Privacy Policy
Effective Date: 05/06/2025
AllMySins ("we," "us," "our") operated by CMP Solutions Ltd respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information.
1. Information We Collect
1.1 Information You Provide
-
Account Information: Name, email, password, date of birth
-
Billing Information: Billing address, phone number
-
Shipping Information: Delivery address, contact details
-
Communication: Email/SMS preferences, customer service interactions
-
Optional Information: Product reviews, wishlist items, preferences
1.2 Automatically Collected Information
-
Device Information: IP address, browser type, operating system
-
Usage Data: Pages visited, time spent, click patterns
-
Cookies: Session data, preferences, cart contents
-
Analytics: Google Analytics data, heatmaps, conversion tracking
-
Marketing Pixels: Facebook/Meta, Google Ads tracking
1.3 Information We Don't Collect
- We never store complete payment card details
- We don't collect biometric data
- We don't knowingly collect data from minors
2. How We Use Your Information
2.1 Order Processing
- Process and fulfill orders
- Send order confirmations and updates
- Handle returns and refunds
- Prevent fraud and verify identity
2.2 Communication
- Send transactional emails
- Provide customer support
- Send marketing emails (with consent)
- SMS updates (with consent)
- Product recommendations
2.3 Improvement and Analytics
- Analyze website usage patterns
- Improve user experience
- Develop new features
- Conduct market research
- Personalize your experience
2.4 Legal and Security
- Comply with legal obligations
- Protect against fraud
- Enforce our terms and policies
- Resolve disputes
3. Information Sharing
3.1 Service Providers
We share information with trusted partners:
-
Shopify: E-commerce platform and hosting
-
Windcave: Secure payment processing
-
Shipping Partners: Australia Post, DHL
-
Marketing Tools: Mailchimp, Klaviyo
-
Analytics: Google Analytics, Hotjar
-
Customer Service: Zendesk
3.2 Legal Requirements
We may disclose information when required by:
- Court orders or subpoenas
- Government requests
- Law enforcement investigations
- Protection of our legal rights
3.3 Business Transfers
In case of merger, acquisition, or sale, customer information may be transferred to the new entity.
3.4 What We Don't Do
- We never sell your personal data
- We don't share with unaffiliated third parties for their marketing
- We don't share sensitive purchase history publicly
4. Data Security
4.1 Technical Measures
- SSL encryption for all data transmission
- Secure servers with regular updates
- PCI-DSS compliant payment processing
- Regular security audits
- Limited access controls
4.2 Organizational Measures
- Employee confidentiality agreements
- Regular security training
- Access on need-to-know basis
- Incident response procedures
5. Your Privacy Rights
5.1 Access and Control
You have the right to:
- Access your personal information
- Correct inaccurate data
- Delete your account and data
- Export your data
- Opt-out of marketing
- Restrict processing
5.2 How to Exercise Rights
- Log into your account settings
- Email info@allmysins.co.nz
- Call our privacy hotline
- Response within 30 days
6. Cookies and Tracking
6.1 Types of Cookies
-
Essential: Required for site function
-
Analytics: Help us understand usage
-
Marketing: Enable targeted advertising
-
Preferences: Remember your settings
6.2 Managing Cookies
- Browser settings to block/delete cookies
- Opt-out of analytics tracking
- Disable marketing cookies
- Note: Some features may not work without cookies
7. Marketing Communications
7.1 Email Marketing
- Opt-in required for promotional emails
- Easy unsubscribe in every email
- Preference center for email types
- Transactional emails always sent
7.2 SMS Marketing
- Explicit opt-in required
- Text STOP to unsubscribe
- Message frequency disclosed
- Standard rates may apply
8. Data Retention
We retain your data:
- Active accounts: Indefinitely while active
- Inactive accounts: 3 years then anonymized
- Order history: 7 years for tax purposes
- Marketing consent: Until withdrawn
- Cookies: Varies by type (session to 2 years)
9. Children's Privacy
- Our service is for adults 18+ only
- We don't knowingly collect children's data
- Parents should monitor children's internet use
- Contact us immediately if child data submitted
10. Changes to Privacy Policy
- We may update this policy periodically
- Material changes notified via email
- Review policy regularly
- Continued use constitutes acceptance
11. Contact Us
Privacy Officer
CMP Solutions Ltd
Email: info@allmysins.co.nz