Privacy Policy

Last updated:

1. Controller Information

The data controller responsible for the personal data collected through this website is:

2. Data We Collect

We collect the following categories of personal data when you interact with our website or place an order:

• Full name
• Email address
• Phone number
• Delivery address
• Order details and correspondence
• Technical data: IP address, browser type, device information, pages visited (via cookies)

3. Purposes and Legal Basis

We process your personal data for the following purposes and on the following legal bases:

• Order processing and fulfilment — Legal basis: performance of a contract (Article 6(1)(b) GDPR; NZ Privacy Act 2020 Information Privacy Principle 1).
• Customer communication — Legal basis: legitimate interests or consent, depending on the nature of communication.
• Legal compliance — Legal basis: compliance with applicable law (Article 6(1)(c) GDPR).
• Website analytics and improvement — Legal basis: consent (for non-essential cookies) or legitimate interests.

4. Retention Periods

We retain your personal data only for as long as necessary for the purposes described above:

• Order and transaction records: 7 years (to comply with NZ tax and accounting obligations).
• Customer service correspondence: 3 years from the last interaction.
• Website analytics data: up to 26 months.
• Consent records: until consent is withdrawn, plus 2 years thereafter.

After the applicable retention period, data is securely deleted or anonymised.

5. Data Sharing and Third Parties

We do not sell your personal data. We may share your data with trusted third-party service providers who assist us with order fulfilment, payment processing, and website hosting. All processors are bound by data processing agreements and are required to maintain appropriate security measures. We do not transfer your data to countries outside the European Economic Area or New Zealand without adequate safeguards in place.

6. Your Rights

Under the New Zealand Privacy Act 2020 and, where applicable, the GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request erasure of your data (where legally permitted)
• Object to or restrict certain processing
• Data portability (where applicable under GDPR)
• Withdraw consent at any time (without affecting the lawfulness of prior processing)
• Lodge a complaint with the Office of the Privacy Commissioner (New Zealand) or your local supervisory authority

To exercise any of these rights, contact us at the address above. We will respond within 20 working days as required under the NZ Privacy Act.

7. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. Our website uses HTTPS encryption for all data transmitted between your browser and our servers.

8. Cookies

We use cookies and similar tracking technologies on this website. For full details, please see our Cookie Policy.

9. Children

Our website and products are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Continued use of the website after changes constitutes acceptance of the updated policy.

11. Contact

For any questions or requests relating to this Privacy Policy or your personal data, please contact us at: