Privacy Policy

Effective Date: January 15, 2026

Last Updated: January 15, 2026

1. Introduction

This Privacy Policy describes how ochre-tide.cyou ("we," "us," or "our") collects, uses, and protects your personal information when you use our website and services. We are committed to protecting your privacy and handling your data in accordance with applicable New Zealand privacy laws, including the Privacy Act 2020.

2. Information We Collect

2.1 Personal Information

When you interact with our services, we may collect the following personal information:

• Name and contact details (email address, delivery address)
• Order history and service preferences
• Communication records (emails, enquiries, support requests)
• Payment information (processed securely through third-party payment providers)

2.2 Technical Information

We automatically collect certain technical information when you visit our website:

• IP address and browser type
• Device information and operating system
• Pages visited and time spent on our website
• Referring website addresses
• Cookie data (see our Cookies Policy for details)

3. How We Use Your Information

We use your personal information for the following purposes:

• Processing and fulfilling your orders and subscriptions
• Communicating with you about your orders, deliveries, and account
• Responding to your enquiries and providing customer support
• Improving our services and website functionality
• Sending you information about our services (with your consent)
• Complying with legal obligations and enforcing our terms

4. Legal Basis for Processing

We process your personal information based on:

• Contract Performance: Processing necessary to fulfil our service obligations to you
• Legitimate Interests: Operating and improving our business, fraud prevention, and network security
• Consent: Where you have provided explicit consent for specific processing activities
• Legal Compliance: Meeting legal and regulatory requirements

5. Information Sharing and Disclosure

We do not sell your personal information. We may share your information with:

• Partner Farms: Necessary delivery and order information to fulfil your subscriptions
• Service Providers: Third parties who assist with payment processing, delivery logistics, and website hosting
• Legal Authorities: When required by law or to protect our rights and safety

All third parties are required to maintain the confidentiality and security of your information.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Secure socket layer (SSL) encryption for data transmission
• Regular security assessments and updates
• Restricted access to personal information on a need-to-know basis
• Secure storage systems with access controls

However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

7. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this policy, unless a longer retention period is required by law. Generally:

• Active customer data is retained for the duration of your relationship with us
• Order and transaction records are retained for seven years for accounting and tax purposes
• Marketing consent records are maintained until you withdraw consent

8. Your Privacy Rights

Under New Zealand privacy law, you have the following rights:

• Access: Request access to your personal information we hold
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal obligations)
• Objection: Object to certain processing activities
• Data Portability: Request a copy of your information in a structured format
• Withdraw Consent: Withdraw consent for processing activities based on consent

To exercise these rights, contact us at [email protected]

9. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately.

10. International Data Transfers

Your personal information is primarily processed and stored within New Zealand. If we transfer information internationally, we ensure appropriate safeguards are in place to protect your information in accordance with this policy and applicable law.

11. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting the updated policy on our website with a new effective date. Your continued use of our services after changes constitutes acceptance of the updated policy.

12. Contact Information

If you have questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us:

Email: [email protected]

Address: 47 Harewood Road, Christchurch 8053, New Zealand

If you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Privacy Commissioner of New Zealand.