01Who we are
TOMI SELECT Limited, 12 Queen Street, Auckland CBD 1010, is responsible for the personal information described in this policy. We follow the Information Privacy Principles in the Privacy Act 2020.
02What we collect
- Account and contact details: name, email, phone, delivery and billing addresses, date of birth if you choose to add it.
- Orders and payments: what you buy, return and save. Card details are handled by Stripe; we keep only the card brand, last four digits and expiry.
- Style profile: sizes, preferred colours, brands, budget and occasions you tell us about.
- Photos you upload: try-on photos, closet items, Style Match images and community posts.
- Usage data: pages viewed, searches, device and browser type, approximate location from your IP address.
- Messages: support tickets, TOMI AI chats and comments.
03TOMI FIT photos
Your try-on photo is sensitive, so we treat it that way.
- It is stored privately and encrypted, and used only to render your try-ons.
- It is processed by our virtual try-on provider under a contract that prohibits them from keeping or reusing it. Renders are generated and returned; the provider deletes the inputs.
- It is never used for marketing, never shown to other customers and never used to train models.
- Shared try-on links show the render and the products only. You can revoke a shared link at any time.
- Delete any saved photo from the TOMI FIT page and it is removed from our systems within 24 hours, and from backups within 30 days.
04Other AI features
Closet photos are stored against your account so we can tag them and suggest outfits; delete them at any time. Style Match images are analysed once and deleted within 24 hours. TOMI AI and stylist conversations are kept for 12 months to improve answers for you, then deleted. Recommendations are generated automatically; a stylist reviews TOMI AI handoffs.
05How we use your information
- To process orders, deliveries, returns, membership and Style Boxes.
- To personalise what you see, from sizes in stock to Style Box curation.
- To provide customer service and TOMI AI.
- To prevent fraud and protect accounts.
- To send marketing, only if you have opted in.
- To understand how the site is used and improve it, using aggregated data.
08Storage, security and overseas transfer
Your information is stored with cloud providers in Australia and the United States. Where information leaves New Zealand, we make sure it is protected by comparable safeguards, as required by Information Privacy Principle 12.
We use encryption in transit and at rest, access controls and regular security reviews. If a privacy breach is likely to cause you serious harm, we will tell you and the Privacy Commissioner as soon as practicable.
09How long we keep it
Order and payment records are kept for 7 years to meet tax obligations. Account information is kept while your account is open and deleted or anonymised within 90 days of closing it. Photos follow the timeframes above.
10Your rights
Under the Privacy Act 2020 you can ask to see the personal information we hold about you and ask us to correct it. Most of it is available in your account, and you can download or delete your account from account settings.
We will respond within 20 working days. If you are not happy with how we handle a request or complaint, you can contact the Office of the Privacy Commissioner at privacy.org.nz.
11Children
Our services are not designed for children under 16, and we do not knowingly collect their information. Please do not upload photos of children to TOMI FIT or Style Match.
12Contact our Privacy Officer
Email privacy@tomiselect.co.nz or write to the Privacy Officer, TOMI SELECT Limited, 12 Queen Street, Auckland CBD 1010. We may update this policy; we will email you about significant changes.