Privacy Policy

Last Updated: August 17, 2026

This Privacy Policy describes how PINK ADMIN LIMITED (“we”, “us”, or “our”) collects, uses, discloses, stores, and protects your personal data when you visit or make a purchase from cmibp.shop (the “Website”), contact us, or otherwise use our services.

We respect your privacy and process personal data in accordance with applicable data protection laws, including, where applicable, the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable German data protection and privacy laws.

1. Data Controller

The controller responsible for the processing of your personal data is:

PINK ADMIN LIMITED
Peter Stewart
40 Ireland Street
Freemans Bay
Auckland 1011
New Zealand

Company Registration Number: 9341597
Website: cmibp.shop
Email: support@cmibp.shop
Telephone: +64 21 440 592

For questions regarding this Privacy Policy or the processing of your personal data, please contact us at support@cmibp.shop.

2. Personal Data We Collect

Depending on how you interact with our Website, we may collect the following categories of personal data:

Identity and Contact Information

This may include:

• first and last name;

• billing address;

• shipping address;

• email address;

• telephone number; and

• other contact information you provide to us.

Order and Transaction Information

When you place an order, we may collect:

• products ordered;

• order number;

• order value;

• delivery information;

• payment method;

• order and transaction history;

• return, refund, or cancellation information; and

• information necessary to process Cash on Delivery (“COD”) orders.

Payment Information

Our store may offer different payment methods, including Cash on Delivery (COD).

Where a third-party payment provider is used, payment information may be processed directly by that provider. We generally receive only the information necessary to confirm and manage your transaction.

For COD orders, we process the information required to prepare, dispatch, deliver, and administer payment for the order.

Device and Technical Information

When you use our Website, certain technical information may be collected automatically, including:

• IP address;

• browser type and version;

• device type;

• operating system;

• language settings;

• approximate location derived from technical information;

• pages viewed;

• referring website;

• date and time of access; and

• interactions with our Website.

Customer Service Information

If you contact us, we may process:

• your name and contact details;

• order information;

• the contents of your message;

• correspondence history; and

• any other information you voluntarily provide.

Marketing and Preference Information

Where applicable, we may process information concerning:

• newsletter subscriptions;

• marketing preferences;

• cookie choices;

• advertising preferences; and

• consent records.

3. How We Collect Personal Data

We may collect personal data:

• directly from you when you place an order, contact us, or submit information through the Website;

• automatically through your use of our Website;

• through cookies and similar technologies;

• through Shopify, which provides our e-commerce platform;

• from delivery and logistics providers;

• from payment providers where applicable; and

• from service providers that help us operate, secure, analyze, or market our Website.

4. Purposes and Legal Bases for Processing

Where the GDPR applies, we process personal data only where we have a valid legal basis.

Performance of a Contract

We process personal data where necessary to:

• process your order;

• arrange shipping and delivery;

• administer Cash on Delivery orders;

• provide customer support;

• process returns and refunds;

• communicate with you regarding your order; and

• fulfill our contractual obligations.

The legal basis is Article 6(1)(b) GDPR.

Compliance With Legal Obligations

We may process personal data where necessary to comply with legal obligations relating to:

• accounting;

• taxation;

• consumer protection;

• fraud prevention;

• regulatory requirements; and

• lawful requests from authorities.

The legal basis is Article 6(1)(c) GDPR.

Legitimate Interests

Where appropriate, we may process personal data for our legitimate business interests, including:

• protecting our Website and business against fraud and abuse;

• maintaining Website security;

• improving our services;

• responding to customer inquiries;

• managing business operations; and

• establishing, exercising, or defending legal claims.

The legal basis is Article 6(1)(f) GDPR, provided that our interests are not overridden by your fundamental rights and freedoms.

Consent

Where required, we rely on your consent for activities such as:

• non-essential cookies;

• analytics technologies;

• advertising and marketing technologies;

• personalized marketing; and

• certain electronic marketing communications.

The legal basis is Article 6(1)(a) GDPR.

You may withdraw your consent at any time with effect for the future.

5. Shopify

Our online store is hosted on Shopify.

Shopify provides the e-commerce infrastructure that enables us to display products, manage our store, process orders, administer customer information, and provide related services.

As a result, personal data may be processed by Shopify and its affiliated companies and authorized service providers in connection with the operation of our store.

Shopify may process personal data in different countries and uses appropriate data protection mechanisms for international transfers where required by applicable law.

Our use of Shopify does not remove our responsibility to comply with applicable data protection requirements.

6. Order Processing and Cash on Delivery

When you place an order through cmibp.shop, we use your personal data to:

• confirm your order;

• prepare the products for dispatch;

• communicate with you regarding your order;

• verify delivery information;

• arrange delivery;

• administer COD payment;

• manage failed or refused deliveries;

• process returns and refunds; and

• provide customer service.

For COD orders, information such as your name, delivery address, telephone number, order amount, and other necessary delivery information may be shared with shipping, courier, fulfillment, or logistics partners.

This processing is necessary to perform our contract with you.

7. Sharing of Personal Data

We may disclose personal data only where necessary for legitimate business or legal purposes.

Recipients may include:

Shopify

Shopify provides the technical and e-commerce infrastructure for our online store.

Shipping, Fulfillment, and Logistics Providers

We may share information such as your name, delivery address, telephone number, order details, and COD amount where necessary to deliver your order.

