Privacy Policy

LEG UP PRIVACY POLICY

Last updated: July 2026

Leg Up Equine is operated by Pure Oil New Zealand Limited.

Who we are

Pure Oil New Zealand Limited operates the Leg Up Equine website and online store at legup.nz.

In this policy, “Leg Up”, “we”, “us” and “our” refer to Pure Oil New Zealand Limited, trading as Leg Up Equine.

We are committed to handling personal information in accordance with the New Zealand Privacy Act 2020 and its information privacy principles.

Information we collect

The personal information we collect depends on how you interact with us.

Information you provide

We may collect information including:

  • your name;
  • email address;
  • telephone number;
  • billing and delivery addresses;
  • products ordered and transaction history;
  • payment and billing information;
  • communications you send to us;
  • product enquiries;
  • feedback and reviews;
  • competition or promotion entries;
  • survey responses;
  • marketing preferences;
  • email or SMS subscription details; and
  • any other information you choose to provide.

Customers are not currently required to create a traditional Leg Up website account. However, Shopify and its associated services may retain customer, checkout and order details to process purchases, support future checkouts, maintain order records and operate the online store.

Payment card information is processed through Shopify Payments or another payment provider made available at checkout. We do not ordinarily receive or retain your complete payment-card number.

Information collected automatically

When you visit our website, we and our service providers may automatically collect information such as:

  • your IP address;
  • browser and device type;
  • device identifiers;
  • approximate location derived from your IP address;
  • operating system;
  • pages and products viewed;
  • links or buttons selected;
  • dates and times of visits;
  • referring websites or advertising campaigns;
  • shopping-cart and checkout activity;
  • advertising interactions;
  • website errors and performance information; and
  • information stored or accessed through cookies, pixels, tags and similar technologies.

How we collect personal information

We may collect personal information:

  • directly from you when you place an order, contact us, subscribe to communications, submit a review, complete a survey or enter a competition;
  • automatically when you use our website;
  • from Shopify and other companies that help operate our online store;
  • from advertising and analytics platforms;
  • from review and customer-engagement platforms;
  • from social-media platforms when you interact with us or our advertisements; and
  • from another person where you have authorised them to provide the information or where collection is otherwise permitted by law.

Where practicable, we collect personal information directly from you.

Why we collect and use personal information

We may collect, use and retain personal information to:

  • process, fulfil and deliver orders;
  • process payments, refunds and exchanges;
  • communicate with you about an order or enquiry;
  • provide customer support;
  • retain customer and order records;
  • detect, investigate and prevent fraud, misuse or security incidents;
  • operate, maintain and improve our website;
  • understand how customers use our website;
  • measure the performance of products, content and advertising;
  • personalise website content and advertising;
  • send marketing communications where we have consent or are otherwise permitted to do so;
  • administer promotions, competitions, reviews or surveys;
  • request or publish customer feedback and product reviews;
  • comply with tax, accounting and other legal obligations;
  • establish, exercise or defend legal claims; and
  • carry out other purposes explained when the information is collected.

If you do not provide information needed to process an order, we may be unable to accept or deliver that order.

Shopify and Shopify Payments

Our online store is hosted through Shopify.

Shopify processes information required to operate the store, including information associated with your device, shopping cart, checkout, payment, customer details and order.

Payments made through Shopify Payments are processed by Shopify and its payment partners.

Shopify and its service providers may process or store information outside New Zealand.

Analytics, advertising and website tools

We use third-party technologies to operate the website, understand how it is used and measure our advertising.

Google Analytics 4

We use Google Analytics 4, commonly called GA4, to collect information about website visits and interactions.

This may include:

  • pages viewed;
  • website events completed;
  • approximate location;
  • device information;
  • traffic source;
  • checkout activity; and
  • information about the performance of our advertising and marketing.

Google may process this information using cookies, device identifiers and similar technologies.

Google Ads

We may use Google Ads conversion tracking and related Google advertising tools to understand whether advertising leads to website visits, enquiries or purchases.

Google may receive information about website interactions and advertising activity through cookies, tags and other identifiers.

Microsoft Clarity

We use Microsoft Clarity to understand how visitors interact with our website.

Clarity may record website interactions such as:

  • clicks;
  • scrolling;
  • navigation;
  • device information; and
  • session activity.

These recordings help us identify usability problems and improve the website.

We do not intentionally use Clarity to collect payment-card details or information entered into fields designated as sensitive. Some information may be masked or excluded according to our configuration and Microsoft’s systems.

Meta Pixel

We use the Meta Pixel, sometimes referred to as the Facebook Pixel, primarily to measure interactions with our website and the effectiveness of advertising on Facebook, Instagram and other Meta services.

Meta may receive information such as:

  • pages viewed;
  • products considered;
  • purchases or other website events;
  • browser information;
  • device information; and
  • cookie or advertising identifiers.

Meta may process this information in accordance with its own privacy terms.

Klaviyo

We use Klaviyo to manage customer communications and email marketing.

Klaviyo may process information including:

  • your name;
  • email address;
  • mobile number, where provided;
  • marketing preferences;
  • order activity;
  • products viewed;
  • website interactions; and
  • interactions with emails or other communications.

Although Klaviyo may support SMS marketing, we do not currently use customer mobile numbers for SMS marketing. We reserve the right to introduce SMS marketing in the future, subject to obtaining any consent required by law and updating our practices where necessary.

Yotpo

We use Yotpo to collect, manage and display customer reviews and other customer-generated content.

Yotpo may process information including your name, email address, order details, review content and interactions with review requests.

Reviews may be displayed publicly using the name or identifier selected when the review is submitted.

