PRIVACY POLICY

This Privacy Policy explains how calmamm.com (“we”, “us” or “our”) collects, uses, stores and shares your personal information when you visit our website, make a purchase or otherwise interact with us.

We are committed to handling personal information responsibly and, where applicable, in accordance with the New Zealand Privacy Act 2020.

PERSONAL INFORMATION WE COLLECT

When you visit our website, we may automatically collect certain information about your device, including:

• Your web browser;

• IP address;

• Time zone;

• Device information;

• Cookies stored on your device;

• Pages and products you view;

• Websites or search terms that referred you to our website; and

• Information about how you browse and interact with our website.

We refer to this information as “Device Information.”

We may collect Device Information using technologies including:

Cookies

Cookies are small data files stored on your device or computer. They often include an anonymous unique identifier and help websites remember information about your visit.

You can control or disable cookies through your browser settings. Please note that disabling certain cookies may affect how some parts of our website function.

Log Files

Log files track activity occurring on our website and may collect information including your IP address, browser type, internet service provider, referring and exit pages, and date and time information.

Web Beacons, Tags and Pixels

Web beacons, tags and pixels are electronic technologies that may be used to record information about how you browse and interact with our website.

ORDER INFORMATION

When you make, or attempt to make, a purchase through our website, we may collect information including:

• Your name;

• Billing address;

• Shipping address;

• Email address;

• Telephone number;

• Order details; and

• Payment-related information required to process your transaction.

Payments may be processed by third-party payment providers such as credit card processors, PayPal or other payment services available at checkout.

We generally do not directly store complete credit card details where payment information is securely processed by our payment service providers.

In this Privacy Policy, “Personal Information” refers to Device Information, Order Information and any other information that identifies or relates to an identifiable individual.

HOW WE USE YOUR PERSONAL INFORMATION

We generally use Order Information to process and fulfil orders placed through our website, including:

• Processing payments;

• Arranging shipping and delivery;

• Providing invoices and order confirmations;

• Sending order and delivery updates;

• Communicating with you;

• Providing customer support;

• Checking orders for potential risk, fraud or unauthorised activity; and

• Providing information or marketing communications where you have agreed to receive them.

We may provide relevant order information to suppliers, fulfilment partners, warehouses and delivery providers where necessary to process and deliver your order.

This may include information such as:

• Your name;

• Shipping address;

• Contact information; and

• Products included in your order.

Different fulfilment providers or warehouses may be used depending on the products ordered, stock availability and delivery destination.

If you would like further information about how your order information has been handled, you can contact us at service@calmamm.com.

We may use Device Information to:

• Identify potential fraud or security risks;

• Improve and optimise our website;

• Understand how customers browse and interact with our website;

• Analyse website performance;

• Measure the effectiveness of advertising and marketing campaigns; and

• Provide a better and more relevant shopping experience.

CURRENCY AND LOCATION INFORMATION

Our website may use your IP address or approximate location to display prices in a relevant local currency.

For customers browsing from New Zealand, prices may be displayed in New Zealand dollars (NZD/NZ$) where this feature is available.

A temporary browser cookie may be used to remember your selected currency while you browse the website.

TEXT MARKETING AND NOTIFICATIONS

Where available, you may choose to receive SMS or text message notifications from us.

By voluntarily providing your mobile number through an SMS subscription form, marketing sign-up feature or other clearly identified opt-in method, you agree that we may send you relevant SMS communications.

These communications may include:

• Order notifications;

• Delivery updates;

• Abandoned checkout reminders; and

• Promotional or marketing offers where you have agreed to receive them.

Consent to receive marketing messages is not a condition of making a purchase.

We aim to send no more than 6 promotional SMS messages per month unless otherwise stated when you subscribe.

Standard message and data charges imposed by your mobile provider may apply.

How to Unsubscribe from SMS Marketing

You can stop receiving marketing SMS messages at any time by:

• Replying STOP to a marketing message where this option is available; or

• Using any unsubscribe method provided in the message.

For assistance, you may reply HELP where this function is supported or contact us at service@calmamm.com.

Transactional messages that are necessary to provide information about an existing order may still be sent where permitted by law.

SHARING YOUR PERSONAL INFORMATION

We may share Personal Information with trusted third parties that help us operate our website, process orders and provide our services.

These may include:

• Shopify;

• Payment processors;

• PayPal;

• Shipping and courier providers;

• Warehouses and fulfilment partners;

• Analytics providers;

• Advertising platforms;

• Email and SMS service providers; and

• Customer service providers.

Shopify

Our online store may be hosted or supported by Shopify.

Shopify may process Personal Information in connection with operating our online store, checkout and related ecommerce services.

You can review Shopify’s privacy information on Shopify’s official website.

Google Analytics

We may use Google Analytics or similar analytics services to understand how visitors use our website.

These services may collect information about your device, browsing behaviour and interactions with the website.

You may be able to control Google Analytics through your browser, cookie settings or Google’s available opt-out tools.

DISCLOSURE OUTSIDE NEW ZEALAND

Some of our service providers, technology providers, fulfilment partners or business partners may be located outside New Zealand.

As a result, Personal Information may be stored or processed in countries other than New Zealand.

