Privacy policy
Privacy Policy
Last updated: 9/7/2026
James Wellington ("we", "us", "our") operates the website jameswellington.com and all related information, content, features, tools, products and services (the "Services").
We are based in Portugal and sell to customers in New Zealand and elsewhere. This means we handle your personal information under both the New Zealand Privacy Act 2020 and the EU General Data Protection Regulation (GDPR).
This Privacy Policy explains how we collect, use, store, share and protect your personal information when you visit or use the Services, make a purchase, or contact us.
By using the Services, you acknowledge that you have read and understood this Privacy Policy.
1. Personal information we collect
"Personal information" means information about an identifiable individual. Depending on how you interact with the Services, we may collect:
- Contact details — full name, billing address, delivery address, phone number, email address.
- Payment information — payment method, transaction confirmations and details. Full card numbers are handled directly by our payment providers; we do not store them.
- Account information — username, password, preferences and settings.
- Order information — products you view, add to cart or wishlist, purchases, returns, exchanges and cancellations.
- Communications — anything you tell us when you contact us, including support enquiries.
- Device information — IP address, browser type, device identifiers and connection data.
- Usage data — how you browse and interact with the Services.
Providing this information is generally necessary to complete a purchase. If you choose not to provide it, we may be unable to supply the Services to you.
2. How we collect personal information
- Directly from you — when you create an account, place an order, browse the Services or contact us.
- Automatically — through cookies, pixels and similar technologies when you use the Services.
- From service providers — including Shopify, payment processors, and shipping and fulfilment partners acting on our behalf.
- From marketing and analytics partners, where permitted by law.
3. How we use your personal information
We use your personal information to:
- process your orders and payments, and arrange delivery;
- manage your account and provide customer support;
- handle returns, exchanges, refunds and warranty claims;
- personalise your shopping experience and recommend products;
- send you promotional communications, where you have opted in or where otherwise permitted;
- verify identity, prevent fraud, and protect the Services and our users;
- comply with our legal obligations, including tax and consumer law requirements.
Legal bases (GDPR). Where the GDPR applies, we rely on: performance of a contract (processing your order); your consent (marketing communications, non-essential cookies); our legitimate interests (fraud prevention, improving the Services, direct marketing to existing customers); and compliance with legal obligations (tax and accounting records).
You can withdraw consent or unsubscribe from marketing at any time, without affecting the lawfulness of processing carried out before withdrawal.
4. Who we share your personal information with
We do not sell your personal information. We share it with:
- Suppliers and fulfilment partners. Our products are shipped directly by third-party suppliers and manufacturers, some of which are located outside New Zealand and outside the European Union, including in China. To deliver your order, we provide these partners with the information necessary to fulfil and ship it — typically your name, delivery address, phone number and order contents.
- Shopify, which hosts the Services and processes data to operate the platform.
- Payment providers, to process your payment and detect fraud.
- Shipping and logistics providers, to deliver your order and provide tracking.
- Analytics and marketing providers, where you have consented or where otherwise permitted.
- Professional advisers, regulators and law enforcement, where required by law, to enforce our terms, or to protect our rights or the rights of others.
- A purchaser or successor, in the event of a merger, acquisition or sale of assets.
5. International transfers
Our suppliers, fulfilment partners and service providers are located in a number of countries, including outside New Zealand and the European Economic Area.
For New Zealand customers. Where we disclose your personal information to a person or entity outside New Zealand, we take reasonable steps to ensure that it will be subject to safeguards comparable to those in the Privacy Act 2020, as required by Information Privacy Principle 12. Where those safeguards cannot be established, we will seek your authorisation before disclosing your information.
For EU/EEA customers. Where we transfer personal data outside the EEA, we rely on adequacy decisions of the European Commission or on Standard Contractual Clauses, together with any additional measures required.
You may request a copy of the relevant safeguards by contacting us.
6. Cookies and tracking
We use cookies and similar technologies to operate the Services, remember your preferences, measure performance, and deliver relevant advertising. Non-essential cookies are only set with your consent, which you can manage or withdraw through our cookie banner or your browser settings.
Blocking cookies may affect how the Services function.
7. Security and retention
We take reasonable technical and organisational measures to protect your personal information against loss, misuse and unauthorised access. No system is completely secure, and we cannot guarantee absolute security.
We retain your personal information for as long as necessary for the purposes described in this Policy, and for as long as required to meet our legal obligations — including tax and accounting records, which we are required to retain for a minimum period under Portuguese law. When information is no longer required, we securely delete or anonymise it.
8. Your rights
If you are in New Zealand. Under the Privacy Act 2020 you have the right to request access to the personal information we hold about you, and to request correction of that information if it is inaccurate. We will respond to your request within 20 working days. If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner (www.privacy.org.nz).
If you are in the EU/EEA. Under the GDPR you have the right to access, correct, erase, restrict or object to the processing of your personal data; the right to data portability; and the right to withdraw consent. You also have the right to lodge a complaint with your local supervisory authority, or with the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD).
To exercise any of these rights, contact us using the details below. We may need to verify your identity before responding.
9. Children
The Services are not directed at children and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us and we will delete it.
10. Third-party websites
The Services may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to read their privacy policies.
11. Changes to this Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or in the law. The current version will always be available on our website, with the date it was last updated.
12. Contact us
James Wellington
Email: info@jameswellington.com
If you have any questions about this Privacy Policy or how we handle your personal information, please contact us.