Privacy policy
Last updated: 19 July 2026
This Privacy Policy explains how Oritenga Limited collects, uses, stores and shares personal information when you visit oritenga.com, contact us, book a consultation, purchase a service or work with us on a Shopify project.
In this Privacy Policy, “Oritenga”, “we”, “us” and “our” refer to Oritenga Limited. “You” and “your” refer to website visitors, prospective clients, clients, purchasers, business contacts and other individuals whose personal information we process.
1. Who we are
Oritenga Limited is a New Zealand company providing Shopify design, development, conversion optimisation and related professional services.
Website: oritenga.com
Email: info@oritenga.com
Contact page: /pages/contact-us
Oritenga is responsible for personal information collected through its own website, enquiries, consultations, purchases, project administration and business operations.
When Oritenga accesses information inside a client-owned Shopify store or another client-controlled system, we may process that information on the client’s instructions. The client remains responsible for the personal information collected through its own store and for providing its customers with an appropriate privacy notice.
2. What this Privacy Policy covers
This Privacy Policy applies to oritenga.com, Oritenga contact and consultation forms, Store Review purchases, questionnaires, project enquiries, direct communications, project onboarding, service delivery and Oritenga’s own business records.
It does not automatically apply to Shopify stores owned by Oritenga’s clients, external websites linked from oritenga.com, or independent platforms such as Shopify, HubSpot and Upwork when you use those services directly.
A separate agreement, confidentiality provision or data-processing arrangement may also apply to a specific client project.
3. Information you provide to us
When you contact Oritenga, we may collect your name, email address, company or brand name, enquiry type, website address, Shopify store URL, project description and any other information you choose to provide.
When you request or book a consultation, we may also collect information about your project type, business goals, current challenges, priority pages or products, proposed timeline, estimated project investment, meeting preferences and booking details.
When you purchase a Store Review or another service, we may collect your contact details, billing details, order information, Shopify store URL, questionnaire responses, project priorities, files, screenshots and communications connected with the service.
When you work with Oritenga on a client project, we may receive project briefs, proposals, approvals, brand information, product information, website content, images, technical details, analytics information, revision requests, milestone approvals, invoices and project communications.
Please do not send Shopify passwords, complete payment-card details, unnecessary customer records or confidential login credentials through a general contact form.
Oritenga normally uses Shopify Partner collaborator access, development stores or another agreed access method instead of asking clients to share personal Shopify passwords.
4. Payment information
Payments made through the Oritenga website are processed through Shopify and the payment provider available at checkout.
Oritenga does not normally receive or store your complete payment-card number or card security code.
Shopify and the relevant payment provider may independently process billing, payment, fraud-prevention and transaction information under their own privacy terms.
5. Information collected automatically
When you visit oritenga.com, Shopify and approved website technologies may automatically collect technical and usage information.
This may include your IP address, browser type, device type, operating system, language, country, approximate location, referring website, pages viewed, links selected, date and time of visits, website interactions, cart or checkout activity, cookie identifiers, performance information and information used to protect the website from spam, fraud or automated misuse.
This information may be collected through cookies, pixels, local storage, analytics tools, server logs and similar technologies.
6. Information received from other sources
Oritenga may receive personal information from a colleague or authorised representative of your business, a referral partner, an existing client, Shopify, a booking provider, Upwork, a payment provider, a professional adviser, a public business register or a publicly available professional profile.
Where required by applicable law, we will take reasonable steps to notify an individual when we collect personal information about them indirectly, unless an exception applies.
7. How we use personal information
We use personal information to respond to enquiries, review project requests, schedule consultations, prepare proposals, define project scope and recommend appropriate services.
We may also use personal information to process purchases, payments, invoices and refunds; deliver Store Reviews and other services; manage Shopify projects; communicate about revisions and approvals; provide support; maintain client relationships; and manage approved store access.
We may use website and technical information to operate, secure, monitor, troubleshoot and improve oritenga.com.
We may also use personal information to maintain financial and contractual records, prevent fraud or misuse, protect legal rights, comply with legal obligations and resolve complaints or disputes.
