Privacy Policy
Last updated 15 September 2026
Blank Space Store Limited operates this store and website, including all related information, content, features, tools, products and services (the Services). Blank Space is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use and disclose your personal information when you visit or use the Services, make a purchase, or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy applies to the collection, processing and disclosure of your personal information.
Please read this policy carefully. By accessing or using any of the Services you acknowledge that you have read it and understand how your information is collected, used and disclosed.
Contents
- Personal information we collect
- Where we get it from
- How we use your personal information
- How we disclose personal information
- Relationship with Shopify
- Third-party websites and links
- Children
- Security and retention
- Data breaches
- Your rights and choices
- Complaints
- International transfers
- Changes to this policy
- Contact
Personal information we collect
When we use the term personal information we mean information that identifies, or can reasonably be linked to, you or another person. It does not include information collected anonymously or de-identified so that it cannot be linked to you. Depending on how you interact with the Services, where you live, and as permitted or required by law, we may collect or process the following, including inferences drawn from it.
Contact details
Your name, address, billing address, shipping address, phone number and email address.
Financial information
Payment card information, financial account information, transaction details, form of payment, payment confirmation and other payment details. We do not store full card numbers ourselves; card payments are processed by our payment providers.
Account information
Your username, password, security questions, preferences and settings.
Transaction information
The items you view, add to your cart or wishlist, or purchase, return, exchange or cancel, and your past transactions with us.
Communications with us
What you include in messages to us, for example when you send a question through our contact form or email us.
Device information
Information about your device, browser or network connection, your IP address and other unique identifiers.
Usage information
Information about how and when you interact with or navigate the Services.
Where we get it from
Directly from you
When you create an account, visit or use the Services, communicate with us, or otherwise give us your personal information.
Automatically through the Services
From your device when you use the Services, and through cookies and similar technologies.
From our service providers
When we engage them to provide technology to us, and when they collect or process your personal information on our behalf.
From our partners
From advertising, analytics and marketing partners, who may share information about how you found us or interacted with our advertising.
How we use your personal information
Depending on how you interact with us and which of the Services you use, we may use your personal information for the following purposes.
Providing and improving the Services
To perform our contract with you, process your payments, fulfil your orders, remember your preferences and the items you are interested in, send you notifications about your account, process purchases, returns and exchanges, create and manage your account, arrange shipping, enable you to post reviews, and tailor your shopping experience, such as recommending products related to your purchases. This includes using your personal information to improve the Services.
Marketing and advertising
To send marketing and promotional messages by email, text message or post, and to show you online advertising on the Services or other websites, including based on items you have previously bought or added to your cart and other activity on the Services. You can opt out of marketing at any time using the unsubscribe link in any marketing email.
Security and fraud prevention
To authenticate your account, provide a secure payment and shopping experience, detect and investigate possible fraudulent, illegal or malicious activity, protect public safety, and secure the Services. If you register an account you are responsible for keeping your credentials safe. Do not share your username, password or other access details with anyone.
Communicating with you
To provide customer support, respond to you, and maintain our business relationship with you.
Legal reasons
To comply with the law or respond to valid legal process, including requests from law enforcement or government agencies, to participate in civil discovery, potential or actual litigation or other legal proceedings, and to enforce or investigate potential breaches of our terms or policies.
How we disclose personal information
In certain circumstances we may disclose your personal information to third parties for legitimate purposes, subject to this Privacy Policy. Those circumstances include:
To Shopify, and to vendors and other third parties who perform services on our behalf, such as IT management, payment processing, data analytics, customer support, cloud storage, fulfilment and shipping.
To business and marketing partners who provide marketing services and advertise to you. For example, we use Shopify to support personalised advertising with third-party services based on your online activity across different merchants and websites. Those partners use your information in accordance with their own privacy notices. Depending on where you live, you may have a right to tell us not to share information about you for targeted advertising.
Where you direct or ask us to, or otherwise consent to disclosure, such as to ship you products, or through your use of social media widgets or login integrations.
To our affiliates or otherwise within our corporate group.
In connection with a business transaction such as a merger or insolvency; to comply with legal obligations, including responding to court orders, search warrants and similar requests; to enforce our terms or policies; and to protect or defend the Services, our rights, and the rights of our customers or others.
Relationship with Shopify
The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve them. Information you submit will be transmitted to and shared with Shopify and with third parties that may be located in countries other than the one you live in.
To help protect, grow and improve our business we use certain Shopify enhanced features that incorporate data obtained from your interactions with our store, with other merchants and with Shopify. In those circumstances Shopify is responsible for processing your personal information, including for responding to requests to exercise your rights over that use. You can read more in the Shopify Consumer Privacy Policy, and depending on where you live you may be able to exercise certain rights through the Shopify Privacy Portal.
Third-party websites and links
The Services may link to websites or platforms operated by third parties. If you follow a link to a site we do not control, review its privacy and security policies and its terms. We do not guarantee and are not responsible for the privacy or security of those sites, or for the accuracy, completeness or reliability of information on them.
Information you post in public or semi-public places, including on third-party social platforms, may be visible to other people and may be used by us or by a third party without limitation. Our inclusion of a link does not by itself imply that we endorse that platform or its operators.
