Last updated: 17 October 2026
At Vinyl Kitchen, we respect your privacy and are committed to protecting your personal information.
This Privacy Policy explains how we collect, use, store and share personal information when you visit our website, make a purchase, join our loyalty programme, subscribe to marketing communications or otherwise interact with us.
Vinyl Kitchen is a New Zealand-based online retailer specialising in second-hand physical media, including DVDs, Blu-rays, CDs, vinyl records, books and other collectables.
Our website is www.vinylkitchen.co.nz and is powered by Shopify.
We handle personal information in accordance with the New Zealand Privacy Act 2020 and other applicable privacy and data protection laws.
By using our website, you acknowledge that your personal information will be handled as described in this policy. Where consent is required by law, we will seek that consent separately.
Depending on how you interact with Vinyl Kitchen, we may collect the following information:
Personal and contact information
Your name
Email address
Telephone number
Billing and delivery addresses
Order and transaction information
Products purchased
Order history and transaction details
Payment status and payment confirmation
Delivery and tracking information
Returns, refunds and customer service enquiries
Customer account and loyalty information
Customer account details
Purchase history
Loyalty points earned and redeemed
Available rewards and reward activity
Relevant customer preferences and communications
Website and device information
IP address
Browser and device information
Website pages visited
Products viewed
Shopping cart activity
Website usage and interaction data
Cookie and similar tracking information
Communications
We may retain information you provide when contacting us by email, through website forms or through other customer service channels.
We collect only information reasonably necessary for operating our business, providing our services and fulfilling other purposes described in this policy.
We use personal information for the following purposes:
Processing payments and fulfilling customer orders.
Arranging delivery and providing shipment tracking.
Communicating about purchases, returns and refunds.
Providing customer support and resolving enquiries.
Managing customer accounts and loyalty rewards.
Sending marketing communications where permitted.
Improving our website, services and shopping experience.
Understanding website traffic and customer behaviour.
Detecting fraud, preventing misuse and maintaining website security.
Maintaining business and financial records.
Complying with legal and regulatory obligations.
We do not use personal information for purposes unrelated to those described in this policy unless permitted by law or authorised by the individual concerned.
Payments on our website are processed through supported payment providers, including Shopify Payments and PayPal.
These providers securely process payment information in accordance with their own privacy and security practices.
Vinyl Kitchen receives relevant transaction details, payment confirmations and information necessary to fulfil orders and manage refunds.
We do not ordinarily receive or store customers' complete credit card numbers or card security codes.
Payment providers may independently collect and process personal information as described in their respective privacy policies.
To fulfil orders, we may share necessary delivery information with shipping and fulfilment providers, including NZ Post and GoSweetSpot.
This information may include:
Customer name
Delivery address
Contact information where required
Parcel and order details
Information required for international customs declarations
For international deliveries, relevant information may also be provided to overseas postal operators, courier companies and customs authorities where required to deliver the order or comply with applicable laws.
Vinyl Kitchen operates a customer loyalty programme using Appstle.
Where customers participate in the programme, personal information may be processed to:
Maintain loyalty accounts.
Calculate and award points.
Record points redemptions.
Manage loyalty rewards.
Send relevant loyalty notifications and account communications.
Investigate loyalty account enquiries or discrepancies.
The information processed may include customer contact details, purchase history and loyalty activity.
Information is shared with our loyalty programme provider as necessary to operate these features.
Customers may receive transactional emails relating to orders, deliveries, returns, account activity or loyalty programme participation.
Where permitted by applicable law, we may also send promotional communications, including:
New arrivals and product announcements.
Special offers and promotions.
Store news and updates.
Loyalty programme information and rewards.
Marketing communications may be sent through Shopify or other email service providers acting on our behalf.
Customers may unsubscribe from promotional emails at any time using the unsubscribe link provided in those messages or by contacting us directly.
Unsubscribing from promotional communications does not prevent us from sending essential messages relating to existing orders, customer accounts or other necessary business transactions.
We handle electronic marketing in accordance with applicable requirements, including New Zealand's Unsolicited Electronic Messages Act 2007.
Our website uses cookies, pixels and similar technologies to support website functionality, understand customer activity and improve our services.
These technologies may be used for:
Maintaining shopping carts and customer sessions.
Remembering website preferences.
Understanding website performance and visitor activity.
Measuring advertising effectiveness.
Supporting relevant advertising and marketing.
Detecting suspicious activity and protecting our website.
We use Shopify's ecommerce platform and may use associated analytics and advertising technologies, including tools provided by Meta (Facebook and Instagram).
Some third-party providers may collect information through their own technologies, subject to applicable privacy requirements.
Where required by law, we seek consent before using non-essential cookies or similar tracking technologies.
Visitors can manage available cookie preferences through the consent controls provided on our website, where applicable, and through their browser settings.
