Privacy policy

Last updated: 5 November 2026

KÖVI (“we”, “us” or “our”) is based in New Zealand and operates kovileather.com, including our online store and related content, features, products and services (the “Services”). We supply customers in New Zealand and Australia.

Our store is powered by Shopify. We also use service providers, including Klaviyo for email marketing and website tracking, and Judge.me for product review invitations and review management.

This Privacy Policy explains how we collect, use, store and disclose personal information when you visit our website, make a purchase, subscribe to emails, submit a review or otherwise interact with us.

Personal information we collect

Personal information means information about an identifiable individual. Depending on how you interact with us, we may collect:

• Contact information: your name, email address, phone number, billing address and delivery address.
• Order and transaction information: products you view, add to your cart or purchase, payment status, delivery details, returns, exchanges and purchase history.
• Payment information: information needed to process payments. Payments are handled through our payment providers; the information available to us depends on the payment method and provider.
• Account information: information associated with any customer account you create, including your preferences.
• Communications: information you provide in enquiries, customer support messages or other correspondence.
• Reviews: review content, ratings, display names and any photos or videos you submit.
• Device and website activity information: your IP address, browser and device information, cookie identifiers, pages visited, products viewed and interactions with our website.
• Marketing information: subscription preferences and interactions with our marketing, which may include email opens and link clicks.

We collect information directly from you, automatically through cookies and similar technologies, and from service providers that help us operate the Services.

You can choose not to provide personal information, but this may prevent us from fulfilling an order, responding to an enquiry or providing certain features.

How we use personal information

We use personal information to:

• Process payments, fulfil and deliver orders, and manage returns and exchanges.
• Communicate with you about purchases, deliveries and enquiries.
• Operate customer accounts and remember preferences.
• Send marketing communications and abandoned-cart reminders where permitted by law.
• Understand website activity, personalise communications and measure marketing effectiveness.
• Request, manage and display product reviews.
• Maintain and improve our website and Services.
• Detect fraud, protect security and investigate misuse.
• Meet legal obligations, maintain business records and resolve disputes.

Email marketing and Klaviyo

We use Klaviyo to manage email marketing, send abandoned-cart reminders and understand how visitors interact with our website.

For these purposes, Klaviyo processes information such as your name, email address, subscription preferences, products viewed, cart contents, purchase history and website activity. Website activity may be associated with your customer or subscriber profile.

We may also collect information about whether emails are opened and which links are clicked. We use this information to understand engagement, improve communications and tailor marketing. Email open information may be affected by the privacy settings of your email service.

We send marketing emails where we have your consent or where otherwise permitted by applicable electronic marketing laws.

You can unsubscribe using the unsubscribe link in our marketing emails. Unsubscribing from marketing does not prevent us from sending necessary communications about your orders or responding to your enquiries.

Cookies, tracking and advertising

Our website and service providers use cookies, pixels and similar technologies to operate the store, remember preferences, understand website activity and support marketing.

These technologies may collect device information, IP addresses, pages visited, products viewed, cart activity and purchases. Some of this information may be linked to your email address or customer profile when you identify yourself, such as by subscribing or checking out.

Where we use advertising partners, information about your interactions with our website may be shared with them to measure advertising performance and show relevant advertisements on other websites or platforms.

You can manage cookies through any privacy controls available on our website and through your browser settings. Disabling cookies may affect some website features. Unsubscribing from marketing emails does not, by itself, disable website cookies.

Where applicable, you can also use our Your privacy choices page to manage certain advertising preferences. We honour legally required opt-out preference signals, including Global Privacy Control, where applicable to our processing.

Product reviews and Judge.me

We use Judge.me to send product review invitations and collect, manage and display reviews. We share customer contact details and relevant order and product information with Judge.me for these purposes.

If you submit a review, your review content, displayed reviewer name and any photos or videos you include may be published on our website. Please avoid including personal information you do not want made public.

You can contact us using the details below about personal information included in a review or to request help with review invitations.

Artificial intelligence

We use ChatGPT to assist with drafting general website content and developing website code. We do not enter customer personal information into ChatGPT for these purposes.

Who we share personal information with

We share personal information where reasonably necessary for the purposes described in this policy, including with:

• Shopify: to host and operate our online store and support checkout and related services.
• Klaviyo: to provide email marketing, abandoned-cart communications and website tracking.
• Judge.me: to provide review invitations and review management.
• Payment providers: to process payments and assist with fraud prevention.
• Delivery and fulfilment providers: to deliver purchases and manage delivery issues.
• Technology and professional service providers: to support our website, business operations, accounting and legal needs.
• Advertising partners: where used, to deliver and measure advertising, subject to applicable privacy choices and legal requirements.

We may also disclose information where you authorise us to do so, where required or permitted by law, to protect legal rights or investigate fraud, or in connection with a proposed business sale or restructuring, subject to appropriate safeguards.

Our relationship with Shopify

Shopify hosts our store and processes personal information to provide its services to us. Shopify may also process certain information for its own purposes as described in its privacy notices.

For more information about Shopify’s handling of personal information and available privacy choices, see the Shopify Consumer Privacy Policy and Shopify Privacy Portal.

Where personal information is stored and processed

KÖVI is based in New Zealand. We use third-party service providers, including Shopify, Klaviyo and Judge.me, that may store or process personal information outside New Zealand and Australia.

The countries involved depend on each provider’s hosting, support and subcontracting arrangements. Overseas processing may include storage on servers and access by support personnel.

We remain responsible for personal information held by providers acting on our behalf, as required by applicable law. Where an overseas disclosure is subject to New Zealand’s overseas-disclosure requirements, we take steps to meet those requirements.

You can contact us for further information about the providers used to handle your personal information and their overseas processing arrangements.

Security and retention

We take reasonable steps to protect personal information against loss, misuse, unauthorised access, disclosure and alteration. However, no internet transmission or electronic storage system is completely secure.

We retain personal information for as long as reasonably necessary for the purposes for which it was collected, including fulfilling orders, providing support, maintaining required business and tax records, resolving disputes and meeting legal obligations.

We may retain limited information about an unsubscribe request so that we can continue to respect your marketing preferences.

Your privacy rights

Under the New Zealand Privacy Act 2020, you can request access to personal information we hold about you and ask us to correct it, subject to the Act’s exceptions.

If we decline to make a requested correction, you can ask us to attach a statement of the correction sought to the information.

You can also contact us to request deletion of personal information. We will consider your request in light of applicable law and any legitimate need to retain the information, such as recordkeeping obligations.

Depending on where you live and which laws apply, you may have additional rights relating to deletion, portability or opting out of certain advertising activities.

To make a request, contact us using the details below. We may need to verify your identity before providing access or making changes. We will respond within the time required by applicable law.

Children’s privacy

Our Services are intended for a general audience and are not directed at children. If you believe a child has provided personal information to us and you have concerns about its handling, please contact us.

Third-party websites

Our website may link to third-party websites or platforms. Their privacy practices are governed by their own policies. We encourage you to review those policies before providing personal information.

Complaints

If you have a concern about how we handle personal information, please contact our Privacy Officer using the details below so we can investigate and respond.

If you are not satisfied with our response, you can complain to the New Zealand Office of the Privacy Commissioner.

If Australian privacy law applies to your circumstances, you may also have complaint rights through the Office of the Australian Information Commissioner.

Changes to this policy

We may update this policy to reflect changes to our practices, services or legal requirements. We will publish the updated policy on our website, revise the “Last updated” date and provide additional notice where required by law.

Contact us

For privacy questions, requests or complaints, contact:

Privacy Officer — KÖVI
Email: hello@kovileather.com