Marketing communications may be sent where you have requested them, consented to receive them or where sending them is otherwise permitted by law.
8. When information is required
Some information is required so that Oritenga can respond to an enquiry, assess a project, prepare a proposal, process an order or deliver a service.
Required form fields are normally identified on the relevant page.
You may choose not to provide optional information. However, without necessary information, we may be unable to respond fully, process your purchase or provide the requested service.
9. Legal grounds for processing
Where applicable law requires a legal basis for processing, Oritenga may rely on your consent, steps requested before entering into a contract, performance of a contract, compliance with a legal obligation, protection of legal rights, fraud prevention or legitimate business interests.
Where we rely on consent, you may withdraw that consent for future processing. Withdrawal does not affect processing that has already taken place or information that must be retained for another lawful reason.
10. Cookies and similar technologies
Oritenga’s website is hosted on Shopify and may use cookies and similar technologies for essential website functions, security, cart operation, checkout, preferences, analytics, performance measurement and marketing measurement.
Some cookies are necessary for the website to function correctly.
Other cookies may depend on your location, consent choices and the customer privacy settings configured through Shopify.
Where a privacy-preference tool or cookie banner is available, you can use it to manage non-essential cookies.
You can also control cookies through your browser settings. Blocking some cookies may affect forms, cart features, checkout or other website functionality.
11. Shopify
Oritenga uses Shopify to host and operate oritenga.com, provide website functionality, process Store Review orders, support checkout, operate website forms and provide security, analytics and privacy features.
Shopify may process personal information on behalf of Oritenga and for its own legitimate platform purposes.
Shopify may store or process personal information outside New Zealand.
Shopify’s consumer privacy information is available at:
https://www.shopify.com/legal/privacy/consumers
12. Consultation-booking services
Oritenga may use HubSpot or another independent booking provider to allow visitors to schedule consultations.
When you use an external booking service, that provider may collect your name, email address, appointment date, appointment time, time zone, device information and other information required to manage the booking.
External booking providers process personal information under their own privacy policies.
HubSpot’s privacy policy is available at:
https://legal.hubspot.com/privacy-policy
13. Form protection
Shopify forms may use hCaptcha or related security technology to protect the website against spam, fraud and automated abuse.
This technology may process technical information about your browser, device, network and interaction with the form.
Information about hCaptcha’s privacy practices is available at:
https://www.hcaptcha.com/privacy
14. When we share personal information
Oritenga does not sell or rent personal information.
We may share personal information with Shopify, payment providers, booking providers, email providers, cloud-storage providers, file-sharing services, project-management platforms, form-security providers and other suppliers that help us operate the website or deliver services.
Information may also be shared with Oritenga employees, contractors and specialist team members who require access to complete authorised work.
We may share information with accountants, insurers, lawyers and other professional advisers where reasonably necessary.
Information may be disclosed to regulators, courts, law-enforcement agencies or government authorities where disclosure is required or permitted by law.
We may also share information where you have authorised the disclosure or where it is necessary in connection with a proposed sale, restructuring or transfer of the business.
15. Client Shopify stores
Oritenga may receive limited access to a client’s Shopify store where access is required to complete agreed work.
Access is normally provided through Shopify Partner collaborator permissions or a development store.
Clients should provide only the permissions and information reasonably required for the project.
Unless specifically agreed, clients should not provide Oritenga with unnecessary customer exports, complete payment information, health information or other sensitive personal information.
When Oritenga processes personal information on behalf of a client, we use it only for the authorised project purpose, follow the client’s lawful instructions, limit access to authorised people and apply reasonable confidentiality and security measures.
This Privacy Policy does not replace the privacy policy that a client must provide for its own Shopify store.
16. International processing
Oritenga is based in New Zealand, but some technology and service providers may store or process personal information in other countries.
These countries may have privacy laws that differ from New Zealand law.
Where required, Oritenga will take reasonable steps to use appropriate providers, contractual protections or other safeguards for international processing and disclosure.
