PRIVACY POLICY

REFILL COLLECTIVE LIMITED (hereinafter referred to as “we” or “us”) values ​​your personal information and privacy. This Privacy Policy explains how we collect, use, store, protect, and disclose your personal information when you visit our website, purchase our products, or contact us.

1. Information We Collect

We may collect the following information when you browse our website, place an order, or contact us:

Identity Information: Name and order-related details.

Contact Information: Email address and contact phone number.

Delivery Information: Shipping address and information required for delivery.

Transaction Information: Order number, purchased items, order amount, and payment status.

Technical Information: Where applicable, we collect browser type, device information, IP address, and website usage data to maintain website security and improve the shopping experience.

We collect personal information only to the extent reasonably necessary and process it in accordance with applicable laws.

2. How We Use Your Information

We may use the collected information for the following purposes:

Processing, confirming, and fulfilling your orders.

Arranging product delivery and providing order status notifications.

Responding to customer inquiries and providing after-sales service.

Handling refunds, returns, and related transaction issues.

Preventing fraud, ensuring website security, and maintaining transaction records.

Complying with applicable legal, accounting, and tax obligations.

Sending you marketing communications, subject to appropriate authorization or legal basis.

We will not use your personal information for purposes incompatible with the original collection purpose or without appropriate authorization.

3. Payment Security and PCI-DSS Compliance

We prioritize the security of online payments.

All online transactions are processed through secure third-party payment gateways. The payment service providers we use handle relevant payment data in accordance with applicable Payment Card Industry Data Security Standards (PCI-DSS).

We do not store full credit card numbers or CVV security codes on our own servers.

Your payment information is processed in accordance with the security policies and applicable requirements of the relevant payment service providers. Payment service providers may process necessary transaction information in accordance with their own privacy policies and terms of service. Please note that the specific implementation of payment security measures depends on the payment service provider used and the technical configuration of the website.

4. Sharing Information with Third Parties

To fulfill orders and operate the website, we may share relevant personal information with the following third parties to the extent necessary:

Logistics and delivery service providers: For arranging delivery, transportation, and package tracking.

Payment service providers: For processing payments, refunds, and transaction verification.

Website and technical service providers: For website hosting, maintenance, security, and order management.

Professional service providers and regulatory bodies: To provide relevant information when required by law or necessary to protect legitimate interests.

We share personal information only to the extent necessary to provide the relevant services or fulfill legitimate purposes.

We do not sell your personal information.

Third-party service providers are required to handle personal information in accordance with applicable laws and their respective obligations.

5. Data Retention and Deletion

We retain your personal information only for the period reasonably necessary to achieve the purposes for which it was collected, including fulfilling orders, providing after-sales service, resolving disputes, preventing fraud, and complying with applicable legal, accounting, and tax obligations.

Different types of information may have different retention periods. For example, order and transaction records may need to be retained for a specific period as required by applicable law.

When there is no longer a legitimate or reasonable need to retain the personal information, we will take reasonable measures to delete, destroy, or otherwise de-identify it, unless continued retention is required by law or other legitimate grounds.

If you request the deletion of your personal information, we will evaluate and process your request to the extent permitted by applicable law.

6. Cookies and Similar Technologies

Our website may use cookies or similar technologies to maintain shopping cart functionality, remember user preferences, analyze website traffic, and improve website performance.

You can manage or disable certain cookies through your browser settings. However, please note that disabling certain cookies may affect some website functions.

For cookies or similar technologies that require consent, we will handle such consent in accordance with applicable laws.

7. Personal Information Security

We implement reasonable technical and organizational measures commensurate with the scale of our business and the nature of the information processed to mitigate the risk of unauthorized access to, disclosure, alteration, loss, or misuse of personal information.

However, as absolute security cannot be guaranteed for internet transmissions or electronic storage, we cannot promise that all information transmission or storage processes are entirely free from risk.

In the event of a personal information security incident requiring notification by law, we will fulfill our notification obligations in accordance with applicable laws.

8. Your Privacy Rights

Under applicable privacy laws, you may have the right to:

Request access to the personal information we hold about you.

Request the correction of inaccurate or incomplete personal information.

Request the deletion of your personal information, where permitted by applicable law.

Object to specific personal information processing activities or withdraw your consent.

Lodge a privacy complaint, where applicable.

We may need to verify your identity to protect the security of your personal information. We will process your request in accordance with applicable laws and relevant requirements.

9. Privacy Protection in New Zealand

For personal information processing activities within New Zealand, we comply with applicable New Zealand privacy laws, including the Privacy Act 2020.

Under applicable law, you may have the right to request access to or correction of the personal information we hold about you.

Regarding cross-border information disclosure, we assess the recipient’s protective measures and necessary legal safeguards in accordance with applicable law.

10. Children’s Privacy

Our websites and products are primarily aimed at general consumers and are not specifically directed at children.

If we discover that we have collected personal information regarding children—which requires special legal protection—without appropriate authorization, we will take reasonable measures to handle such information in accordance with applicable law.

11. Updates to the Privacy Policy

We may update this Privacy Policy in response to business changes, adjustments to website functionality, or legal requirements.

The updated version will be posted on this page, with the date of the update indicated where appropriate. We encourage you to review this page periodically to stay informed about our privacy practices.

12. Contact Us

If you have any questions regarding this Privacy Policy, our personal information processing practices, or requests to access or delete your personal information, please contact us using the methods below. We will handle your privacy-related inquiries and requests in accordance with applicable laws.