Seven Scents is a small business owned and run by Shannon. We hand-pour home fragrance and aromatherapy products in our studio in Lyall Bay, Wellington, and sell them here at sevenscents.co.nz and in the studio.
This policy explains what personal information we collect, why we collect it, who we share it with and the choices you have. It covers our website, our studio, our emails and our advertising. We follow the New Zealand Privacy Act 2020 and its information privacy principles.
The short version
- We collect what we need to take your order, deliver it and look after you, plus information about how people use our website.
- We use Google Analytics and Google advertising tools to understand our site and to show our ads to people who've visited. You can opt out at any time (see "Your choices about analytics and ads").
- We only send marketing emails if you've said yes, and you can unsubscribe whenever you like.
- We never sell or rent your personal information.
- Some of the services we use store information overseas, including in the United States.
- You can ask to see or correct your information at any time - just email us.
Who's responsible and how to reach us
Shannon is our privacy officer and looks after any privacy question or request personally.
Seven Scents
Unit 34/70 Kingsford Smith Street, Lyall Bay Junction, Rongotai, Wellington 6022
Email: hello@sevenscents.co.nz
Phone: 07 394 6108
What we collect
What you give us
-
When you order: your name, email address, phone number, delivery and billing addresses, what you bought, and any product options, gift message or delivery notes you add.
-
When you create an account: your contact details, saved addresses and order history.
-
When you join our newsletter: your email address (and your name, if you give it), through our sign-up form or the tick-box at checkout.
-
When you leave a review: your name, rating, review and any photos you choose to add.
-
When you contact us: whatever you include in your email, message or call.
-
In our studio: we record your purchase through our Shopify point-of-sale system. If you use the Shop app, or choose to give us your email address for a receipt, the purchase is linked to your customer record.
Information about someone else
If you send an order to someone else, you'll give us their name, delivery address and possibly their phone number. We use these details only to deliver that order and sort out anything that goes wrong with it. Please let them know you've shared their details with us for delivery - they're welcome to read this policy.
What we collect automatically
When you visit our website, we and the services we use automatically collect some technical information. This includes your IP address, device and browser type, the pages you look at, what you add to your cart, how you arrived at our site, and the approximate location your IP address suggests. It's collected using cookies and similar technologies (see "Cookies and similar technologies").
Card details
Card and payment details are handled directly by our payment providers. We never see or store your full card number.
What we receive from others
We sometimes receive information about you from the services we work with. For example:
- confirmation from a payment provider that your payment has gone through
- your details from Shopify, if you use Shop Pay or the Shop app
- delivery updates from our courier
- summary reports from Google about our website visitors, such as age ranges and interests across groups of visitors. These reports don't identify you.
How we use your information
We use your information to:
- process and deliver your orders, and send you order and shipping updates
- look after your account and help with questions, returns and problems
- ask you to review what you bought
- send you marketing emails, if you've agreed to receive them
- send you a reminder if you start a checkout but don't finish it
- understand how our website is used, so we can improve it
- show our ads and measure how well they work (see "Analytics and advertising")
- detect fraud and keep our store secure
- keep the records we need for tax, accounting and legal reasons.
We only use your information for these purposes, or for something directly related that you'd reasonably expect.
Cookies and similar technologies
Cookies are small files your browser saves when you visit a website. Along with pixels and tags (small pieces of code), they help our website work and show us and our service providers how it's used. We group them like this:
-
Essential: these make the cart, checkout, login and security work, and remember your cookie choices. Our site can't work properly without them.
-
Preferences: these remember choices you make, such as your region and currency.
-
Analytics: Shopify's own analytics and Google Analytics show us how people find and use our site. The Judge.me and Dr Stacked Discounts app pixels also record events such as page views and purchases, so our reviews and discounts work properly and we can see how they're used.
-
Marketing: Google's advertising cookies let us measure our Google ads, show them to people who've visited our site, and measure sales from our free product listings on Google.
