Privacy Policy

This Privacy Policy describes how Heke Design collects, uses and discloses your personal information when you visit or make a purchase from our website, hekedesign.com.

As a boutique brand operating from Waiheke Island, New Zealand, we are committed to protecting your privacy and handling your data with care, transparency and respect for your rights as a consumer.

Our commitment to the New Zealand Privacy Act 2020

We manage all personal data in strict compliance with the New Zealand Privacy Act 2020 and its Information Privacy Principles. This policy also outlines how we respect the rights of our global community under international data protection frameworks where applicable.

Collecting personal information

When you interact with our online store, we collect specific details necessary to deliver our circular fashion pieces, optimise your browsing experience and communicate updates about our collections.

Device information

Purpose of collection: To load our online store accurately, manage regional preferences and perform analytics on website usage to optimise your shopping experience.

Source of collection: Collected automatically when you access our site using essential cookies, log files, and web pixels.

Disclosures for a business purpose: Shared securely with our core website hosting platform, Shopify.

Personal information collected: Web browser version, internet protocol address, time zone, cookie identifiers, viewed items, search terms and general site interaction behaviour.

Order information

Purpose of collection: To process secure payments, fulfil orders for our upcycled denim and made-to-order merino garments, arrange local or international shipping, provide tax invoices, and offer order tracking updates. We also use this data to screen orders for potential fraud and to send you marketing updates if you have given explicit consent.

Source of collection: Provided directly by you during the checkout process.

Disclosures for a business purpose: Shared with our platform processor Shopify, secure payment gateways, and delivery partners such as New Zealand Post to facilitate fulfilment.

Personal information collected: Full name, billing address, delivery address, payment card details, email address and mobile phone number.

Customer support information

Purpose of collection: To assist you with sizing enquiries, modifications to made-to-order garments, or shipping updates.

Source of collection: Provided directly by you when you contact us via email.

Disclosures for a business purpose: Used internally by our customer care team to resolve your specific requests.

Personal information collected: Communication history, name, email address and any additional details provided to resolve your enquiry.

Sharing personal information

We only share personal information with trusted service providers who allow us to operate our business and fulfil our agreements with you.

Core digital infrastructure

We use Shopify to power our online store, ensuring a secure checkout infrastructure. We also integrate Klaviyo to manage our email communications, keeping you updated on limited colour drops and subscriber previews if you have joined our newsletter list.

Legal and compliance requirements

We may share personal information if required to comply with applicable laws, respond to lawful requests for information from regulatory bodies, or protect our legal rights.

Behavioural marketing and communication

If you opt into our newsletter or complete a purchase, we may use your personal information to provide tailored updates or marketing communications that highlight our sustainable design practices.

Analytical tools

We utilise performance tools to understand how our community interacts with our website. This data helps us improve navigation and highlight the circular denim and merino collections our audience interacts with most frequently.

Managing marketing choices

You can choose to leave our newsletter list at any time. Every marketing email sent via Klaviyo features an unsubscribe link at the footer of the message.

Data storage and retention

When you place an order for a tailored poncho or patchwork jeans through our website, we maintain your order information for our operational records. We retain this data securely until you ask us to remove it.

International data operations

Because our digital ecosystem relies on global infrastructure like Shopify and Klaviyo, personal data may be securely transferred and stored outside of New Zealand, including in Canada, Australia and the United States. These transfers are governed by robust data security protocols to keep your details safe.

Your rights under New Zealand law

Under the Privacy Act 2020, you hold definitive rights over your personal data.

Access and correction

You have the right to request a complete copy of the personal information we hold about you at any time. If you notice any inaccuracies, you have the right to request immediate corrections or updates.

Erasure and removal

You can request that we permanently delete your personal records, including your profile within our newsletter lists or order history, provided the data is no longer legally required for taxation or anti-fraud reporting.

To exercise any of these rights, please contact our privacy manager by sending an email to hekedesignsales@gmail.com, or write to our studio address at 79 Ocean Road, Surfdale, Waiheke Island 1081, New Zealand.

Managing browser cookies

Cookies are small data files downloaded to your device to improve functionality and monitor site performance.

Essential and functional cookies

These allow the core shopping cart architecture to operate, remember your chosen country currency, and maintain secure checkout sessions as you move between pages.

Analytical and advertising cookies

These help us measure site traffic patterns and review the performance of our sustainable fashion stories.

Controlling settings

You can adjust your personal browser preferences to reject or block cookies. Please note that blocking essential cookies may prevent you from using certain interactive features on our store, such as the cart function and checkout sequence.

Updates to this policy

We review and update this privacy policy periodically to reflect changes in our operational procedures, digital platform updates, or evolving legal frameworks in New Zealand.

Last updated: July 2026