Privacy policy

PRIVACY POLICY

Last updated: 8 September 2026

This Privacy Policy explains how Tango Lima Limited, trading as Dive360 (“Dive360”, “we”, “us” or “our”) collects, uses, stores and discloses personal information when you visit our website, purchase from us, create an account, communicate with us or otherwise use our services.

Tango Lima Limited
Trading as: Dive360
NZBN: 9429046325273
50 Cross Road
Tauranga 3110
New Zealand

Email: hello@dive360.co.nz
Phone: +64 7 578 4050

Privacy Officer: Tony Plank

Our ecommerce store is hosted by Shopify.

We handle personal information in accordance with the Privacy Act 2020 and other applicable New Zealand law.

1. Personal information we may collect

Depending on how you interact with Dive360, we may collect information including:

Contact information

your name;
email address;
telephone number;
billing address;
shipping address; and
other contact details you provide.

Order and transaction information

products viewed, ordered or returned;
order history;
delivery and collection information;
payment status;
refunds, exchanges and warranty claims; and
communications relating to your orders.

Account information

If you create a customer account, we may hold information associated with that account, including login and account preferences.

Payment information

Payments may be processed by Shopify and other payment service providers.

Dive360 does not necessarily receive or store your complete payment card details. Payment providers may collect and process this information directly in accordance with their own security and privacy requirements.

Communications

We may collect information you provide when you:

contact us by email, telephone, online form or other channel;
ask a product or service question;
submit a return or warranty request;
provide feedback or a review; or
otherwise communicate with Dive360.

Website and device information

When you use our website, information may be collected automatically, including:

IP address;
browser and device information;
pages viewed;
referring pages or websites;
website interactions;
approximate location information derived from your device or IP address; and
cookies, pixels and similar technologies.

2. How we collect personal information

We may collect personal information:

directly from you;
automatically when you use our website;
through Shopify;
from payment providers;
from delivery and courier providers;
from suppliers or service providers involved in fulfilling your order;
from marketing, advertising and analytics services;
from social-media platforms where you interact with Dive360; and
from other lawful sources.

3. Information collected indirectly

In some circumstances, we may receive personal information about you from another person, organisation or service rather than directly from you.

Where required by the Privacy Act 2020, including the indirect-collection requirements applying under Information Privacy Principle 3A, we will take reasonable steps to ensure you are informed about the collection unless an applicable exception applies.

4. How we use personal information

We may use personal information to process purchases and payments, confirm and manage orders, arrange shipping and delivery, provide Click & Collect, communicate about orders, process returns and refunds, manage warranty and Consumer Guarantees Act claims, and provide customer support.

We may also use information to operate our Shopify store, maintain customer accounts, improve our website and customer experience, understand website usage, assess product and website performance, manage stock and services, maintain business records, and improve our systems and processes.

We may use personal information to verify transactions, protect customer accounts, detect suspected fraud or misuse, maintain website and payment security, investigate unlawful or unauthorised activity, comply with New Zealand law and meet other legitimate legal or regulatory requirements.

5. Marketing communications

Where permitted by law, Dive360 may send marketing communications about products, promotions, reviews, comparisons, news or other Dive360 content.

Marketing communications may include email and, where offered, other electronic messaging channels.

We will comply with applicable requirements under the Unsolicited Electronic Messages Act 2007, including requirements relating to consent, sender identification and unsubscribe facilities.

You may unsubscribe from marketing communications at any time by using the unsubscribe option provided in the communication or by contacting us.

Unsubscribing from marketing communications does not prevent us from sending transactional messages reasonably necessary for an order, account, delivery, return or customer-service matter.

6. Cookies, analytics and advertising technologies

Dive360 and our service providers may use cookies, pixels and similar technologies to:

operate the website;
remember preferences;
understand website traffic and usage;
measure advertising effectiveness;
improve our website and marketing;
personalise content where appropriate; and
support advertising and remarketing activities.

Services used by Dive360 may include platforms operated by:

Shopify;
Google;
Meta;
TikTok;
email or messaging providers;
analytics providers; and
advertising and marketing services.

The exact technologies used by Dive360 may change as the website and marketing systems develop.

