Chrysalis NZ Privacy Policy

Last updated: 7 October 2026

Your privacy matters to us. We understand that choosing chest binders or tucking underwear, asking about sizing, or arranging a fitting can be personal, and we aim to handle your information with care and respect.

This policy explains how we collect, use, hold and share personal information when you visit our website, shop with us, contact us, subscribe to our newsletter or enquire about a private fitting.

Who we are

Chrysalis NZ is the trading name of CHRYSALIS NZ - THE RIGHT (OUT) FIT LIMITED, a New Zealand company based in Auckland. Our NZBN is 9429053913609.

We are responsible for the personal information we collect in operating Chrysalis NZ. You can contact the person responsible for privacy at hello@chrysalisnz.co.nz; please put “Privacy enquiry” in the subject line.

Privacy correspondence address: 135A Bleakhouse Road, Mellons Bay, Auckland 2014, New Zealand. This address is for privacy correspondence, not fitting appointments.

Our fitting service is by appointment only. The fitting location is shared privately when an appointment is confirmed.

Information we collect and why

We collect information needed to provide our products and services, communicate with you and meet our business and legal responsibilities. The information depends on how you interact with us.

• Orders and customer service: Your name, contact details, delivery and billing details, products and sizes ordered, payment status, and information about returns or other enquiries. We use this to process and deliver orders, provide support, manage payments and refunds, and keep necessary business records.

• Fitting and sizing enquiries: Your name, a safe email address for our reply, and any product interests, availability or other details you choose to provide. We use these details to respond, discuss sizing or product options, and arrange an appointment.

• Newsletter subscriptions: Your email address, any name you provide, and your subscription preferences. We use these to send the updates you have signed up to receive and manage your preferences.

• Website activity: Technical information such as your IP address, browser and device information, and interactions with the website. Shopify and other services used on the website may collect this through cookies and similar technologies to operate the store, maintain security and support the functions described in this policy.

Payments are handled through the payment services available at checkout. Please do not send card numbers, banking passwords or other payment credentials through our enquiry form or email.

Your choices when providing information

You can choose not to provide personal information. However, we may be unable to process an order, deliver a product or reply to an enquiry without the details needed for that purpose.

Our fitting-enquiry form requires a name and an email address so we can respond. Product interest, preferred days or times, and additional notes are optional; you can leave these blank and discuss them with us later.

You do not need to describe your gender identity, transition, medical history or treatment to make a fitting enquiry. Please avoid including sensitive information that is not needed to help with your request.

Private fitting enquiries

We use fitting-enquiry details to help with your enquiry and any appointment you arrange with us. Submitting the form does not automatically book an appointment or subscribe you to our newsletter.

Please use an email address where it is safe for you to receive a reply from Chrysalis NZ. If you have particular communication needs, let us know before sharing further details; we will discuss what we can accommodate.

We do not routinely report your enquiry, fitting or purchase to a school, employer, community organisation, family member or other person. Sharing information with a support person or referrer requires your authorisation or another lawful basis, as explained below.

Young people and support people

We aim to respect the privacy of everyone who contacts us, including young people. We do not need detailed personal or medical information simply to answer a product or fitting enquiry.

If a parent, caregiver, counsellor or other support person contacts us on someone else’s behalf, we will consider their authority and the person’s privacy before sharing information. Being a support person or making a referral does not automatically entitle someone to receive details about another person’s enquiry or purchase.

Confidentiality is not absolute. There may be circumstances where disclosure is authorised or required by law, including where the law permits necessary disclosure to address a serious threat to someone’s health or safety.

Information received from other people

Where possible, we collect personal information directly from you. We may also receive relevant information from someone you have authorised, a service provider involved in your order, or another source where the law permits it.

If a counsellor or organisation wishes to refer someone, we encourage them to share our contact details so the person can contact us directly. They should not send medical records or unnecessary personal information.

When we collect information about you from someone else, we will take reasonable steps to explain the collection and how the information will be used, unless a legal exception applies. This reflects New Zealand’s requirements for information collected from another source.

Newsletter and marketing preferences

We send our newsletter when you have opted in. Buying a product or making a fitting enquiry does not, by itself, subscribe you to our newsletter.

When our automated abandoned-checkout reminder is enabled, it is sent only to customers subscribed to email marketing who provide contact details at checkout but do not complete their purchase. Entering your email address at checkout does not, by itself, subscribe you to email marketing.

You can unsubscribe using the option in a marketing email or by contacting hello@chrysalisnz.co.nz. Unsubscribing from marketing does not stop necessary messages about an order, enquiry or appointment.

Chrysalis does not deliberately upload private fitting-enquiry messages to advertising platforms or use their contents to create advertising audiences or tailor promotional messages. This is separate from Shopify’s handling of website activity and customer data described below; visiting a fitting page should not be assumed to be outside website analytics.

Any testimonial, photograph or personal story used in our marketing requires separate permission for that use. We do not treat making an enquiry or purchase as permission to publish your story or image.

