Privacy policy

Last updated: 5 August 2026

This Privacy Policy explains how Suki Bakery Ltd, trading as Lowrey Foods, collects, uses, stores, shares and protects personal information when you visit our website, contact us or purchase Lowrey products.

In this Privacy Policy, “Lowrey Foods”, “we”, “us” and “our” refer to Suki Bakery Ltd. “You” and “your” refer to website visitors, customers, recipients, account holders and other people who interact with us.

We respect your privacy and handle personal information in accordance with applicable privacy and data-protection laws, including the New Zealand Privacy Act 2020.

1. Who is responsible for your information

Lowrey Foods is operated by:

Suki Bakery Ltd, trading as Lowrey Foods
Unit G&H, 28A Verissimo Drive
Mangere, Auckland 2022
New Zealand

For privacy questions or requests, please use our Contact Us page.

2. Personal information we collect

The personal information we collect depends on how you interact with our website and services.

We may collect the following categories of information:

  • Identity information, such as your name, account name and recipient name.
  • Contact information, such as your email address, telephone number, billing address and delivery address.
  • Order information, such as products purchased, quantities, order value, currency, discounts, delivery instructions, order history and gift-recipient details.
  • Payment and transaction information, such as payment status, payment method type, transaction identifiers and billing details.
  • Account information, such as login details, saved addresses, preferences and account activity.
  • Customer-service information, such as messages, photographs, complaints, product concerns, delivery enquiries and supporting documents.
  • Marketing information, such as newsletter subscriptions, promotional preferences, email engagement and campaign interactions.
  • Technical information, such as IP address, browser type, device type, operating system, language, time zone, pages viewed, referring website and approximate location.
  • Cookie and analytics information, such as browsing activity, cart activity, checkout activity, advertising interactions and website-performance data.
  • Business information, such as company name, job title, delivery requirements and corporate-gifting or wholesale details.

We do not intentionally collect full payment-card details through our website contact form. Payment-card information is processed by Shopify and authorised payment providers.

3. Information you provide directly

We collect information directly from you when you:

  • place an order;
  • create or update an account;
  • subscribe to marketing communications;
  • complete our contact form;
  • contact us about an order or product;
  • submit a review, photograph or feedback;
  • request corporate-gifting or wholesale information;
  • participate in a promotion or survey; or
  • otherwise communicate with us.

When purchasing a gift for another person, you may provide personal information about the recipient. You are responsible for ensuring that you are authorised to provide that information for the purpose of fulfilling the order.

4. Information collected automatically

When you use our website, Shopify and authorised service providers may automatically collect technical and usage information through cookies, pixels, local storage, server logs and similar technologies.

This may include:

  • your IP address and approximate location;
  • your browser, device and operating system;
  • pages and products viewed;
  • links and buttons selected;
  • cart and checkout activity;
  • referral and campaign information;
  • session duration and website performance; and
  • interactions with marketing communications.

Some technologies are necessary for the website, checkout, fraud prevention and security to function. Other technologies may be used for analytics, personalisation and advertising, subject to applicable law and your consent choices.

5. Information received from other sources

We may receive personal information from third parties where reasonably necessary to operate our business.

These sources may include:

  • Shopify and connected Shopify services;
  • payment processors and financial institutions;
  • couriers, customs agents and fulfilment providers;
  • email-marketing and customer-communication providers;
  • analytics and advertising providers;
  • review and customer-feedback platforms;
  • fraud-prevention and security providers;
  • business customers or gift purchasers who provide recipient details;
  • authorised distributors or commercial partners; and
  • public authorities where permitted or required by law.

Where personal information is collected indirectly, we will provide appropriate notice where required by applicable law, unless an exception applies.

6. How we use personal information

We may use personal information to:

  • process and fulfil orders;
  • confirm payments and prevent fraud;
  • arrange domestic and international delivery;
  • provide couriers and customs authorities with delivery information;
  • communicate about orders, tracking, customs and delivery issues;
  • respond to questions, complaints and product concerns;
  • investigate damaged, missing, incorrect or potentially faulty products;
  • manage customer accounts;
  • provide corporate-gifting, wholesale and distribution services;
  • send marketing communications where permitted;
  • personalise website content and offers;
  • analyse website performance and customer activity;
  • improve our products, services, website and customer experience;
  • protect our website, customers and business from fraud or misuse;
  • maintain business, tax and transaction records;
  • enforce our policies and legal rights; and
  • comply with legal and regulatory obligations.

