Datenschutzerklärung
Privacy Policy
Last Updated: September 14, 2026
The protection of your personal data is important to us. This Privacy Policy explains how we process personal data when you use our website rdcbhm.shop, place an order, or contact us.
1. Data Controller
The controller responsible for the processing of personal data under the General Data Protection Regulation (GDPR) is:
PINK PANTHER LIMITED
Company No.: 1849337
39 Lewis Road
Lynmore, Rotorua 3010
New Zealand
Postal Code: 3010
Email: support@rdcbhm.shop
Telephone: +64 21 440 592
Website: rdcbhm.shop
If you have any questions regarding data protection or wish to exercise your privacy rights, you may contact us using the details above.
2. Personal Data We Process
Depending on how you use our website and services, we may process the following categories of personal data:
first and last name;
billing and shipping address;
email address;
telephone number;
order number;
products ordered and order history;
payment and transaction information;
information relating to Cash on Delivery payments;
information relating to returns, refunds, and complaints;
communications when you contact customer service;
IP address;
browser type and version;
device information;
operating system;
date and time of access;
technical log and security data;
cookie and consent information;
information about how you use our website, where permitted by law.
We generally process only the personal data necessary for the relevant purpose.
3. Purposes and Legal Bases for Processing
3.1 Order Processing
We process your personal data in order to receive, process, deliver, and complete your order.
This includes:
processing your order;
sending order and shipping confirmations;
arranging delivery;
processing Cash on Delivery payments;
handling returns and refunds;
handling complaints;
providing customer service.
The legal basis is generally Article 6(1)(b) GDPR, where processing is necessary for the performance of a contract or pre-contractual measures.
3.2 Legal Obligations
We may be required to retain or process certain information in order to comply with legal obligations, including commercial, tax, accounting, or regulatory requirements.
The legal basis is Article 6(1)(c) GDPR.
3.3 Customer Service and Communication
If you contact us by email, telephone, or contact form, we process the information you provide in order to respond to your request.
Where your request relates to a contract or order, processing is generally based on Article 6(1)(b) GDPR.
In other cases, processing may be based on our legitimate interest in efficiently handling customer inquiries under Article 6(1)(f) GDPR.
3.4 Security and Fraud Prevention
We may process certain technical, order, and transaction data in order to:
protect our website and systems;
prevent misuse;
detect fraudulent orders;
investigate security incidents;
establish, exercise, or defend legal claims.
Where applicable, such processing is based on our legitimate interests under Article 6(1)(f) GDPR.
4. Shopify
Our online store is operated using the Shopify e-commerce platform.
Shopify provides the technical infrastructure used to operate our store and process orders.
In connection with use of our store, Shopify and service providers used by Shopify may process personal data, including:
contact information;
order data;
shipping information;
device and browser data;
IP addresses;
technical usage and security information.
Where Shopify processes personal data on our behalf, such processing is governed by the applicable data protection agreements between us and Shopify.
Further information regarding Shopify's processing of personal data can be found in Shopify's own privacy information.
5. Shipping and Logistics Providers
To deliver your order, we may provide the personal data required for delivery to shipping, logistics, and fulfillment providers.
This may include:
name;
delivery address;
telephone number;
email address;
order-related information.
Processing is generally based on Article 6(1)(b) GDPR, where necessary to fulfill your order.
We only provide the data required for the relevant service.
6. Cash on Delivery
If you choose Cash on Delivery (COD), information required to complete the payment may be shared with the applicable shipping, logistics, or COD service provider.
This may include:
name;
delivery address;
telephone number;
order number;
amount payable.
Processing is based on Article 6(1)(b) GDPR, where necessary to fulfill your order and selected payment method.
7. Marketing Communications
We send promotional or marketing communications by email only where a valid legal basis exists.
Where consent is required, processing is based on Article 6(1)(a) GDPR.
You may withdraw your consent at any time with effect for the future, for example by using an unsubscribe link in a marketing email or by contacting us at:
support@rdcbhm.shop
Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
8. Cookies and Similar Technologies
Our website may use cookies and similar technologies.
Some cookies are technically necessary to provide essential functions of our store, including:
shopping cart functions;
checkout;
security;
storing required settings;
technical session management.