Disabling certain cookies may affect website functionality.
More information about Shopify's cookies is available at:
https://www.shopify.com/legal/cookies
We may disclose personal information to trusted third-party providers where reasonably necessary for operating our business.
These may include:
Shopify, for ecommerce services, customer accounts, order management and website operations.
Shopify Payments and PayPal, for payment processing.
NZ Post and GoSweetSpot, for shipping and delivery services.
Appstle, for loyalty programme administration.
Email service providers, for customer notifications and marketing communications.
Analytics and advertising providers, including Meta, where used.
Technology, hosting and security providers, for website operation and fraud prevention.
Professional advisers and relevant authorities, where required or permitted by law.
We limit information sharing to what is reasonably necessary for the relevant purpose.
Some service providers may process personal information under their own privacy policies and legal obligations.
We may also disclose information when required by law, to respond to lawful requests, protect our rights or investigate suspected fraud or unlawful activity.
Vinyl Kitchen does not sell customer contact lists or personal information to third-party data brokers.
Vinyl Kitchen operates from New Zealand but uses technology and service providers that may store or process personal information in other countries.
These countries may have privacy laws different from those in New Zealand.
Where personal information is disclosed overseas, we take reasonable steps to comply with applicable international transfer requirements, including the safeguards required by the New Zealand Privacy Act 2020.
For customers in the European Economic Area or United Kingdom, additional legal requirements may apply to international transfers and the processing of personal information.
We aim to ensure that overseas disclosures are carried out with appropriate legal protections where required.
We take reasonable steps to protect personal information against loss, unauthorised access, misuse, alteration and disclosure.
We use established ecommerce and payment service providers and appropriate account, operational and technical security measures to help protect customer information.
However, no online service or method of electronic transmission can be guaranteed to be completely secure.
We encourage customers to use secure passwords, protect their account credentials and contact us if they suspect unauthorised activity involving their account.
Where a privacy breach is notifiable under applicable law, we will notify the appropriate authorities and affected individuals as required.
We retain personal information only for as long as reasonably necessary for legitimate business purposes or as required by law.
Retention periods may depend on:
Order processing and customer service requirements.
Accounting, tax and financial recordkeeping obligations.
Customer account and loyalty programme administration.
Fraud prevention and security.
Dispute resolution and legal obligations.
When personal information is no longer required, we take reasonable steps to securely delete it or otherwise prevent it from being used to identify individuals, subject to technical and legal limitations.
Depending on your location and applicable law, you may have rights relating to your personal information.
These may include:
Access: Requesting information about the personal information we hold about you.
Correction: Requesting correction of personal information that is inaccurate or incomplete.
Deletion: Requesting deletion of personal information where applicable law provides that right.
Withdrawal of consent: Withdrawing consent for activities that depend on your consent, including certain marketing or tracking activities.
Objection or restriction: Objecting to or requesting restrictions on certain uses of personal information where applicable law provides these rights.
Data portability: Requesting a copy or transfer of certain personal information where applicable.
New Zealand customers have rights of access and correction under the Privacy Act 2020.
Customers in the European Economic Area, United Kingdom and other jurisdictions may have additional rights under their applicable privacy laws.
These rights may be subject to legal exceptions, including requirements to retain certain transaction records.
To make a privacy request, please contact sales@vinylkitchen.co.nz.
We may request reasonable information to verify your identity before responding.
We will respond within the timeframes required by applicable law.
Our website may contain links to third-party websites or services, including social media platforms, payment providers and other external websites.
These services may have their own privacy practices and policies.
We encourage customers to review those policies before providing personal information.
Vinyl Kitchen is not responsible for the independent privacy practices of third-party websites that we do not control.
Our website is intended for general retail customers and is not specifically directed towards children.
We do not knowingly collect personal information from children in circumstances that would require parental or guardian authorisation without taking the steps required by applicable law.
If you believe a child has provided personal information to us inappropriately, please contact us so we can review the matter.
If you have concerns about how Vinyl Kitchen has collected, used or handled your personal information, please contact us first.
We will investigate your concern and make reasonable efforts to resolve it.
If you are not satisfied with our response, you may have the right to complain to a relevant privacy regulator.
In New Zealand, this is the Office of the Privacy Commissioner:
Customers in other jurisdictions may have additional complaint rights through their local data protection authorities.
We may update this Privacy Policy periodically to reflect changes in our services, technology, legal obligations or privacy practices.
Any revised version will be published on our website with an updated revision date.
Where required by applicable law, we will provide additional notice or obtain consent before introducing material changes to how personal information is used.
For privacy-related enquiries, requests or complaints, please contact:
Vinyl Kitchen
Website: https://www.vinylkitchen.co.nz
Email: sales@vinylkitchen.co.nz
Location: New Zealand
Please include sufficient information for us to understand and respond to your enquiry.
