Privacy Policy

Last Updated: October 5, 2026

This Privacy Policy explains how PINK LADY LIMITED ("we", "us", or "our") collects, uses, stores, and shares personal data when you visit gavere.shop (the "Website"), use our services, or make a purchase through our online store.

We are committed to protecting your personal data and processing it in accordance with applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 ("GDPR"), where applicable.

1. Data Controller

The controller responsible for processing your personal data is:

PINK LADY LIMITED
136 Pembertons Rd
Sefton 7477
New Zealand

Postal Code: 7477
Company Number: 2339315
Authorized Representative: Keren Elizabeth BEACH
Telephone: +64 77773079
Email: support@gavere.shop
Website: gavere.shop

If you have any questions regarding this Privacy Policy or the processing of your personal data, you may contact us using the details above.

2. Personal Data We Collect

Depending on how you use our Website, we may collect different categories of personal data.

Contact Information

This may include:

  • Full name

  • Billing address

  • Shipping address

  • Email address

  • Telephone number

Order Information

When you place an order, we may process information including:

  • Products purchased

  • Order number

  • Order value

  • Shipping information

  • Billing information

  • Order status

  • Return and refund information

Payment Information

Cash on Delivery (COD) is available only for orders and delivery locations where this payment method is expressly displayed during checkout.

For Cash on Delivery orders, payment is generally collected upon delivery of the order.

If other payment methods are offered, payment-related information may be processed by the relevant payment service provider.

Where payment information is processed by external payment service providers, we generally do not store complete payment card details ourselves.

Customer Service Information

When you contact us, we may process information including:

  • Your name

  • Your email address

  • Order information

  • Messages you send to us

  • Information or documents you provide in connection with customer service, returns, refunds, or warranty matters

Technical and Device Information

When you visit our Website, certain information may be collected automatically, including:

  • IP address

  • Browser type

  • Device type

  • Operating system

  • Approximate location based on IP address

  • Website activity

  • Pages visited

  • Referring website

  • Date and time of access

  • Cookie and similar identifiers

3. How We Collect Personal Data

We may collect personal data:

  • Directly from you when you place an order

  • When you create or use a customer account

  • When you contact our customer service team

  • When you request a return or refund

  • When you subscribe to marketing communications

  • Automatically through cookies and similar technologies

  • Through Shopify and other service providers involved in operating our Website

  • Through shipping, logistics, fraud prevention, analytics, or other service providers where necessary

4. How We Use Personal Data

Processing and Fulfilling Orders

We may use your personal data to:

  • Confirm your order

  • Prepare and ship products

  • Provide free standard shipping where offered

  • Process Cash on Delivery where available during checkout

  • Provide delivery information

  • Process returns and refunds

  • Provide customer service

The legal basis for this processing is generally Article 6(1)(b) GDPR, where the GDPR applies.

Compliance With Legal Obligations

We may process and retain personal data where necessary to comply with:

  • Tax obligations

  • Accounting obligations

  • Consumer protection requirements

  • Regulatory obligations

  • Lawful requests from competent authorities

The legal basis may be Article 6(1)(c) GDPR.

Protecting Our Business and Preventing Fraud

We may use personal data to:

  • Detect fraudulent transactions

  • Prevent misuse of our Website

  • Protect our customers

  • Maintain Website and network security

  • Establish, exercise, or defend legal claims

Where applicable, this processing may be based on our legitimate interests pursuant to Article 6(1)(f) GDPR, provided that your rights and freedoms do not override those interests.

Improving Our Website and Services

We may use data to:

  • Better understand how our Website is used

  • Improve Website functionality

  • Improve products and services

  • Resolve technical issues

  • Measure Website performance

Where consent is legally required, this processing will only take place after you have provided your consent.

Marketing and Advertising

Where legally required and with your consent, we may use personal data to:

  • Send promotional emails

  • Inform you about products or offers

  • Measure advertising performance

  • Provide relevant marketing content

The legal basis for consent-based marketing may be Article 6(1)(a) GDPR.

You may withdraw your consent or unsubscribe from marketing communications at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

5. Shopify

Our online store is operated using the Shopify e-commerce platform.

Shopify provides the technical infrastructure we require to operate our Website, process orders, manage customer data, and provide e-commerce functionality.

When you visit our Website or place an order, personal data may therefore be processed through Shopify systems.

Depending on the particular processing activity, Shopify and its service providers may act as processors or, where provided by law, as independent controllers.

6. Sharing Personal Data

We do not sell personal data in the conventional sense of selling customer lists in exchange for money.

However, we may share personal data with service providers where necessary for the operation of our business.

These may include:

  • Shopify and other e-commerce technology providers

  • Hosting and IT service providers

  • Shipping and logistics companies

  • Cash on Delivery service providers, where used

  • Payment service providers, where used

  • Customer service providers

  • Fraud prevention and security providers

  • Analytics providers

  • Advertising and marketing providers, where the required consent has been obtained

  • Professional advisers such as accountants, auditors, or legal advisers

  • Public authorities where we are legally required to disclose information

Service providers that process personal data on our behalf are required to protect it in accordance with applicable data protection requirements.