7. Our reasons for processing information

Depending on the circumstances and applicable law, we process personal information because:

  • it is necessary to provide products or services you requested;
  • it is necessary to perform or prepare an order or contract;
  • you have provided consent;
  • we have a legitimate business purpose that does not unfairly override your privacy rights;
  • we need to comply with a legal obligation; or
  • it is necessary to establish, exercise or defend legal rights.

Where we rely on consent, you may withdraw that consent at any time. Withdrawal does not affect processing that lawfully occurred before the withdrawal.

8. Shopify

Our online store is hosted by Shopify.

Shopify provides the ecommerce platform, checkout, account, security, analytics and related services that enable us to operate our store.

Shopify may process personal information about website visitors and customers on our behalf and, in some circumstances, for purposes described in Shopify’s own privacy documentation.

Depending on our Shopify settings, Shopify services may use customer and website-activity information to provide fraud prevention, analytics, personalisation, marketing measurement and other enhanced services.

You can learn more by reviewing the Shopify Consumer Privacy Policy .

9. Payment processing

Payments are processed through Shopify Payments or other payment providers made available at checkout.

Payment providers may collect and process payment-card information, billing details, transaction information, device information and fraud-prevention data.

We generally receive confirmation of the payment, limited transaction details and payment-status information rather than complete payment-card details.

Payment providers process information under their own terms and privacy policies.

10. Delivery, customs and fulfilment

We share information necessary to process, pack, deliver and clear orders with relevant service providers.

These may include:

  • warehouses and fulfilment providers;
  • DHL and other courier companies;
  • postal operators;
  • customs brokers;
  • border and customs authorities; and
  • delivery partners in the destination country.

Information shared may include the purchaser’s or recipient’s name, telephone number, email address, delivery address, product description, quantity, order value, country of origin and customs information.

International couriers or customs authorities may request additional identification or information directly from the customer or recipient.

11. Email marketing and Klaviyo

We may use Klaviyo or another authorised communications provider to manage newsletters, promotional campaigns, automated emails and customer segments.

Depending on your interactions and consent choices, these providers may process:

  • your name and email address;
  • subscription and marketing preferences;
  • order and product information;
  • website, cart and checkout activity;
  • email opens and link interactions;
  • campaign and discount activity; and
  • device and technical information.

We send promotional communications only where permitted by law.

You can unsubscribe from marketing emails at any time by selecting the unsubscribe link in the email.

Unsubscribing from marketing does not prevent us from sending necessary transactional messages about an order, payment, delivery, account or customer-service matter.

12. Cookies and similar technologies

Our website and authorised service providers use cookies, pixels, tags, local storage and similar technologies.

These technologies may be used for:

  • website and checkout operation;
  • account login and shopping-cart functions;
  • security and fraud prevention;
  • remembering preferences;
  • website analytics and performance;
  • marketing measurement;
  • personalisation; and
  • advertising, where permitted.

Where required, non-essential cookies and tracking technologies are used only after appropriate consent.

You can manage available cookie choices through our cookie banner or privacy controls. You may also adjust browser settings to block or delete cookies, although some website functions may not work properly as a result.

13. Analytics and advertising

We may use Shopify analytics and authorised third-party analytics, advertising or measurement services to understand website use and improve our marketing.

These providers may process technical information, cookie identifiers, website interactions, campaign information, approximate location and purchase-related events.

Depending on your location and our current settings, you may be given the ability to:

  • accept or reject non-essential cookies;
  • withdraw cookie consent;
  • opt out of certain targeted advertising or data sharing; or
  • use recognised browser-based privacy signals.

Available options can be accessed through our cookie banner, privacy settings or data-sharing opt-out page where provided.

14. When we share personal information

We do not sell customer lists or contact details.

We may share personal information with:

  • Shopify and ecommerce service providers;
  • payment processors;
  • warehouses and fulfilment partners;
  • couriers and customs providers;
  • email and communications providers;
  • website hosting, analytics and security providers;
  • advertising and marketing providers, subject to applicable consent;
  • professional advisers such as accountants, insurers and lawyers;
  • government, customs, regulatory or law-enforcement authorities;
  • business purchasers or advisers involved in a proposed sale, reorganisation or transfer; and
  • other parties where you authorise or request the disclosure.

We disclose only information reasonably necessary for the relevant purpose, subject to contractual, legal and security requirements where appropriate.

15. International transfers

Lowrey Foods is based in New Zealand, but Shopify and other providers may process or store personal information in New Zealand and other countries.

International service providers may operate data centres, support teams or systems outside New Zealand.