Children
The Services are not intended for children and we do not knowingly collect personal information from them. If you are the parent or guardian of a child who has given us their personal information, contact us using the details below and we will delete it.
We do not sell or share the personal information of anyone under 16 years of age.
Security and retention
No security measure is perfect, and we cannot guarantee complete security. Information you send to us may not be secure while in transit. We recommend you do not use unsecured channels to send us sensitive or confidential information.
How long we keep your personal information depends on why we hold it, including whether we need it to maintain your account, provide the Services to you, comply with legal obligations, resolve disputes, or enforce our agreements and policies.
Data breaches
If personal information we hold is lost, or is accessed or disclosed without authorisation, we will find out what happened, work out what the likely consequences are, and take steps to contain it.
Where a breach has caused, or is likely to cause, serious harm we will tell the people affected and the relevant regulator, as the law where you live requires:
New Zealand. The Office of the Privacy Commissioner, under the Privacy Act 2020.
Australia. The Office of the Australian Information Commissioner, under the Notifiable Data Breaches scheme.
Canada. The Privacy Commissioner of Canada, as soon as feasible, where the breach creates a real risk of significant harm. We keep a record of every breach for at least two years, as that Act requires.
United Arab Emirates. The UAE Data Office.
We will tell you what information was involved and what you can do about it.
Your rights and choices
Depending on where you live, you may have some or all of the rights below in relation to your personal information. These rights are not absolute, may apply only in certain circumstances, and in some cases we may decline a request as permitted by law.
Access. You may request access to the personal information we hold about you.
Correction. You may request that we correct personal information about you that is inaccurate.
Deletion. You may request that we delete personal information we hold about you.
Portability. You may request a copy of the personal information we hold about you, and ask us to transfer it to a third party, in certain circumstances and with certain exceptions.
Opting out of sale or sharing for targeted advertising. Depending on where you live, you may have a right to opt out of the sale or sharing of your personal information, or of its processing for targeted advertising as defined in applicable privacy laws.
Marketing preferences. You can opt out of promotional emails at any time using the unsubscribe link in any marketing email we send. If you opt out we may still send you non-promotional emails about your account or your orders.
If you live in New Zealand
The Privacy Act 2020 gives you the right to ask for access to, and correction of, the personal information we hold about you. We will respond within 20 working days of receiving your request, as that Act requires.
If you live in Australia
We handle personal information in line with the Australian Privacy Principles under the Privacy Act 1988. You can ask for access to the personal information we hold about you and ask us to correct it. If a data breach is likely to cause you serious harm, we will tell you and the Office of the Australian Information Commissioner under the Notifiable Data Breaches scheme.
If you live in Canada
We handle personal information in line with the Personal Information Protection and Electronic Documents Act. You can ask for access to the personal information we hold about you and ask us to correct it. Where we send you marketing email we do so under Canada's Anti-Spam Legislation, and you can withdraw your consent at any time using the unsubscribe link in any message.
If you live in the United Arab Emirates
We handle personal data in line with Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data. You can ask for access to your personal data, ask us to correct it, ask us to restrict or stop processing it, and withdraw your consent. The UAE Data Office oversees that law.
If you live in the United Kingdom or the European Economic Area
Subject to exceptions and limits in local law, you also have the right to object to or restrict our processing of your personal information for certain purposes, and, where we rely on your consent, to withdraw that consent. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
You can exercise any of these rights by contacting us using the details below. We will not discriminate against you for exercising them. We may need to verify your identity before we act on a request, as permitted or required by law. You may appoint an authorised agent to make a request on your behalf; before we accept a request from an agent we will require proof that you have authorised them, and we may need to verify your identity with you directly.
Complaints
If you have a complaint about how we handle your personal information, please contact us first at hello@blankspacethestore.com. We will look into it and reply.
If you are not satisfied with our response, you can take it to the regulator where you live.
New Zealand. Office of the Privacy Commissioner, privacy.org.nz, or 0800 803 909.
Australia. Office of the Australian Information Commissioner, oaic.gov.au.
Canada. Office of the Privacy Commissioner of Canada, priv.gc.ca.
United Arab Emirates. The UAE Data Office.
United Kingdom and the European Economic Area. The Information Commissioner's Office in the United Kingdom, or your local data protection authority in the EEA; a list is available on the European Data Protection Board website.
International transfers
We may transfer, store and process your personal information outside the country you live in, including in countries whose privacy laws differ from your own.
Where we transfer personal information out of the European Economic Area or the United Kingdom, we rely on recognised transfer mechanisms such as the European Commission's Standard Contractual Clauses, or the equivalent issued by the relevant UK authority, unless the destination country has been found to provide an adequate level of protection.
Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal or regulatory reasons. We will post the revised policy on this page, update the date at the top, and give notice where the law requires it.
Contact
Blank Space Store Limited
85 Main Street, Fairlie 7925, New Zealand
hello@blankspacethestore.com
For the purposes of applicable data protection law we are the agency, and where relevant the data controller, responsible for your personal information. If you have a question about our privacy practices or this policy, or you want to exercise any of your rights, email us at hello@blankspacethestore.com.