Where the New Zealand Privacy Act 2020 applies, we will take reasonable steps to ensure that overseas disclosures of Personal Information are handled in accordance with applicable privacy requirements.

Depending on the circumstances, overseas recipients may be required to provide privacy safeguards that are comparable to those available under New Zealand law.

LEGAL DISCLOSURES

We may disclose Personal Information where reasonably necessary to:

• Comply with applicable laws or regulations;

• Respond to lawful requests from courts, regulators or government authorities;

• Prevent or investigate fraud or unlawful activity;

• Protect the security of our website;

• Enforce our rights; or

• Protect the rights, property or safety of our customers, business or others.

BEHAVIOURAL AND TARGETED ADVERTISING

We may use information about how you interact with our website to provide advertising or marketing that may be more relevant to you.

This may involve advertising services provided by platforms such as:

• Meta/Facebook;

• Google; and

• Microsoft/Bing.

These services may use cookies, pixels and similar technologies to understand your interactions with websites and advertisements.

You may be able to manage personalised advertising through the privacy or advertising settings provided by the relevant platform.

You may also manage certain advertising and tracking cookies through your browser or cookie preferences.

DO NOT TRACK

Some browsers provide a “Do Not Track” signal.

Because there is currently no universally adopted standard for responding to these signals, our website may not automatically change its data collection practices when a Do Not Track signal is detected.

You may still manage cookies and other tracking technologies through your browser settings or any cookie preference tools available on our website.

YOUR PRIVACY RIGHTS IN NEW ZEALAND

If the New Zealand Privacy Act 2020 applies to your Personal Information, you may have the right to:

• Ask whether we hold Personal Information about you;

• Request access to Personal Information we hold about you; and

• Ask us to correct Personal Information that you believe is inaccurate, incomplete, out of date or misleading.

If we do not make a requested correction, you may have the right to ask us to attach a statement of correction to the relevant information in accordance with applicable New Zealand privacy law.

To make an access or correction request, please contact:

Email: service@calmamm.com

We may need to verify your identity before providing access to or making changes to Personal Information.

DATA RETENTION

We retain Personal Information only for as long as reasonably necessary for the purposes for which it was collected, including to:

• Process and maintain records of your orders;

• Provide customer service;

• Meet accounting, tax or regulatory requirements;

• Resolve disputes;

• Prevent fraud; and

• Comply with legal obligations.

We will securely delete, anonymise or otherwise dispose of Personal Information when it is no longer reasonably required, subject to any legal or legitimate business requirements that require us to retain it.

DATA SECURITY

We take reasonable technical and organisational measures to help protect Personal Information against:

• Loss;

• Unauthorised access;

• Misuse;

• Disclosure;

• Alteration; and

• Destruction.

However, no internet transmission, electronic storage system or online service can be guaranteed to be completely secure.

PRIVACY BREACHES

If we become aware of a privacy breach involving Personal Information, we will assess the incident and take appropriate steps.

Where required under the New Zealand Privacy Act 2020, we will notify the Office of the Privacy Commissioner and affected individuals if a privacy breach is likely to cause serious harm.

CHILDREN AND MINORS

Our website is not intended for individuals under the age of 17.

We do not knowingly seek to collect Personal Information from children through our website for the purpose of selling products directly to them.

If you believe that a child has provided Personal Information to us inappropriately, please contact us at service@calmamm.com.

CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect:

• Changes to our business practices;

• Changes to the services we use;

• Operational requirements; or

• Changes to applicable legal or regulatory requirements.

The latest version of this Privacy Policy will be published on our website.

We encourage you to review this page periodically for updates.

CONTACT US

If you have questions about this Privacy Policy, would like to make a privacy request, or would like to raise a privacy concern or complaint, please contact us:

Email: service@calmamm.com

SMS MARKETING TERMS

Where we provide an SMS marketing service, the following terms apply.

By voluntarily subscribing to SMS marketing through our website, you agree to receive text notifications and marketing communications in accordance with the consent you provide.

Messages may include:

• Order-related notifications;

• Abandoned checkout reminders;

• Promotional offers;

• Product information; and

• Other marketing communications.

Your consent to receive marketing SMS messages is not required in order to make a purchase.

Your telephone number, name and relevant order information may be processed by our SMS service provider and telecommunications providers where necessary to deliver messages.

We only provide the information reasonably necessary to operate the SMS service.

You can withdraw your consent to marketing messages at any time by replying STOP, using an unsubscribe option provided in the message or contacting us at service@calmamm.com.

Where supported, you may reply HELP for assistance.

Message and data rates charged by your mobile network provider may apply.

THIRD-PARTY PAYMENT PROVIDERS

Where third-party payment methods are offered at checkout, we may provide relevant contact, order and payment-related information to the payment provider so that it can:

• Process your transaction;

• Assess whether its payment method is available to you;

• Prevent fraud; and

• Provide its payment services.

Any Personal Information submitted to a third-party payment provider will also be handled in accordance with that provider’s own privacy policy.

This may include providers such as PayPal, Klarna or other payment methods displayed at checkout.

If a particular payment method is not offered to you at checkout, the corresponding provider may not receive your Personal Information for that transaction.