Privacy policy

Last updated: 9 August 2026

Stro Limited (“Stro”, “we”, “us” or “our”) operates this website and store, including the related information, content, features, products and services we make available through strocollective.com (collectively, the “Services”).

Stro Limited is a New Zealand company. We are committed to protecting your privacy and handling personal information in accordance with the New Zealand Privacy Act 2020 and other privacy and data protection laws that apply to us.

Our online store is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy explains how we collect, use, store and disclose your personal information when you visit or use our website, purchase or use our products or Services, sign up to hear from us, or otherwise communicate with us.

If there is a conflict between our Terms of Service and this Privacy Policy regarding the collection, use, processing or disclosure of personal information, this Privacy Policy will apply.

Personal Information We Collect or Process

When we use the term “personal information”, we mean information that identifies you or can reasonably be linked to you. It does not generally include information that has been anonymised or de-identified so that it can no longer reasonably identify you.

Depending on how you interact with Stro, where you live and the Services you use, we may collect or process the following categories of personal information:

• Contact information, including your name, email address, phone number, billing address and shipping address.
• Order and transaction information, including products you view, add to your cart or purchase, your order history, returns, exchanges, cancellations, payment status and delivery information.
• Payment information required to process your purchase. Payments may be processed by Shopify and other payment providers. Stro does not necessarily receive or store your complete payment card details.
• Account information, if customer accounts are available, including login details, account settings and preferences.
• Communications with us, including information you provide when contacting us with questions, feedback, requests or customer support enquiries.
• Device and technical information, including information about your device, browser and network connection, your IP address and other online identifiers.
• Usage information, including information about how and when you interact with our website and Services, pages or products you view, and how you navigate the website.
• Marketing and communication preferences, including whether you have chosen to receive marketing or promotional communications from us.
• Other information you choose to provide to us when interacting with Stro.

We aim to collect only personal information that is reasonably necessary for our business and the purposes described in this Privacy Policy.

How We Collect Personal Information

We may collect personal information:

• directly from you, including when you place an order, create an account, subscribe to updates, complete a form, contact us or otherwise use the Services;
• automatically through the Services, including through cookies and similar technologies when you visit or interact with our website;
• from Shopify and our service providers, where they collect or process information in connection with providing services to us;
• from business, marketing or advertising partners, where applicable; and
• from other third parties, where permitted by law.

Where we collect personal information about you from someone other than you, we will take reasonable steps to make you aware of that collection where required by the New Zealand Privacy Act 2020 or other applicable law, unless an exception applies.

How We Use Your Personal Information

Depending on how you interact with Stro, we may use personal information for the following purposes.

Providing and Fulfilling the Services

We may use your personal information to:

• process payments and transactions;
• process and fulfil orders;
• arrange shipping and delivery;
• provide order confirmations and updates;
• facilitate returns, exchanges and refunds;
• maintain and manage customer accounts where available;
• remember your preferences;
• provide customer support; and
• otherwise provide the products and Services you request.

Improving Stro and Our Services

We may use information to understand how customers use our website and Services, improve our products and customer experience, troubleshoot issues, analyse website performance and develop or improve our business.

Communicating With You

We may use your information to respond to enquiries, provide customer support and communicate with you about your account, orders, purchases, deliveries or other interactions with Stro.

Marketing and Advertising

Where you have consented or where otherwise permitted by applicable law, we may use your personal information to:

• send marketing, product updates, launch announcements, offers and promotional communications;
• understand the effectiveness of our marketing;
• personalise aspects of your experience; and
• display or measure advertising, including advertising on third-party platforms.

Depending on the technologies and services we use, advertising may be based on your interactions with Stro or other online activity, where permitted by law.

You can opt out of our marketing emails at any time by using the unsubscribe link contained in those emails.

Opting out of marketing does not prevent us from sending necessary non-promotional communications, such as order confirmations, shipping updates or messages relating to customer support.

Security and Fraud Prevention

We may use personal information to maintain the security of our website, transactions, customers and business, including to authenticate accounts, detect and prevent fraud and investigate potentially fraudulent, illegal, unsafe or malicious activity.

