Your privacy matters to me, just as much as what goes into every bottle. This policy explains what personal information I collect, why, and how I look after it, in line with the Privacy Act 2020 (NZ). This policy applies to anyone who visits this website, places an order, signs up to hear from me, or otherwise gets in touch with Instill Waiheke.

Depending on how you interact with the site, I may collect:

• Contact details: Name, email address, phone number, delivery and billing address.

• Order information: Products purchased, order history, payment confirmation.

• Account details: If you create an account, your login details and saved preferences.

• Communications: Messages you send me via email, contact forms, or social media.

• Marketing preferences: If you subscribe to my newsletter or mailing list.

• Website usage data: Collected automatically via cookies and analytics tools, such as pages visited, device/browser type and general location.

I only collect what's reasonably needed to run the website, fulfil orders and communicate with you.

I use your personal information to:

• process and deliver your orders;

• communicate with you about your order, enquiries or account;

• send you marketing updates, if you've opted in (you can unsubscribe anytime);

• improve this website and the products/experience I offer;

• meet legal, accounting or tax obligations;

• prevent fraud and keep the website secure.

I won't use your information for anything beyond what it was reasonably collected for, without asking you first. I don't sell your personal information. I may share it with trusted third parties only where necessary, including:

• Couriers and delivery providers, to get your order to you (NZ and international, as applicable).

• Payment processors (see Section 5), to securely process payment.

• Website and email service providers (e.g. hosting, e-commerce platform, email marketing platform), who help run the site and are bound to keep your information secure and confidential.

• Professional advisors (e.g. accountant), where necessary for business operations.

• Authorities, if required by law.

Any third party I work with is expected to protect your information and use it only for the purpose I've engaged them for.

Payments made through this website are processed by a secure third-party payment provider Stripe. I do not store your full card details on my systems, these are handled directly by the payment provider in accordance with their own security standards and privacy policy.

This website may use cookies and similar technologies to:

• remember items in your cart;

• understand how visitors use the site (e.g. via analytics tools such as Google Analytics);

• support advertising or social media integrations, if used.

You can adjust your browser settings to block or delete cookies, though this may affect some website functionality (like your cart working properly).

Your information is stored securely using reputable third-party platforms (e.g. website hosting and e-commerce providers), which may store data on servers located overseas. I take reasonable steps to ensure any overseas storage is handled by providers with appropriate security and privacy safeguards, in line with the Privacy Act 2020. I take reasonable technical and organisational measures to protect your personal information from loss, misuse, or unauthorised access, but no online system can be guaranteed 100% secure. I keep personal information only as long as reasonably necessary, e.g. to fulfill orders, meet tax/accounting record-keeping obligations (generally 7 years under NZ tax law), or until you ask me to delete it, whichever is longer where legally required.

Under the Privacy Act 2020, you have the right to:

• ask what personal information I hold about you;

• request a correction if any of it is wrong or out of date;

• ask me to delete your information (subject to any legal obligation to retain it, e.g. financial records);

• unsubscribe from marketing communications at any time (via the unsubscribe link in any email, or by contacting me directly).

To make a request, contact me using the details below. I'll respond within a reasonable timeframe, generally within 20 working days as required by law.

This website is not intended for children, and I don't knowingly collect personal information from children without parental consent.

I may update this policy from time to time to reflect changes to the website, my practices, or the law. The updated version will be posted here with a new "last updated" date.

f you have concerns about how your personal information has been handled, please contact me first at paola@pandpdashwood.com so I can try to resolve it. You also have the right to contact the Office of the Privacy Commissioner www.privacy.org.nz if you're not satisfied with the outcome.

If you have any questions about this policy, please get in touch at:

Instill Waiheke

paola@pandpdashwood.com 

Updated: 17/9/1926