: Google processes this information on servers outside New Zealand, including in the United States. We disclose it to Google in line with the Privacy Act 2020 (information privacy principle 12) because Google is bound by its own privacy and security commitments to protect it. You can read Google's privacy policy and how Google uses information from sites that use its services.

How to opt out: you can opt out of Google Analytics on all websites by installing the Google Analytics opt-out browser add-on, or by blocking or deleting cookies in your browser settings.

If you contact us through our Facebook or Instagram pages, Meta's own privacy policy also applies to that information.

Sending information overseas

Some of the service providers above store or process personal information outside New Zealand. For example, Shopify stores data on servers in other countries, including Canada and the United States, our payment providers and email provider may also process information overseas, and Google processes Google Analytics data outside New Zealand, including in the United States. Where we disclose personal information to someone overseas, we do so in line with the Privacy Act 2020 (information privacy principle 12). We use established providers that are bound by their own privacy and security commitments to protect that information.

How we store and protect it

Your order and customer information is stored in our Shopify account and with the service providers described above. Shopify is certified as compliant with the Payment Card Industry Data Security Standard (PCI DSS) for card payments. We protect our accounts with secure passwords, limit access to the people who need it to run the store, and only share information with the brands and providers that need it. No method of storing or sending information online is completely secure, but we take reasonable steps to protect your information from loss, misuse and unauthorised access or disclosure.

If a privacy breach happens that has caused or is likely to cause serious harm, we will notify the Privacy Commissioner and the people affected, as the Privacy Act 2020 requires.

How long we keep it

We keep personal information only for as long as we need it for the purposes in this policy. Order and payment records are kept for at least 7 years, because New Zealand tax law requires us to keep business records. If you join our email list, we keep your email address until you unsubscribe or ask us to remove it. Google Analytics keeps visit and event data linked to cookies or other identifiers for 14 months, after which only summary (aggregated) reports that do not identify you are kept. When we no longer need information, we delete it or make it anonymous.

Your right to access and correct your information

Under the Privacy Act 2020 (information privacy principles 6 and 7), you have the right to ask for a copy of the personal information we hold about you, and to ask us to correct it if you think it is wrong. To make a request, email us at hello@thegoodhaul.co.nz. We may need to confirm your identity before we act on a request. We will respond to your request as the Privacy Act 2020 requires. If we decide not to correct information, we will tell you why, and you can ask us to attach a statement of the correction you asked for to that information.

You can also update your account details by signing in to your account, and unsubscribe from marketing emails at any time.

Cookies

Our store uses cookies and similar technologies, which are small files stored by your browser. Some are needed for the store to work, such as remembering your cart and handling checkout. Others help us understand how the store is used through Shopify's built-in analytics and Google Analytics. You can learn more in Shopify's cookie policy. You can block or delete cookies in your browser settings, but parts of the store, such as the cart and checkout, may not work without them.

Links to other websites

Our store may link to other websites, such as our social media pages or the brands' own websites. Those sites have their own privacy policies, and we are not responsible for how they handle your information.

Complaints

If you have a concern about how we have handled your personal information, please email us first at hello@thegoodhaul.co.nz so we can try to put it right. If you are not satisfied with our response, you can make a complaint to the Office of the Privacy Commissioner at www.privacy.org.nz.

Changes to this policy

We may update this policy from time to time, for example if we change how we run the store or the services we use. We will post the updated policy here and change the "Last updated" date at the top.