Some features load content from the provider that runs them - for example, Afterpay's instalment messaging on our product pages. That provider may receive technical information such as your IP address.
Where you are makes a difference. If you visit from the EU, EEA or UK, you'll see a cookie banner, and we only use non-essential cookies if you agree. The Google tools on our site follow your choice through Google's Consent Mode. Visitors from New Zealand, Australia and other countries don't see a banner. Analytics and marketing cookies are used when you visit, and you can control them using the options below and your browser settings.
Most browsers let you block or delete cookies. If you block essential cookies, parts of our site - like the cart and checkout - won't work.
Analytics and advertising
We use these Google services:
-
Google Analytics 4, to understand how visitors use our site. We've turned on Google signals, which lets Google Analytics include information from visitors who are signed in to a Google account and have allowed ad personalisation. This gives us demographic and interest reports (such as age ranges and interests across groups of visitors) and helps us understand how people use our site across different devices. We only ever see summary information, never who you are.
-
Google & YouTube for Shopify. This app sends events from our site to Google, such as pages viewed, items added to the cart and purchases. The events are sent from your browser and from our store's servers. When you buy, it also sends your email address, phone number, name and address in a scrambled (hashed) form, so Google can match the purchase to ads you may have seen. This is called conversion measurement.
-
Google Merchant Center, which lists our products on Google for free and measures sales from those listings.
-
Google Ads with remarketing. We may show our ads to people who've visited our site. These ads can appear on Google Search, YouTube, and websites and apps that partner with Google.
-
Customer Match. If you've subscribed to our marketing emails, we may upload your contact details to Google Ads in a scrambled (hashed) form. This lets us show you relevant ads, or avoid showing ads to people who are already customers. We only include people who've opted in to marketing, and we remove you when you unsubscribe.
We and Google use first-party cookies (such as the Google Analytics cookie) and third-party cookies (such as Google advertising cookies) together. We use them to report on visits and ad interactions, to measure how our ads perform, and to show you ads based on your past visits to our site.
Google Business Profile shows our studio on Google Search and Google Maps. Reviews, questions and messages you leave there are handled by Google, and anything you post publicly can be seen by anyone.
To find out more, read how Google uses information from sites or apps that use its services.
Your choices about analytics and ads
-
Personalised ads: turn off ad personalisation in Google's Ads Settings. If you're signed in to Google, your choice applies across your devices.
-
Google Analytics: install the Google Analytics opt-out browser add-on to stop your visits being recorded in Google Analytics.
-
Customer Match: unsubscribe from our emails, or email us, and we'll remove you.
-
Cookies: block or delete them in your browser settings. In the EU, EEA or UK, you can also change your choice using our cookie banner.
Marketing emails
We send newsletters and offers through Shopify Email, but only if you've said yes - by signing up on our website, ticking the box at checkout, or asking us in the studio. You can unsubscribe at any time using the link at the bottom of every email, or by emailing us.
Some emails aren't marketing and will still arrive after you unsubscribe, such as order confirmations and delivery updates. After you buy, you may also get an email from Judge.me asking you to review your order, with its own unsubscribe link. If you start a checkout but don't finish, we may send you a reminder.
Our everyday email, hello@sevenscents.co.nz, runs on Google Workspace.
Reviews
We use Judge.me to collect and show product reviews. When your review is published, we show your first name and the first letter of your surname, along with your rating, your review and any photos you add. We never show your email address or other contact details. If you'd like a review changed or removed, just email us.
Who we share your information with
We share personal information only with the organisations that help us run the business, and only what they need to do their job:
-
Shopify: our online store, checkout, studio point-of-sale, Shop Pay, the Shop app and Shopify Email. Shop Pay and the Shop app are also covered by Shopify's own privacy policy.
-
Payment providers: Shopify Payments (card payments, Apple Pay and Google Pay), Afterpay and PayPal. If you choose Afterpay or PayPal, they handle your information under their own privacy policies and may run their own checks.