Other cookies or similar technologies, including those used for analytics, personalization, or marketing, are only used where there is an appropriate legal basis and, where required, after obtaining your prior consent.
You may manage or change your choices through the cookie or privacy settings available on our website.
Rejecting non-essential cookies generally does not prevent use of the basic functions of our online store.
9. Analytics and Marketing Services
Where we use analytics, statistics, advertising, or marketing technologies, personal data is processed only in accordance with applicable data protection laws.
Where prior consent is required, such processing will only take place after consent has been provided in accordance with Article 6(1)(a) GDPR.
You may withdraw your consent at any time with effect for the future through our cookie or privacy settings.
10. Recipients of Personal Data
We only share personal data where necessary or legally permitted.
Possible recipients may include:
Shopify and service providers connected with our store infrastructure;
hosting and IT service providers;
shipping and logistics companies;
fulfillment providers;
providers involved in Cash on Delivery processing;
customer service providers;
analytics and marketing providers where legally permitted;
tax advisers, auditors, or legal advisers;
public authorities where required by law.
Service providers generally receive only the personal data necessary to perform their respective services.
11. International Data Transfers
Because PINK PANTHER LIMITED is established in New Zealand and we may use international technical and business service providers, personal data may be processed outside the European Economic Area.
New Zealand is recognized by the European Commission as providing an adequate level of data protection.
Where personal data is transferred to countries outside the European Economic Area that are not covered by an adequacy decision, we will use appropriate safeguards where required by the GDPR.
Such safeguards may include:
European Commission Standard Contractual Clauses;
approved Binding Corporate Rules;
other transfer mechanisms permitted under the GDPR.
12. Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected.
We may retain information for longer where required in order to:
comply with legal retention obligations;
meet tax or accounting requirements;
handle warranty or customer service matters;
establish, exercise, or defend legal claims.
After the applicable retention period expires, personal data will be deleted or anonymized unless another lawful basis for continued processing exists.
13. Data Security
We take appropriate technical and organizational measures to protect personal data against:
loss;
misuse;
unauthorized access;
unauthorized disclosure;
alteration;
destruction.
However, no method of transmitting information over the internet can guarantee absolute security.
14. Your Rights Under the GDPR
Where the legal requirements are met, you may have the following rights:
right of access under Article 15 GDPR;
right to rectification under Article 16 GDPR;
right to erasure under Article 17 GDPR;
right to restriction of processing under Article 18 GDPR;
right to data portability under Article 20 GDPR;
right to object to certain processing under Article 21 GDPR;
the right to withdraw consent at any time with effect for the future.
To exercise your rights, contact:
support@rdcbhm.shop
Where necessary, we may ask you to provide additional information in order to verify your identity and protect your personal data.
15. Right to Object
Where we process personal data on the basis of our legitimate interests under Article 6(1)(f) GDPR, you have the right, where the statutory conditions are met, to object to such processing on grounds relating to your particular situation.
Where personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such purposes.
Following an objection to direct marketing, the relevant personal data will no longer be processed for those purposes.
16. Right to Lodge a Complaint
You have the right to lodge a complaint with a competent data protection supervisory authority if you believe that the processing of your personal data infringes the GDPR.
This right is without prejudice to any other administrative or judicial remedy.
17. Automated Decision-Making
We generally do not make decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you, unless permitted by applicable law.
Automated systems may, however, be used for technical security and fraud prevention purposes.
18. Children's Data
Our online store is generally intended for persons who are legally capable of entering into purchase contracts.
We do not intend to knowingly collect personal data from children in violation of applicable law.
If you believe that personal data relating to a child has been provided to us unlawfully, please contact:
support@rdcbhm.shop
19. Changes to This Privacy Policy
We may update this Privacy Policy where necessary due to changes in legal requirements, technical developments, or our services.
The current version will be published on our website.
The date of the latest update is shown at the beginning of this Privacy Policy.
20. Contact
For questions regarding privacy or the processing of your personal data, please contact:
PINK PANTHER LIMITED
Company No.: 1849337
39 Lewis Road
Lynmore, Rotorua 3010
New Zealand
Postal Code: 3010
Email: support@rdcbhm.shop
Telephone: +64 21 440 592
Website: rdcbhm.shop