Legal and Regulatory Purposes

We may use, retain or disclose personal information where reasonably necessary to:

• comply with applicable laws, regulations and legal processes;
• respond to lawful requests from courts, regulators, law enforcement or government agencies;
• investigate or respond to potential or actual legal proceedings;
• enforce our agreements, terms or policies; and
• establish, exercise or defend our legal rights or the rights of others.

Cookies and Similar Technologies

Our website and the services we use may use cookies, pixels and similar technologies.

These technologies may be used to:

• operate essential website and checkout functions;
• remember your preferences;
• understand how visitors use our website;
• analyse website traffic and performance;
• improve our Services;
• measure the effectiveness of marketing; and
• where enabled and permitted by law, personalise advertising or marketing.

Some cookies are necessary for our website and checkout to function. Others may be optional depending on your location, applicable law and our website configuration.

Where required, you may be given the ability to manage certain cookie or privacy preferences through our website.

You can also control certain cookies through your browser settings. Disabling cookies may affect the functionality of parts of our website.

How We Disclose Personal Information

We do not disclose personal information except where reasonably necessary for our business, where you direct or consent to the disclosure, or where permitted or required by law.

We may disclose personal information to:

• Shopify, which provides our ecommerce platform and related services;
• payment processors and financial service providers involved in processing transactions;
• shipping, logistics, warehouse and fulfilment providers involved in delivering products to you;
• IT, website, hosting and cloud service providers;
• analytics providers;
• customer support providers;
• email, communication and marketing providers;
• advertising and business partners, where applicable and permitted by law;
• professional advisers, including accountants, lawyers, insurers and other advisers;
• our affiliates or companies within our corporate group, where applicable; and
• government agencies, regulators, courts or law enforcement authorities where permitted or required by law.

We may also disclose personal information in connection with a proposed or completed merger, acquisition, financing, reorganisation, sale of assets or other business transaction.

Where appropriate, we require service providers acting on our behalf to handle personal information securely and only for authorised purposes.

Personalised Advertising, Sale and Sharing of Personal Information

Certain privacy laws use specific definitions of terms such as “sale”, “sharing” or “targeted advertising” that may include some disclosures of personal information for advertising purposes even where no money changes hands.

Depending on where you live and the technologies we use, you may have the right to opt out of certain uses or disclosures of your personal information for targeted advertising, cross-context behavioural advertising, or activities legally defined as the sale or sharing of personal information.

Where applicable, we will provide mechanisms required by law to allow you to exercise these choices.

Relationship With Shopify

Our online store is hosted and powered by Shopify.

Shopify collects and processes personal information about your access to and use of our store in order to provide its ecommerce, payment, security and related services.

Information you submit through our Services may therefore be transmitted to and processed by Shopify and its service providers, including in countries other than the country in which you live.

Shopify may also process certain personal information for its own purposes as described in its applicable privacy policies and notices.

You can learn more about how Shopify handles customer personal information through the Shopify Consumer Privacy Policy and Shopify Privacy Portal.

International Processing and Transfers

Stro is based in New Zealand, but some of our service providers, including Shopify and its service providers, operate internationally.

As a result, your personal information may be transferred to, stored in or processed in countries outside New Zealand or outside the country in which you live.

Where the New Zealand Privacy Act 2020 requires safeguards in relation to disclosures of personal information outside New Zealand, we will take reasonable steps to ensure appropriate privacy protections are in place or rely on another permitted basis for the disclosure.

Where other applicable privacy or data protection laws impose additional requirements on international transfers, we will take reasonable steps to comply with those requirements. This may include the use of recognised contractual safeguards or other approved transfer mechanisms where required.

Security of Your Personal Information

We take reasonable steps to protect personal information we hold against loss, unauthorised access, use, modification, disclosure or other misuse.

We also use third-party providers, including Shopify, that maintain their own technical and organisational security measures.

However, no method of electronic transmission or storage can be guaranteed to be completely secure. You should take reasonable care when transmitting sensitive information online and protect any account credentials you use.