Google reCAPTCHA

We use Google reCAPTCHA v3 to help protect the website against spam, fraud and automated misuse.

reCAPTCHA may collect device, browser, interaction and usage information to assess whether activity is being carried out by a person or an automated system.

Use of reCAPTCHA is subject to Google’s privacy policy and terms.

YouTube embeds

Pages on our website may include embedded YouTube videos.

When you view or interact with an embedded YouTube video, Google or YouTube may collect information about your device, browsing activity and interaction with the video.

This may occur even where you do not have a YouTube account or are not signed in.

Cookies and similar technologies

Cookies are small files stored on your device or browser. We may also use pixels, tags, local storage and similar technologies.

These technologies may be used to:

  • keep the website and checkout functioning;
  • remember preferences and shopping-cart contents;
  • maintain website security;
  • prevent spam and automated misuse;
  • understand website traffic and performance;
  • measure advertising results;
  • manage reviews and customer communications;
  • personalise content or advertising; and
  • recognise repeat visits.

Some cookies are set by us and others are set by third parties, including Shopify, Google, Microsoft, Meta, Klaviyo and Yotpo.

You can control or delete cookies through your browser settings and any cookie controls made available on our website.

Blocking some cookies may affect how the website, checkout, embedded content or other features operate.

Browser settings and opt-out tools provided by Google, Microsoft and Meta may also allow you to control some analytics or personalised advertising.

Marketing communications

We may send you marketing emails or other commercial electronic messages where:

  • you have consented;
  • consent can reasonably be inferred from an existing business relationship; or
  • we are otherwise permitted to do so under New Zealand law.

Our marketing messages will identify the sender and include a way to unsubscribe.

You may unsubscribe using the link in a marketing email or by contacting us. We will action unsubscribe requests within the period required by New Zealand law.

Even after you unsubscribe from marketing, we may still send transactional or service messages relating to an order, enquiry, product-safety matter or legal obligation.

We do not currently use SMS marketing, although we may retain a mobile number where it was provided for order, delivery or customer-service purposes.

Who we share information with

We may disclose personal information to organisations that assist us with:

  • ecommerce hosting and website operation;
  • payment processing;
  • warehousing, freight and delivery;
  • information technology, hosting and security;
  • customer service;
  • accounting, auditing and professional advice;
  • email and customer-relationship management;
  • reviews and customer feedback;
  • analytics and website improvement;
  • advertising and social media;
  • spam and fraud prevention;
  • debt recovery;
  • legal or regulatory compliance; and
  • business restructuring, sale or transfer.

These providers may use information only for the services they provide to us, subject to their own legal obligations and contractual arrangements.

We may also disclose information:

  • with your authorisation;
  • where required or permitted by law;
  • to investigate suspected fraud or unlawful conduct;
  • to protect our rights, property, customers or staff; or
  • in connection with a proposed or completed sale, merger or restructuring of all or part of our business.

We do not sell customer databases or personal information to third parties for money.

Information processed outside New Zealand

Some of our service providers, including Shopify, Google, Microsoft, Meta, Klaviyo and Yotpo, operate internationally.

As a result, personal information may be processed or stored outside New Zealand, including in countries whose privacy laws differ from New Zealand law.

Where Information Privacy Principle 12 applies to a disclosure outside New Zealand, we will take reasonable steps to ensure that the disclosure is permitted by the Privacy Act 2020.

Some providers may receive information as our agents or process it under contractual protections.

Security

We take reasonable steps to protect personal information against loss, unauthorised access, misuse, modification or disclosure.

These measures may include:

  • access controls;
  • reputable ecommerce and payment platforms;
  • staff procedures;
  • account security measures; and
  • technical security protections.

No internet transmission or storage system can be guaranteed to be completely secure.

Privacy breaches

If a privacy breach occurs, we will assess and respond to it in accordance with the Privacy Act 2020.

Where a breach has caused, or is likely to cause, serious harm, we will notify the Office of the Privacy Commissioner and affected individuals as required by law.

Retention

We retain personal information only for as long as it is reasonably required for the purposes for which it was collected or as required by law.

Shopify and other service providers may retain customer, order and transaction information according to their own retention practices and legal obligations.

We may retain order and transaction information to meet:

  • tax and accounting requirements;
  • product traceability requirements;
  • customer-service needs;
  • dispute-resolution requirements; and
  • other legal obligations.

When information is no longer reasonably required, we may securely delete it or anonymise it.

Accessing and correcting your information

You may ask us to confirm whether we hold personal information about you and request access to that information.

You may also ask us to correct personal information that you believe is inaccurate, incomplete or out of date.

We will respond in accordance with the Privacy Act 2020. In some circumstances, the Act allows or requires us to withhold information, and we will explain the relevant reason where required.

We may need to verify your identity before providing or changing personal information.

Links to other websites

Our website may contain links to third-party websites or services.

Those websites have their own privacy practices, and we are not responsible for how they collect, use or protect information.

We recommend reviewing their privacy policies before providing personal information.

Changes to this policy

We may update this Privacy Policy when our business practices, service providers or legal obligations change.

The current version will be published on our website with the date it was last updated.

Material changes may also be communicated through the website or another appropriate channel.

Questions and complaints

For questions, access or correction requests, or concerns about our handling of personal information, contact:

Privacy Officer
Pure Oil New Zealand Limited
Trading as Leg Up Equine
25 Hoskyns Road
Rolleston 7675
New Zealand

Email: legup@pureoilnz.co.nz
Phone: +64 3 928 1734

Please provide enough information for us to understand and investigate your request.

If you are not satisfied with our response, you may make a complaint to the New Zealand Office of the Privacy Commissioner.