This website is operated by [BIG NZ Ltd / legal entity name] trading as Crumbles Millet Cookies. Throughout this policy, “we”, “us” and “our” refer to that business. We’re committed to protecting the privacy of your personal information, and we’ve written this policy to be as clear and friendly as possible.
This policy explains how we collect, store, use and disclose personal information about our customers [and people who apply to work with us], and how we comply with the New Zealand Privacy Act 2020 (the “Privacy Act”). It also explains how to contact us if you have questions about your personal information or would like to see what we hold about you.
It applies whenever you buy our cookies, visit our website or other digital platforms, get in touch or interact with us (including on social media), enter a competition or complete a survey [or visit one of our stalls or stores].
In this policy, “personal information” has the same meaning as in the Privacy Act: information about an identifiable person.
Information we collect from you and about you
Generally, the information we collect about our customers includes:
- Your name, delivery address, phone number and email address
- Details of the products you’ve ordered from us
- Payment and billing information
- [Your birthdate, if you choose to share it, for example for birthday treats]
- Anything else you share with us when we interact, including on social media
We may also collect general information that isn’t unique to you, such as your postcode, [age, gender,] shopping preferences, interests and favourites.
When you visit our website, we may collect information about your device, including your IP address, the date, time and length of your visit, the pages you view, the website you came from and the type of browser you use. We also use cookies (see “Cookies and similar technologies” below).
A note on payments: your card details are handled by our secure payment provider. We don’t see or store your full card number.
Information we receive from other sources
Sometimes we receive information about you from someone other than you. For example, our payment provider may confirm that your payment went through, our couriers may confirm your delivery, or a friend may send you a gift and give us your delivery details. We use this information only for the purposes set out in this policy.
How we collect and hold your information
Where it’s reasonable and practicable, we collect your information directly from you. This might be through our customer service team, by phone, email, post or our website, when you complete a survey or form, when you enter a competition or promotion, when you message us on social media such as Facebook or Instagram [or when you speak with our team in person].
We take all reasonable steps to protect your personal information from misuse, loss, unauthorised access, modification or disclosure. Your information is held securely in our customer database in line with the Privacy Act.
Why we collect and use your information
We use your personal information to:
- Process your orders and payments, and deliver your cookies to you
- Answer your questions and give you information or advice
- Deal with your feedback or complaints, and process refunds and discounts
- Make your experience with us better and more personal
- Understand what our customers need and enjoy, and carry out product and market research
- Run promotions, competitions and events, and send you offers we think you’ll love (only if you’ve chosen to hear from us)
- Analyse trends and manage our business, including supply, logistics and inventory
- Contact you about product recalls or safety matters
- Prevent fraud, loss and theft, and investigate any suspected breach of our terms or unlawful activity
- Carry out our everyday administrative and operational work
Who we share your information with
We don’t sell your personal information. We share it only where it’s needed for the purposes above, where the law permits or requires it, or where you’ve agreed to it. The people we share it with may include:
- Our employees, contractors and trusted service providers, but only as far as they need it to do their job. These may include couriers (such as NZ Post and Aramex), payment processors, website and IT providers, email and marketing providers, research agencies, lawyers and business advisers
- Suppliers who help with delivery or with product recalls
- The NZ Police, emergency services, or government departments and regulators, where needed for law enforcement or emergencies, or where we’re required by law
We ask everyone we share your information with to protect it from unauthorised use, access or disclosure, as the Privacy Act requires.
Information stored or shared overseas
From time to time, we may share your information with organisations outside New Zealand. For example, where we use service providers based overseas, where an international payment is involved, or where we need to meet a foreign legal requirement. We take reasonable steps to make sure overseas recipients use your information only for the purpose we gave it to them and protect it with appropriate confidentiality and data protection safeguards.
Cookies and similar technologies
Our website uses “cookies”, which are small files we store on your device so we can recognise it when you return. They help us keep your cart working, remember you as a returning customer and personalise your visit with useful information and offers.
We may also collect information such as your IP address, browser and browsing activity to improve our products, services and website. We may link this with other information we hold about you so we can offer more relevant content and offers.
Some outside companies that offer products or services through our website may use their own cookies. You can choose to decline cookies in your browser settings, but some interactive features of our website may not work as well.
Marketing emails and messages
We’ll only send you marketing emails or messages if you’ve signed up or otherwise agreed. You can unsubscribe at any time by using the link in any email or by contacting us. We’ll still send you important messages about your orders.
Food allergies and dietary information
If you tell us about an allergy or dietary requirement, for example in an order note, we’ll use it only to help with your order and keep it private. Our cookies contain wheat, so please always check the ingredients list on each box.
Keeping your information safe
We understand that the safety and security of your personal information matters to you, and it matters to us too. We use reasonable measures to protect your information and our website, and we ask any third parties we share your information with to do the same. Even so, no website can be completely secure.
If a privacy breach happens that’s likely to cause you serious harm, we’ll tell you and the Office of the Privacy Commissioner as the law requires.
How long we keep your information
We keep your information only for as long as we need it for the purposes in this policy, or as the law requires (for example, for tax and accounting records). [Suggested: 7 years for order and financial records.] After that, we’ll delete it or make it anonymous.
Your rights
You can ask to see the personal information we hold about you, or ask us to correct it if it’s wrong or out of date. You can also unsubscribe from marketing at any time. We’ll deal with your request in line with the Privacy Act and may need to confirm your identity first, to make sure your information goes only to you.
Children
Our website is intended for adults. We don’t knowingly collect personal information from children under 16. If you think a child has given us their information, please let us know and we’ll delete it.
Links to other websites
Our website may link to other sites through hyperlinks, banner advertising or otherwise. We aren’t responsible for the privacy practices of those sites, so we encourage you to read their privacy policies.
Changes to this policy
We may update this policy from time to time by posting the new version on our website. We’ll change the “Last updated” date at the top and let you know about any significant changes by email or a notice on our site.
Questions or concerns?
If you have a question about this policy or how we look after your information, or you’d like to access or correct your information, we’d love to help. Please email us at [support@yourdomain.co.nz].
If you’re not happy with how we’ve handled your information, please talk to us first so we can put things right. You can also make a complaint to the Office of the Privacy Commissioner at www.privacy.org.nz.
Pages