Privacy and data-protection laws in another country may differ from New Zealand law.

Where required, we take reasonable steps to ensure that overseas disclosures and processing are subject to appropriate privacy protections, contractual safeguards or another lawful basis.

16. Data security

We take reasonable technical, administrative and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration and disclosure.

These measures may include:

  • restricted access to systems and accounts;
  • password and authentication controls;
  • encrypted website and payment connections;
  • security and fraud-monitoring tools;
  • staff and service-provider access controls; and
  • regular review of systems and permissions.

No method of internet transmission or electronic storage is completely secure. We cannot guarantee absolute security, but we take reasonable steps appropriate to the nature of the information.

17. Data breaches

If we become aware of a privacy breach, we will assess and respond to it in accordance with applicable law.

Where a breach is likely to cause serious harm, we may be required to notify affected individuals and the New Zealand Office of the Privacy Commissioner.

18. How long we keep information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including:

  • fulfilling and supporting orders;
  • maintaining transaction and tax records;
  • managing accounts and subscriptions;
  • responding to disputes, claims and product concerns;
  • preventing fraud and misuse;
  • meeting legal and regulatory obligations; and
  • establishing or defending legal rights.

Retention periods vary depending on the type of information, the purpose of collection and applicable legal requirements.

When information is no longer required, we take reasonable steps to delete, anonymise or securely dispose of it.

19. Accessing and correcting your information

Subject to applicable law, you may request:

  • confirmation of whether we hold personal information about you;
  • access to personal information we hold about you;
  • correction of inaccurate or incomplete information; and
  • that a statement of correction be attached where a correction request is not accepted.

To make a request, use our Contact Us page and clearly state that the message concerns a privacy request.

We may need to verify your identity before providing access or making a correction.

Some information may be withheld where permitted or required by law.

20. Deletion, restriction and objection requests

Depending on your location and applicable law, you may also have rights to:

  • request deletion of certain personal information;
  • object to or restrict certain processing;
  • withdraw consent;
  • request a portable copy of certain information; or
  • opt out of certain targeted advertising or data sharing.

These rights are not absolute. We may need to retain information for legal, security, transaction, fraud-prevention or dispute-resolution purposes.

Privacy requests can be submitted through our Contact Us page.

21. Marketing preferences

You can unsubscribe from promotional emails by using the unsubscribe link included in the message.

You may also request an update to your marketing preferences through our Contact Us page.

It may take a short period for updated preferences to be applied across all systems and scheduled campaigns.

We may still send non-promotional communications necessary to administer an order, account, payment, delivery, product issue or legal obligation.

22. Children’s privacy

Our website and products are intended for a general audience and are not directed specifically at young children.

We do not knowingly collect personal information from children in a manner prohibited by applicable law.

If you believe a child has provided personal information without appropriate authority or consent, contact us so that we can review the matter.

23. Third-party websites and services

Our website may contain links to third-party websites, social-media platforms, payment services, courier sites or other external services.

We are not responsible for the privacy practices, content or security of independent third parties.

You should review the privacy policy of any third-party service before providing personal information.

24. Automated decision-making and fraud prevention

Shopify, payment providers and fraud-prevention services may use automated systems to identify potentially fraudulent, unauthorised or high-risk transactions.

These systems may analyse transaction details, account information, device information, IP addresses, order history and other risk signals.

An order may be delayed, reviewed, declined or cancelled where reasonably necessary to protect customers, payment providers or our business.

25. Your privacy choices

Depending on your location and the privacy features available on our website, you may be able to manage:

  • cookie consent;
  • marketing subscriptions;
  • targeted-advertising preferences;
  • data-sharing opt-out choices;
  • account information; and
  • access, correction or deletion requests.

Available privacy controls may appear in our website footer, cookie banner, account area or privacy settings.

26. Complaints

If you have a concern about how we have handled your personal information, please contact us through our Contact Us page.

We will review the concern and respond within a reasonable period.

You may also have the right to make a complaint to the New Zealand Office of the Privacy Commissioner or another applicable data-protection authority.

27. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes to our services, technology, providers, legal obligations or business practices.

The updated version will be published on this page with a revised “Last updated” date.

Where required by law, we may provide additional notice of significant changes.

28. Contact us

For privacy questions, requests or complaints, please use our Contact Us page and state that your message relates to privacy.

Our business details are:

Suki Bakery Ltd, trading as Lowrey Foods
Unit G&H, 28A Verissimo Drive
Mangere, Auckland 2022
New Zealand