Privacy Policy
Privacy Statement
Hobbiton Movie Set (“we”, “our”, or “us”) is committed to protecting your privacy and personal information. This Statement of Privacy outlines how we collect, use, disclose and safeguard information through our online store at www.shop.hobbitontours.com. This policy relates only to the online merchandise store and does not apply to our tour experiences or bookings made through the tour site at www.hobbitontours.com.
Collection of Your Personal Information
When you make a purchase or interact with our online store, we may collect the following personal information:
- Full name
- Email address
- Phone number
- Billing and shipping address
- Order and transaction history
- Payment details (processed securely via third-party providers)
- Marketing preferences (if opted-in)
- Device and browser information (e.g. IP address, cookies, location)
We collect personal data through:
- Purchase transactions on our website
- Email newsletter sign-ups
- Customer service enquiries
- Cookies and analytics tools (see below)
- Third-party tools integrated into our store (e.g. Shopify, Windcave, Mailchimp)
How We Use Your Information
We use your information to:
- Process and fulfill orders
- Communicate with you about your order or enquiry
- Send shipping and delivery notifications
- Respond to customer service requests
- Manage refunds, returns, or exchanges
- Send promotional emails if you have opted in (you can unsubscribe at any time)
- Improve website performance, user experience and security
Sharing Your Information
We do not sell or rent your personal information. We may share your data only with trusted third parties, including:
- Shopify: our ecommerce platform, which hosts and powers our store
- Windcave: our secure payment gateway
- Mailchimp: our email marketing provider (if you opt in to receive updates)
- Shipping carriers: to deliver your purchases
- Legal or regulatory authorities: if required by law or to protect our rights
All third-party service providers are required to handle your data in compliance with applicable privacy laws.
Payment Security
We never store your credit card or payment details. All transactions are encrypted and securely processed through Shopify and Windcave, which comply with PCI DSS (Payment Card Industry Data Security Standards).
Data Retention
We retain your personal information for as long as needed to:
- Fulfil the purposes outlined in this policy
- Comply with legal or tax obligations (typically 7 years for transaction records under NZ law)
- Resolve disputes or enforce agreements
Marketing opt-in information will be retained until you unsubscribe or request deletion.
Cookies & Website Analytics
We use cookies and tracking tools to:
- Understand website traffic and usage patterns
- Provide a smooth shopping experience
- Offer personalised content and product recommendations
You can manage or disable cookies through your browser settings, although this may affect site functionality.