Who may receive your information

We share personal information where needed to operate our services, where you authorise us to do so, or where the law permits or requires it. Depending on the service, recipients may include:

• Shopify and payment services: To operate the online store, process transactions and support related customer-service and security functions. Shopify also uses customer data for the Network Intelligence purposes explained below.

• Email, newsletter and automation providers: To deliver and manage communications, subscription preferences and related administration.

• Delivery providers: To deliver purchases and deal with delivery enquiries.

• Suppliers: Where necessary to fulfil an order or resolve a product issue. A supplier does not need the contents of your private fitting enquiry simply to supply a product.

• Professional advisers and authorities: Where necessary for accounting, legal obligations, dispute resolution or other purposes permitted by law.

We aim to limit the information shared to what is needed for the relevant purpose. We do not give referrers routine updates about customers without authorisation or another lawful basis.

Our online store is powered by Shopify. Shopify also explains its own handling of personal information in its Consumer Privacy Policy.

Shopify Network Intelligence

Shopify Network Intelligence is enabled for our store. Shopify explains that this feature uses customer data from our store together with customer data from other merchants to power its Enhanced Services, including improvements to products, store performance, personalisation and advertising targeting; other merchants cannot access our store’s customer data through this feature. See Shopify’s explanation of Network Intelligence.

This use is broader than processing an individual order or sending our newsletter. Unsubscribing from Chrysalis newsletter emails is not the same as opting out of Shopify’s use of data for advertising.

Shopify states that it respects applicable choices made through its cookie banner, data-sharing opt-out tools, supported Global Privacy Control signals, and third-party tools properly integrated with its Customer Privacy API. The effect depends on the choice: a sale/sharing opt-out limits advertising use, while refusing non-essential tracking limits non-essential use of the relevant device data. See Shopify’s privacy-settings guidance.

You can also use Shopify’s privacy portal to make requests directly to Shopify, including requests relating to advertising data sharing or deletion, as described in its privacy guidance. Contact us at hello@chrysalisnz.co.nz if you need help with a privacy request relating to Chrysalis.

Cookies and website services

Our website uses cookies and similar technologies to support functions such as the shopping cart, checkout and security. Your browser settings can limit or delete cookies, although doing so may affect some website functions.

Shopify analytics is present on our website, and Shopify Network Intelligence is enabled as described above. Our Shopify cookie-banner and data-sharing opt-out-page settings are automated, so the controls displayed can depend on your location and the store’s regional settings; a banner may not appear for every visitor.

Where privacy controls are displayed, you can use them to express the choices they offer. You can also contact us or use Shopify’s privacy portal as described above; newsletter subscriptions, browser cookie settings and advertising data-sharing choices are separate controls.

External websites and social-media platforms have their own privacy practices. Their policies apply when you follow a link or interact with them.

Information handled outside New Zealand

Shopify lists the United States as the data storage hosting location for our store. Personal information held through Shopify may therefore be stored outside New Zealand.

This does not mean all information is held only in the United States. Shopify and other providers may also process information in other countries when operating the store, processing payments or supporting communications, according to their services and privacy arrangements.

We remain responsible for information handled by providers acting on our behalf and will take reasonable steps to protect it. Where information is disclosed to an overseas recipient for its own purposes, we will meet the applicable New Zealand requirements, including using an appropriate protection or authorisation basis; see the Privacy Commissioner’s explanation of overseas disclosure requirements.

Security and retention

We take reasonable steps to protect personal information against loss, misuse and unauthorised access or disclosure. Access should be limited to people and providers who need it for their work.

No website or email system can guarantee complete security. Please avoid sending sensitive information that is not necessary for your enquiry.

We keep personal information only for as long as it is needed for its purpose or for legal and legitimate business requirements. Enquiry and appointment information should not be kept indefinitely simply because it is available; order, payment and accounting records may need to be retained longer.

When information is no longer needed, we will take reasonable steps to securely delete it or remove identifying details. If a privacy breach occurs, we will assess it and notify affected people and the Privacy Commissioner where legally required.

Access, correction and other requests

You have rights to ask whether we hold personal information about you, request access to it, and ask for it to be corrected, subject to the Privacy Act 2020. These rights are explained in the Privacy Commissioner’s guidance on access and correction.

To make a request, email hello@chrysalisnz.co.nz. We may need to confirm your identity or a representative’s authority before releasing information, and we will respond within the applicable legal timeframes.

If we cannot provide information or make a correction you request, we will explain why, where the law allows. You can ask us to attach a statement of the correction you sought if we do not make it.

You can also ask us to delete information we no longer need. Deletion is not an unrestricted right: we may need to retain some information for legal obligations, an ongoing transaction or a dispute.

Questions or complaints

If you have concerns about how we have handled your information, please contact hello@chrysalisnz.co.nz and address your message to the person responsible for privacy. We will consider your concern and respond.

You can also contact the New Zealand Office of the Privacy Commissioner through privacy.org.nz. You do not have to agree with our response before seeking guidance or making a complaint.

Changes to this policy

We may update this policy as our services or privacy practices change. The current version will be published on our website with its update date, and we will take additional steps to explain significant changes where appropriate or required.