Privacy Policy

At Lucy's we are committed to protecting the privacy and security of our customers by complying with The General Data Protection Regulation 2026. We want our customers to be re-assured of their safety when shopping with us, and would like you to understand how we use your data to offer a better and more personalised service. We stand by the following statements:

✓ We protect your data like it's our own.

✓ We will never sell your data to 3rd party companies.

✓ We will only use your data to improve your experience.

✓ You can opt out of our marketing emails at any time.

✓ We won't keep your data for longer than we need to.

We strive to keep your data secure and protected and although no company can guarantee 100% security, we do our upmost to be as secure as we possibly can.

Last updated: March 2026

1. Who We Are

Lucy's Children's Formal Wear ("Lucy's", "we", "our", "us") is a specialist retailer of children's formal clothing, based in East Tamaki, Auckland, New Zealand. We operate the website www.lucys.com and the Lucy's Formal Wear mobile application (the "App") available on Apple App Store and Google Play.

If you have any questions about this Privacy Policy, please contact us at:
Email: [email protected]
Address: Lucy's Children's Formal Wear, East Tamaki, Auckland, New Zealand

2. Information We Collect

We collect the following types of personal information when you interact with our website or App:

Information you provide directly:

  • Name, email address, phone number, and delivery address (when you create an account or place an order)
  • Payment information (processed securely by our payment providers — we do not store your full card details)
  • Sizing information such as your child's height, waist measurement and arm length (when you use our AI Sizing Assistant)
  • Messages and enquiries you send to us via our contact form, chatbot or email
  • Appointment booking details (when you book an in-store fitting)

Information collected automatically:

  • Device information (device type, operating system, browser type)
  • IP address and approximate location (used to determine your local currency)
  • Pages visited, products viewed, and browsing behaviour on our website and App
  • Push notification device tokens (if you enable push notifications in our App)

3. How We Use Your Information

We use the information we collect for the following purposes:

  • Order processing: To process and fulfil your orders, arrange delivery, and send order confirmations and shipping updates
  • Customer service: To respond to your enquiries, provide sizing assistance through our AI chatbot, and manage appointment bookings
  • Account management: To create and manage your customer account, wishlist, and order history
  • Currency detection: To display prices in your local currency (NZD, AUD, USD, GBP, EUR, CAD) based on your location
  • Push notifications: To send you order updates, shipping notifications, back-in-stock alerts, and promotional offers (only if you opt in through our App)
  • Marketing communications: To send you emails about new products, special offers, and promotions (only with your consent, and you can opt out at any time)
  • Website and App improvement: To analyse how our website and App are used so we can improve the shopping experience

4. Push Notifications (Mobile App)

Our mobile App uses OneSignal to deliver push notifications. When you allow push notifications, OneSignal collects a device token (a unique identifier for your device) to deliver notifications to you. This token does not contain personal information such as your name or email.

You can manage or disable push notifications at any time:

  • iOS: Go to Settings > Notifications > Lucy's Formal Wear > toggle off
  • Android: Go to Settings > Apps > Lucy's Formal Wear > Notifications > toggle off

For more information on how OneSignal handles data, please refer to OneSignal's Privacy Policy.

5. Payment Processing

We use Stripe and PayPal as our third-party payment processors. When you make a purchase, your payment details are transmitted directly to these providers over encrypted connections. We do not store your full credit card number, expiry date, or CVV on our servers.

These payment providers have their own privacy policies:

6. Cookies and Tracking

Our website uses cookies to provide essential functionality and improve your experience:

  • Essential cookies: Required for the website to function (e.g. shopping cart, login session, currency preference)
  • Currency cookie: We use a cookie called __currency to remember your selected currency and display the correct prices and products for your region
  • Analytics cookies: We use Google Analytics to understand how visitors use our website. This information is aggregated and anonymous

Most web browsers allow you to manage cookie preferences through their settings. Please note that disabling essential cookies may affect the functionality of our website.

7. Sharing Your Information

We do not sell, trade, or rent your personal information to third parties. We only share your data with the following types of service providers who help us operate our business:

  • Payment processors: Stripe and PayPal (to process payments)
  • Shipping providers: New Zealand Post, DHL, and other courier services (to deliver your orders)
  • Push notification provider: OneSignal (to deliver App notifications)
  • Email service provider: To send transactional and marketing emails
  • Hosting provider: Amazon Web Services (to host our website and securely store data)

All third-party providers are bound by their own privacy policies and are only given the minimum data necessary to perform their services.

8. International Data Transfers

Lucy's ships worldwide and serves customers in many countries. Your personal information may be transferred to and processed in countries other than New Zealand, including countries where our service providers operate (such as the United States for payment processing and push notifications). We ensure appropriate safeguards are in place to protect your data in accordance with applicable privacy laws.

9. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this policy:

  • Account data: Retained while your account is active. You may request deletion at any time.
  • Order data: Retained for 7 years to comply with New Zealand tax and accounting requirements.
  • Marketing preferences: Retained until you unsubscribe or request removal.
  • AI Sizing Assistant data: Sizing conversations are not permanently stored and are used only to provide real-time assistance.

10. Your Rights

You have the following rights regarding your personal information:

  • Access: You can request a copy of the personal data we hold about you.
  • Correction: You can ask us to correct any inaccurate or incomplete data.
  • Deletion: You can request that we delete your personal data (subject to legal retention requirements).
  • Opt-out of marketing: You can unsubscribe from marketing emails by clicking the "unsubscribe" link in any email, or by contacting us directly.
  • Disable push notifications: You can turn off push notifications in your device settings at any time.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 20 working days, as required under the New Zealand Privacy Act 2020.

11. Children's Privacy

Our products are designed for children, but our website and App are intended for use by parents and guardians. We do not knowingly collect personal information directly from children under the age of 16. If you believe a child has provided us with personal information without parental consent, please contact us immediately at [email protected] and we will promptly delete such information.

12. Security

We take the security of your personal information seriously and use industry-standard measures to protect it, including:

  • SSL/TLS encryption for all data transmitted between your browser and our servers
  • Secure, encrypted payment processing through Stripe and PayPal
  • Regular security updates and monitoring of our hosting infrastructure
  • Access controls to limit who can view personal data within our organisation

While we take every reasonable precaution, no method of transmission over the internet is 100% secure. We encourage you to use a strong, unique password for your Lucy's account.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any updates will be posted on this page with the revised date at the top. We encourage you to review this page periodically.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us:

Lucy's Children's Formal Wear
Email: [email protected]
Website: www.lucys.com/contact-us
Address: Unit 13, 375 East Tamaki Road, East Tamaki, Auckland 2013, New Zealand

© 2026 Lucy's Children's Formal Wear. All rights reserved.