Privacy policy

Privacy Policy

Last updated: 27 October 2026

RITU RANI respects your privacy. This policy explains what personal information we collect when you visit wishascentltd.shop or place an order, why we use it, who we share it with, and the choices you have under the Privacy Act 2020.

Who is responsible for your data

The agency responsible for your information is RITU RANI, 49 Arapuni Street, Waikato, Putāruru 3411, New Zealand. Questions about privacy can be sent to info@wishascentltd.shop or by phone on +64 22 167 4938.

What we collect

Order and account data: name, delivery and billing address, email address, phone number, order history and correspondence with us.
Payment data: payment is handled by our payment providers. We receive confirmation of payment and the last digits of the card used, but we do not store full card numbers.
Technical data: IP address, device and browser type, pages viewed and the site you arrived from, collected through cookies and similar technologies.
Marketing data: your email address and subscription preferences if you sign up for our newsletter.

Why we use it

We use personal information to process and deliver your order, to handle payments, returns and warranty claims, to answer your questions, to keep our records accurate, to prevent fraud and misuse, to meet legal obligations such as tax and accounting rules, and, only with your consent, to send marketing emails.

Cookies

We use strictly necessary cookies to run the cart and checkout, and analytics cookies to understand how the store is used. You can block or delete cookies in your browser settings; blocking necessary cookies may prevent checkout from working. Marketing cookies are only set with your consent where the law requires it.

Who we share data with

We share information only where necessary: with Shopify as our hosting and e-commerce platform, with payment providers, with couriers that deliver your parcel, with email and analytics providers, and with our accountant or tax adviser where legally required. These parties process data on our instructions or as independent businesses under their own terms. We do not sell personal information.

Your privacy rights

Under the Privacy Act 2020 you have the right to ask for access to the personal information we hold about you, to ask us to correct it if it is wrong, and to ask questions about how we handle it. To make a request, email info@wishascentltd.shop with the subject line "Privacy request"; we verify your identity and respond within 20 working days. If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.

Overseas storage

Our store platform and some service providers store data outside New Zealand, including in the United States. Where information is sent overseas we take reasonable steps to ensure it is protected by safeguards comparable to the Privacy Act 2020.

How long we keep data

Order and invoice records are kept for at least seven years to meet tax and accounting requirements. Customer service correspondence is kept for up to two years after the last contact. Newsletter data is kept until you unsubscribe. Analytics data is kept in aggregated form for up to 26 months.

Children

Our store is not directed at children under 16 and we do not knowingly collect their personal information. If you believe a child has provided information to us, contact us and we will delete it.

Security

The store runs on Shopify's encrypted platform and checkout is protected by TLS. Access to customer data is limited to the people who need it to process orders and support requests. If a data breach is likely to cause serious harm, we will notify you and the Privacy Commissioner as required by the Privacy Act 2020.