MANUAL REVIEW BEFORE LAUNCH: This list must be checked again after Dive360's final Shopify apps, pixels and marketing integrations have been installed so that this Privacy Policy accurately reflects the services and technologies the store actually uses.

7. Shopify

Dive360's ecommerce store is hosted by Shopify.

Shopify processes certain personal information in connection with providing the ecommerce platform, including information relating to website use, customer accounts, purchases, payments and other store functions.

Information may be processed by Shopify and its service providers in countries outside New Zealand.

Shopify has its own privacy practices and policies governing the information it processes.

8. Who we may disclose personal information to

Where reasonably necessary for the purposes described in this policy, we may disclose personal information to:

Shopify;
payment processors and payment service providers;
courier, freight and delivery providers;
suppliers involved in fulfilling an order;
IT, website and ecommerce service providers;
analytics providers;
advertising and marketing platforms;
email and messaging providers;
professional advisers such as accountants, lawyers and insurers;
regulators, government agencies or law-enforcement authorities where required or permitted by law; and
other service providers reasonably required to operate Dive360.

We do not disclose personal information simply because another party requests it. Disclosure must have a lawful and legitimate basis.

9. Overseas processing and disclosure

Some of the technology and service providers used by Dive360 may process or store personal information outside New Zealand.

Where the disclosure of personal information overseas is governed by Information Privacy Principle 12 of the Privacy Act 2020, we will take reasonable steps to ensure that the applicable requirements are met.

This may include assessing whether an overseas recipient is subject to comparable privacy safeguards or using appropriate contractual or other protections.

Different rules may apply where an overseas provider processes information on our behalf without using it for its own purposes.

10. Security

We take reasonable steps to protect personal information against loss, unauthorised access, misuse, alteration and unauthorised disclosure.

We use Shopify and other service providers to support the security and operation of our ecommerce systems.

No internet or electronic storage system can be guaranteed to be completely secure.

11. Privacy breaches

If a privacy breach occurs, Dive360 will assess the breach and take appropriate steps to contain and respond to it.

Where a privacy breach causes or is likely to cause serious harm, we will notify the Office of the Privacy Commissioner and affected individuals where required by the Privacy Act 2020.

12. Retention of personal information

We retain personal information only for as long as it is reasonably required for the purposes for which it was collected or to meet legal, tax, accounting, warranty, dispute-resolution and other legitimate business requirements.

When personal information is no longer reasonably required, we may securely delete, anonymise or otherwise dispose of it where appropriate.

13. Accessing or correcting your information

Under the Privacy Act 2020, you may request access to personal information we hold about you and request correction of information you believe is incorrect.

To make a request, contact:

Privacy Officer: Tony Plank
Email: hello@dive360.co.nz

We may need to verify your identity before providing information.

There are limited circumstances under New Zealand law where access may lawfully be withheld.

If we do not make a correction you request, you may have the right to ask us to attach a statement of correction to the information.

14. Marketing preferences

You may ask us to stop sending marketing communications at any time.

You can use the unsubscribe link in an email or contact hello@dive360.co.nz.

We may still contact you where necessary in relation to an existing order, delivery, account, return, warranty issue or other transactional matter.

15. Children's privacy

Dive360 does not knowingly seek to collect personal information from children for marketing purposes without appropriate authority or consent where this is required.

If you believe a child has provided personal information to us inappropriately, please contact our Privacy Officer.

16. Third-party websites

Our website may contain links to websites operated by manufacturers, suppliers, social-media platforms or other third parties.

Those organisations have their own privacy practices.

Dive360 is not responsible for the privacy practices of an independent third-party website merely because our website contains a link to it.

We recommend reviewing the privacy information provided by those organisations.

17. Privacy complaints

If you have a concern about how Dive360 has handled your personal information, please contact our Privacy Officer first so we can investigate the matter.

Privacy Officer: Tony Plank
Email: hello@dive360.co.nz
Phone: +64 7 578 4050

You may also make a complaint to the Office of the Privacy Commissioner of New Zealand.

18. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in:

our website;
Shopify apps and integrations;
marketing and analytics technology;
business practices;
service providers; or
applicable law.

The current version will be published on our website with its updated date.

19. Contact us

For privacy questions, access or correction requests, or concerns about how your personal information has been handled, contact:

Tango Lima Limited, trading as Dive360
NZBN 9429046325273