Payment Providers

Where electronic payment methods are offered, relevant information may be transferred to payment service providers for transaction processing, fraud prevention, or refund administration.

IT and Hosting Providers

Service providers may assist us with Website hosting, security, technical support, data storage, communications, and related infrastructure.

Analytics and Advertising Providers

Where you have provided consent where required, we may use analytics or advertising providers to measure Website usage, understand advertising effectiveness, or provide personalized advertising.

Professional Advisers

We may disclose information to lawyers, accountants, auditors, insurers, or other professional advisers where reasonably necessary.

Authorities

We may disclose personal data where required by law, legal process, court order, or a lawful request from a competent authority.

We do not sell personal data simply in exchange for monetary payment.

8. Cookies and Similar Technologies

Our Website uses cookies and similar technologies.

Some cookies are necessary for the Website to function properly, including cookies used for:

• shopping cart functionality;

• checkout;

• security;

• session management;

• authentication; and

• remembering essential settings.

Other cookies and technologies may be used for:

• analytics;

• performance measurement;

• advertising;

• marketing; and

• personalization.

Where required by applicable German or European law, non-essential cookies and similar technologies will only be used after you have provided the required consent.

You can manage your choices through the cookie banner or privacy settings available on our Website.

You may withdraw or modify your consent at any time for future processing.

Disabling certain cookies may affect some Website features.

9. Marketing Communications

Where permitted by law, we may send you marketing communications about our products, promotions, or services.

Where consent is required, we will only send such communications after obtaining your consent.

You can unsubscribe at any time by:

• using the unsubscribe option contained in the marketing communication; or

• contacting us at support@cmibp.shop.

Withdrawing your marketing consent does not affect transactional communications that are necessary to manage an existing order or customer service request.

10. International Data Transfers

PINK ADMIN LIMITED is established in New Zealand.

Accordingly, personal data relating to customers in Germany or other EEA countries may be transferred to and processed in New Zealand.

Where personal data is transferred to another country, we take appropriate steps to ensure that the transfer complies with applicable data protection law.

Where required, international transfers may be protected through:

• an applicable European Commission adequacy decision;

• Standard Contractual Clauses approved by the European Commission; or

• another legally recognized transfer mechanism.

Some of our service providers, including providers supporting our Shopify store, may process information in countries outside Germany or the European Economic Area.

11. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected.

The applicable retention period may depend on:

• the duration of our customer relationship;

• order fulfillment;

• returns and refunds;

• customer service requirements;

• accounting and tax obligations;

• legal limitation periods;

• fraud prevention;

• dispute resolution; and

• other applicable legal obligations.

Once personal data is no longer required, we will delete, anonymize, or otherwise securely dispose of it, unless continued storage is required or permitted by law.

12. Data Security

We use reasonable technical and organizational measures designed to protect personal data against:

• unauthorized access;

• accidental or unlawful destruction;

• loss;

• alteration;

• unauthorized disclosure; and

• misuse.

However, no method of transmission over the Internet or electronic storage system can be guaranteed to be completely secure.

You should therefore take reasonable precautions to protect your account information, devices, and communications.

13. Your Rights Under the GDPR

If the GDPR applies to the processing of your personal data, you may have the following rights, subject to the conditions and limitations provided by law:

Right of Access

You may request information about whether we process your personal data and obtain a copy of personal data we hold about you.

Right to Rectification

You may request correction of inaccurate personal data and completion of incomplete personal data.

Right to Erasure

You may request deletion of your personal data where the legal requirements for deletion are satisfied.

Right to Restriction of Processing

You may request that we restrict the processing of your personal data in certain circumstances.

Right to Data Portability

Where applicable, you may request to receive certain personal data in a structured, commonly used, and machine-readable format and request that it be transferred to another controller.

Right to Object

Where processing is based on our legitimate interests, you may have the right to object to that processing based on your particular circumstances.

Where personal data is processed for direct marketing purposes, you may object to such processing at any time.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw your consent at any time.

Withdrawal does not affect the lawfulness of processing carried out before your consent was withdrawn.

Right to Lodge a Complaint

You have the right to lodge a complaint with a competent data protection supervisory authority if you believe that the processing of your personal data infringes applicable data protection law.

To exercise your privacy rights, please contact:

support@cmibp.shop

We may need to verify your identity before responding to certain requests.

14. Automated Decision-Making

We do not intend to make decisions about customers based solely on automated processing that produce legal effects or similarly significantly affect them, unless such processing is legally permitted and appropriate safeguards are provided.

Some service providers may use automated systems for purposes such as fraud detection, security, or transaction risk assessment.

15. Third-Party Websites

Our Website may contain links to websites or services operated by third parties.

We are not responsible for the privacy practices, content, or security of independent third-party websites.

We recommend reviewing the privacy policy of any third-party website before providing personal data.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in:

• our business practices;

• our Website;

• the services we use;

• applicable laws or regulations; or

• other operational, legal, or regulatory requirements.

When we make changes, we will publish the revised version on this page and update the “Last Updated” date where appropriate.

17. Contact Us

If you have questions about this Privacy Policy, how we process personal data, or if you wish to exercise your data protection rights, please contact us:

PINK ADMIN LIMITED
Peter Stewart
40 Ireland Street
Freemans Bay
Auckland 1011
New Zealand

Company Registration Number: 9341597
Website: cmibp.shop
Email: support@cmibp.shop
Telephone: +64 21 440 592