17. Data security
Oritenga takes reasonable technical and organisational steps to protect personal information against loss, unauthorised access, misuse, alteration and disclosure.
These measures may include secure hosted platforms, controlled permissions, Shopify Partner collaborator access, multi-factor authentication, restricted internal access, confidentiality obligations, secure payment processing, form protection and account-security procedures.
No website, electronic transmission or storage system can be guaranteed to be completely secure.
You should take appropriate care when deciding what information to send electronically.
18. Privacy breaches
If Oritenga becomes aware of a privacy breach, we will assess the incident and take reasonable steps to contain, investigate and address it.
Where required by applicable law, we may notify affected individuals and the Office of the New Zealand Privacy Commissioner.
19. How long we retain personal information
Oritenga retains personal information only for as long as reasonably necessary for the purpose for which it was collected or for another lawful business purpose.
Retention periods may depend on the duration of an enquiry or project, accounting and tax requirements, contractual obligations, insurance requirements, legal obligations, complaint handling, dispute resolution, fraud prevention and security requirements.
When information is no longer reasonably required, we may delete it, anonymise it or securely dispose of it, subject to legal obligations and technical backup cycles.
20. Marketing communications
Oritenga may send marketing or service-update communications where you have requested them, consented to receive them or where they are otherwise permitted by law.
You can unsubscribe using the unsubscribe link included in a marketing email or by contacting:
Unsubscribing from marketing does not prevent Oritenga from sending necessary communications about an active enquiry, purchase, project, payment, security issue or legal matter.
21. Portfolio work and testimonials
Oritenga may display client feedback, project examples, screenshots or testimonials where permission has been provided, where the information is already publicly available and may lawfully be used, or where identifying details have been removed.
Oritenga will not intentionally publish confidential project information as a public case study without appropriate authority.
22. Information about other people
If you provide personal information about another person, you should be authorised to provide it and should ensure that the person understands that their information may be shared with Oritenga.
Please avoid providing personal information about customers, employees or other individuals unless it is relevant and necessary for the enquiry or project.
23. Children’s information
Oritenga provides business and professional Shopify services.
The website is not directed towards children, and Oritenga does not knowingly seek personal information from children through its consultation, enquiry or purchasing processes.
Please contact us if you believe a child has provided personal information without appropriate authority.
24. Your privacy rights
Subject to applicable law, you may ask whether Oritenga holds personal information about you and request access to that information.
You may request correction of inaccurate or incomplete personal information.
Depending on your location and the applicable law, you may also have rights relating to deletion, restriction, objection, withdrawal of consent, portability and marketing preferences.
Some rights are subject to legal exceptions.
Oritenga may need to confirm your identity before responding to a privacy request.
To make a privacy request, email info@oritenga.com and include “Privacy Request” in the subject line.
Please describe the information or interaction involved and what you would like Oritenga to do.
25. Privacy complaints
Please contact Oritenga first so that we can review and respond to your concern.
Oritenga Limited
New Zealand
Email: info@oritenga.com
Contact page: /pages/contact-us
Please include “Privacy Complaint” in the email subject line.
If you are not satisfied with our response, you may contact the Office of the New Zealand Privacy Commissioner:
People in other jurisdictions may also have the right to contact their local privacy or data-protection authority.
26. External websites
Oritenga.com may contain links to Shopify, HubSpot, Upwork, client websites, portfolio websites and other external services.
Oritenga does not control the privacy, security or data-handling practices of independent external websites.
You should review the privacy information provided by an external service before submitting personal information to it.
27. Changes to this Privacy Policy
Oritenga may update this Privacy Policy when its website, services, providers, business practices or legal obligations change.
The updated Privacy Policy will be published on oritenga.com with a revised “Last updated” date.
Material changes may also be communicated through the website, email or another reasonable method where appropriate.
28. Contact Oritenga
Questions, access requests, correction requests and privacy complaints can be sent to:
Oritenga Limited
New Zealand
Email: info@oritenga.com
Website: oritenga.com
Contact page: /pages/contact-us