-
Delivery: Starshipit (our shipping-label service) and NZ Post receive your name, delivery address and contact details so they can deliver and track your order.
-
Google: Google Analytics, Google Ads, Merchant Center, Business Profile and Google Workspace, as described above.
-
Store apps: Judge.me (reviews and review-request emails), Dr Stacked Discounts (discounts) and Infinite Options (the product options you choose).
-
Professional advisers: such as our accountant, when they need it to do their work.
-
Authorities: where the law requires it, or where the Privacy Act allows it - for example, to stop fraud.
We don't sell or rent your personal information to anyone.
If Seven Scents is ever sold, customer information may pass to the new owner, who must keep protecting it in line with this policy.
Storing information overseas
Shopify, which runs our store, stores our store data in the United States. Some of our other service providers store or process information in Australia and other countries.
When a provider holds or processes information only on our behalf, we stay responsible for it under the Privacy Act. When we share information with an overseas organisation that uses it for its own purposes - for example Google, Afterpay or PayPal - we only do so where information privacy principle 12 of the Privacy Act allows it. Usually that's because the organisation is covered by privacy laws, or has agreed to safeguards, that protect your information in a way comparable to New Zealand law.
Information held overseas is also subject to the laws of that country, which may allow authorities there to access it.
How long we keep your information
-
Order and payment records: seven years.
-
Your account: until you ask us to close it. We still keep order records for the seven years above.
-
Our marketing list: until you unsubscribe. After that, we keep a note of your email address so we don't email you again by mistake.
-
Emails and enquiries: two years.
-
Google Analytics data: up to 14 months after your last visit.
-
Customer Match lists: until you unsubscribe, and no longer than the membership period we set in Google Ads.
-
Published reviews: for as long as they're shown on our site.
When we no longer need information, we delete it or make it anonymous.
Keeping your information safe
- Shannon is the only person with access to customer information.
- Two-step verification is on for our Shopify and Google accounts.
- Our website and checkout use encrypted connections, and card payments are processed to the Payment Card Industry Data Security Standard (PCI DSS).
- We use well-established service providers with their own security programmes.
No system is completely secure. If a privacy breach happens that's likely to cause serious harm, we'll tell you and the Office of the Privacy Commissioner as soon as we can.
Seeing and correcting your information
You can ask to see the personal information we hold about you, and ask us to correct it if it's wrong. Email hello@sevenscents.co.nz or write to us at the studio. We'll respond as soon as we can, and within 20 working days. There's no charge. We may need to check who you are first, so that we only ever give your information to you.
If we don't agree to make a correction, you can ask us to attach a note to your information showing the correction you asked for.
You can also ask us to close your account or delete information we no longer need to keep.
Complaints
If you're worried about how we've handled your personal information, please talk to us first. Email Shannon at hello@sevenscents.co.nz and we'll work with you to put it right.
If you're not happy with our response, you can complain to the Office of the Privacy Commissioner.
If you're outside New Zealand
We're a New Zealand business, and we handle everyone's information in line with this policy and the New Zealand Privacy Act.
Australia: if you have a concern, please contact us first. You can also contact the Office of the Australian Information Commissioner.
EU, EEA and UK: we use non-essential cookies and send marketing emails only with your consent, and you can withdraw it at any time. We use your other information to fulfil your orders, meet our legal obligations and run our business. You can ask us to access, correct, delete or transfer your information, or to restrict or object to how we use it. You also have the right to complain to your local data protection authority.
As we start selling to more countries, we'll update this policy.
Children
Our website isn't aimed at children. If you're under 16, please ask a parent or guardian to help you with any order or sign-up.
Links to other websites
Our website links to other sites, such as payment providers and social media. Once you leave our site, their privacy policies apply rather than ours, so it's worth reading them.
Changes to this policy
We'll update this policy when the way we collect or use information changes. The "last updated" date at the top shows when it was last revised. If we make a significant change, we'll make that clear on this page.
Any questions? Email Shannon at hello@sevenscents.co.nz - we're always happy to help.