If we become aware of a privacy breach that has caused, or is likely to cause, serious harm, we will notify affected individuals and the New Zealand Privacy Commissioner where required by the New Zealand Privacy Act 2020.

We will also comply with applicable breach-notification requirements in other jurisdictions where required.

Retention of Personal Information

We keep personal information only for as long as reasonably necessary for the purposes for which it was collected or for legitimate business or legal purposes.

This may include retaining information where necessary to:

• provide our Services;
• maintain customer and transaction records;
• fulfil accounting, tax or regulatory requirements;
• resolve complaints or disputes;
• prevent fraud; and
• establish, exercise or defend legal rights.

The length of time we retain information will depend on the type of information, why we collected it and any applicable legal requirements.

When personal information is no longer reasonably required, we may securely delete or de-identify it where appropriate.

Your Privacy Rights and Choices

Your privacy rights may vary depending on where you live.

New Zealand

If you are in New Zealand, the New Zealand Privacy Act 2020 gives you rights in relation to personal information we hold about you.

You may:

• ask us to confirm whether we hold personal information about you;
• request access to personal information we hold about you; and
• ask us to correct personal information that you believe is inaccurate, incomplete or misleading.

If we do not make a correction you request, you may have the right to ask us to attach a statement of the correction sought to the relevant information.

Other Countries and Regions

Depending on where you live and the laws that apply, you may have additional rights in relation to your personal information.

These may include rights to:

• request access to or information about personal information we hold or process about you;
• request correction of inaccurate personal information;
• request deletion of certain personal information;
• restrict or object to certain processing;
• withdraw consent where processing is based on consent;
• receive certain personal information in a portable format;
• opt out of certain targeted advertising or uses legally defined as the sale or sharing of personal information; and
• lodge a complaint with an appropriate privacy or data protection authority.

These rights are not absolute and may apply only in certain circumstances or be subject to exceptions under applicable law.

Exercising Your Rights

You can exercise an applicable privacy right by contacting our Privacy Officer at:

privacy@strocollective.com

We may need to take reasonable steps to verify your identity before responding to a request. Where permitted by applicable law, an authorised representative may also make a request on your behalf.

We will not discriminate against you for exercising privacy rights available to you under applicable law.

We will respond to valid requests within the timeframe required by applicable law.

Communication Preferences

If you receive promotional emails from Stro, you can opt out at any time using the unsubscribe link included in the email.

Even if you unsubscribe from marketing, we may still send you communications that are necessary to provide the Services, such as information about your account, orders, payments, deliveries, returns or customer service enquiries.

Children’s Privacy

Our products and Services are intended for adults and are not directed at children.

We do not knowingly collect personal information from children for the purpose of marketing or selling Stro products directly to them.

If you are a parent or guardian and believe that a child has provided personal information to us in circumstances where they should not have done so, please contact our Privacy Officer at privacy@strocollective.com.

Where applicable law provides additional protections relating to children’s personal information, we will comply with those requirements.

Third-Party Websites and Services

Our Services may contain links to websites, social media platforms or other services operated by third parties.

When you leave our website or interact with a third-party service, that third party’s own privacy policies and practices will apply.

We are not responsible for the privacy, security, accuracy or content of third-party websites or services that we do not control.

We encourage you to review the relevant privacy information before providing personal information to a third party.

Complaints

If you have a question or complaint about how we have handled your personal information, please contact our Privacy Officer at:

privacy@strocollective.com

We will take reasonable steps to investigate and respond to your concern.

If you are in New Zealand and are not satisfied with our response, you may also be able to make a complaint to the Office of the Privacy Commissioner of New Zealand.

If you live outside New Zealand, you may also have the right to lodge a complaint with the privacy or data protection authority responsible for your jurisdiction.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our business, Services, technologies, privacy practices or legal and regulatory requirements.

When we update this Privacy Policy, we will post the revised version on our website and update the “Last updated” date above.

Where required by applicable law, we will provide additional notice of material changes.

Contact Us

If you have questions about this Privacy Policy, would like to exercise a privacy right, or have a concern about how we handle personal information, please contact:

Privacy Officer
Stro Limited
Auckland, New Zealand
privacy@strocollective.com
strocollective.com