7. Cookies and Similar Technologies

Our Website may use cookies and similar technologies.

Cookies may be used for:

  • Technically necessary operation of the Website

  • Shopping cart functionality

  • Storing your preferences

  • Website security

  • Fraud prevention

  • Website analytics

  • Performance measurement

  • Advertising and marketing

Technically necessary cookies may be used where permitted by law without consent.

Where Italian or European law requires consent, optional analytics, advertising, or marketing cookies will only be activated after you have provided your consent.

You can manage your cookie preferences through the consent or cookie management tool provided on our Website, where available.

You may change or withdraw your consent at any time.

8. International Data Transfers

PINK LADY LIMITED is based in New Zealand.

Personal data belonging to customers in Italy or other countries within the European Economic Area ("EEA") may therefore be transferred to and processed in New Zealand.

New Zealand is currently recognized by the European Commission as providing an adequate level of data protection.

Our technology and other service providers may also process personal data in other countries.

Where personal data is transferred from the EEA to a country for which no adequacy decision exists, appropriate safeguards will be implemented where required.

These safeguards may include Standard Contractual Clauses approved by the European Commission or other legally recognized transfer mechanisms.

9. Data Retention

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy or to comply with legal obligations.

Retention periods may depend on:

  • The duration of our business relationship with you

  • Order and delivery processing

  • Return and warranty periods

  • Customer service requirements

  • Accounting and tax obligations

  • Fraud prevention requirements

  • Statutory limitation periods

  • Other legal retention requirements

When personal data is no longer required, it will be deleted, anonymized, or otherwise securely removed where legally and technically possible.

10. Your Rights Under the GDPR

Where the GDPR applies to the processing of your personal data, you may have the following rights:

Right of Access

You may request information about whether we process personal data relating to you and, where applicable, request a copy of that data.

Right to Rectification

You may request the correction of inaccurate or incomplete personal data.

Right to Erasure

You may request the deletion of your personal data where the legal requirements for deletion are met.

This right is not absolute, particularly where statutory retention obligations apply.

Right to Restriction of Processing

Under certain circumstances, you may request that the processing of your personal data be restricted.

Right to Data Portability

Where applicable, you may request that personal data you have provided be supplied in a structured, commonly used, and machine-readable format.

Right to Object

Under certain circumstances, you may object to processing based on legitimate interests.

You may object to the processing of personal data for direct marketing purposes at any time.

Right to Withdraw Consent

Where processing is based on your consent, you may withdraw that consent at any time.

Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

Automated Decision-Making

Where applicable, you may have rights relating to decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you.

We do not intend to make such decisions solely through automated processing unless legally permitted and appropriate safeguards are in place.

11. Exercising Your Data Protection Rights

To exercise your data protection rights, please contact:

Email: support@gavere.shop

Please describe your request as clearly as possible.

We may request reasonable information where necessary to verify your identity.

We will respond to valid requests within the time limits required by applicable law.

Where the GDPR applies, we will generally respond without undue delay and no later than one month after receiving a valid request, subject to any extensions permitted by law.

12. Right to Lodge a Complaint

If you are located in Italy or another EEA country and believe that your personal data has been processed unlawfully, you may lodge a complaint with a competent data protection supervisory authority.

You may contact the supervisory authority responsible for your place of residence, place of work, or the location of the alleged infringement.

You may also contact us first at support@gavere.shop so that we have an opportunity to review your concerns.

13. Data Security

We implement appropriate technical and organizational measures designed to protect personal data against risks including:

  • Unauthorized access

  • Unlawful processing

  • Accidental loss

  • Alteration

  • Disclosure

  • Destruction

However, no electronic transmission or data storage system can be guaranteed to be completely risk-free.

14. Third-Party Websites

Our Website may contain links to third-party websites or services.

We are not responsible for their privacy practices.

We recommend reviewing the privacy policies of the relevant third parties before using their services or providing personal data.

15. Children's Privacy

Our Website and products are intended for general consumers and are not specifically directed at children.

We do not knowingly collect personal data from children where such processing would be unlawful.

If you believe that a child has unlawfully provided personal data to us, please contact us at:

support@gavere.shop

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including due to:

  • Changes to our business practices

  • Changes to our Website or services

  • Changes to our service providers

  • Operational requirements

  • Legal or regulatory requirements

The current version will be published on this page with an updated date.

17. Contact

If you have questions regarding this Privacy Policy, your personal data, or your data protection rights, please contact:

PINK LADY LIMITED
136 Pembertons Rd
Sefton 7477
New Zealand

Postal Code: 7477
Company Number: 2339315
Authorized Representative: Keren Elizabeth BEACH
Telephone: +64 77773079
Email: support@gavere.shop
Website: gavere.shop