Privacy Policy
Your privacy matters to us - here's how we protect your information
1. Introduction
NINEBARNYARDOWLS ("we", "us", "our") is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with the Privacy Act 2020 and other applicable New Zealand laws.
By using our website and services, you consent to the collection and use of your information as described in this policy.
2. Information We Collect
2.1 Personal Information
We collect personal information that you voluntarily provide when you:
- Place an order: Name, email address, phone number, delivery address, billing address
- Create an account: Username, password, email address, date of birth (for age verification)
- Contact us: Name, email address, phone number, message content
- Subscribe to newsletter: Name, email address, preferences
- Participate in surveys or promotions: Survey responses, contest entries
2.2 Age Verification Information
Legal Requirement: Under the Sale and Supply of Alcohol Act 2012, we are required to verify that all customers are 18 years or older. We collect and verify age information for this purpose.
2.3 Payment Information
Payment information is processed by our secure third-party payment processors. We do not store details on our servers. We may retain:
- Transaction reference numbers
- Payment status and history
2.4 Automatically Collected Information
When you visit our website, we automatically collect certain technical information:
- Device information: IP address, browser type, operating system, device type
- Usage data: Pages visited, time spent, click patterns, referral sources
- Cookies and tracking: See our Cookie Policy below
- Location data: General location based on IP address
3. How We Use Your Information
3.1 Primary Purposes
We use your personal information for the following purposes:
- Order processing: To fulfill, deliver, and track your orders
- Customer service: To respond to inquiries, provide support, and resolve issues
- Age verification: To comply with legal requirements for alcohol sales
- Payment processing: To process transactions securely
- Communication: To send order confirmations, shipping updates, and important notices
- Account management: To maintain your account and preferences
3.2 Marketing and Communications
With your consent, we may use your information to:
- Send newsletters and promotional offers
- Inform you about new products and releases
- Invite you to events or tastings
- Share brewery news and updates
You can opt-out of marketing communications at any time by clicking the unsubscribe link in emails or contacting us directly.
3.3 Legal Compliance and Protection
We may use your information to:
- Comply with legal obligations and regulations
- Enforce our Terms of Service
- Prevent fraud and protect against security threats
- Respond to legal requests from authorities
4. Information Sharing and Disclosure
4.1 Third-Party Service Providers
We share your information with trusted third parties who assist us in operating our business:
- Shipping carriers: To deliver your orders (name, address, phone)
- Payment processors: To process transactions securely
- Email service providers: To send communications
- Website hosting: To maintain our online presence
- Analytics providers: To understand website usage
All third-party providers are contractually bound to protect your information and use it only for specified purposes.
4.2 Legal Requirements
We may disclose your information when required by law, including:
- In response to court orders or legal processes
- To comply with regulatory requirements
- To protect our rights, property, or safety
- To investigate potential violations of our terms
4.3 Business Transfers
In the event of a merger, acquisition, or sale of assets, your personal information may be transferred to the acquiring entity, subject to the same privacy protections.
4.4 No Sale of Personal Information
We do not sell, rent, or trade your personal information to third parties for marketing purposes.
5. Data Security
We implement appropriate technical and organizational measures to protect your personal information:
- Encryption: SSL/TLS encryption for data transmission
- Secure servers: Industry-standard security protocols
- Access controls: Limited access to personal information on a need-to-know basis
- Regular updates: Security patches and system updates
- Staff training: Privacy and security awareness for all team members
While we strive to protect your information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.
6. Data Retention
We retain your personal information for as long as necessary to:
- Fulfill the purposes outlined in this policy
- Comply with legal, tax, and accounting requirements (minimum 7 years for financial records)
- Resolve disputes and enforce agreements
- Maintain business records
When information is no longer needed, we securely delete or anonymize it in accordance with our data retention schedule.
7. Your Privacy Rights (Privacy Act 2020)
Under the Privacy Act 2020, you have the following rights regarding your personal information:
7.1 Right to Access
You have the right to request access to the personal information we hold about you. We will provide this information within a reasonable timeframe, usually within 20 working days.
7.2 Right to Correction
If your personal information is inaccurate, incomplete, or out-of-date, you have the right to request correction. We will take reasonable steps to correct the information.
7.3 Right to Deletion
You may request deletion of your personal information, subject to:
- Legal retention requirements
- Legitimate business purposes
- Ongoing contractual obligations
7.4 Right to Object
You can object to certain uses of your information, including:
- Marketing communications (opt-out anytime)
- Automated decision-making
- Data processing for certain purposes
7.5 How to Exercise Your Rights
To exercise any of these rights, please contact us using the details provided at the end of this policy. We may require verification of your identity before processing requests.
8. Cookies and Tracking Technologies
8.1 What Are Cookies?
Cookies are small text files stored on your device when you visit our website. They help us provide a better user experience.
8.2 Types of Cookies We Use
- Essential cookies: Required for website functionality (shopping cart, login sessions)
- Performance cookies: Help us understand how visitors use our site
- Functionality cookies: Remember your preferences and settings
- Marketing cookies: Track your activity for targeted advertising (with consent)
8.3 Managing Cookies
You can control cookies through your browser settings. Note that disabling essential cookies may affect website functionality.
9. Third-Party Links
Our website may contain links to third-party websites (e.g., social media, payment processors). We are not responsible for the privacy practices of these external sites. We encourage you to read their privacy policies.
10. Children's Privacy
Our website and services are intended for adults 18 years and older. We do not knowingly collect personal information from individuals under 18. If we become aware that we have collected information from someone under 18, we will delete it promptly.
11. International Data Transfers
Your information is primarily stored and processed in New Zealand. If we transfer information internationally, we ensure appropriate safeguards are in place to protect your data in accordance with New Zealand privacy laws.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will:
- Post the updated policy on our website
- Update the "Last Updated" date
- Notify you of material changes via email (if you have provided your email)
Your continued use of our services after changes constitutes acceptance of the updated policy.
13. Privacy Complaints
If you have concerns about how we handle your personal information:
- Contact us directly using the details below - we will investigate and respond within 20 working days
- If you're not satisfied with our response, you may contact the Office of the Privacy Commissioner:
- Website: www.privacy.org.nz
- Phone: 0800 803 909
- Email: enquiries@privacy.org.nz
Contact Information
For privacy-related questions, requests, or concerns, please contact us:
NINEBARNYARDOWLS Brewery
Gladstone, Wairarapa, New Zealand
Email: ninebarnyardowls@gmail.com
Subject: Privacy Inquiry
We will respond to all privacy requests within 20 working days.