Privacy policy

We take privacy seriously — not because we have to, but because it’s part of how Tatawai is built. This policy explains clearly what information we collect, why we collect it, and who we share it with.

We handle personal information in accordance with the New Zealand Privacy Act 2020.


What we collect

We may collect personal information such as:

  • Contact details (name, email address, phone number) 
  • Billing and shipping information (address, postcode, country) 
  • Order and transaction details (products purchased, order value, order status) 
  • Account information (login details, preferences, communication history) 
  • Technical data (IP address, browser type, device information, pages visited) 

  • Marketing preferences (whether you have opted in to receive communications) 


How we collect information

We collect information when you:

  • Place an order through our website 
  • Subscribe to our emails or join the Founders List 
  • Contact us directly (e.g. email or form submissions) 
  • Interact with our website through cookies or tracking tools 
  • Engage with our content or advertising on social media 


How we use your information

We use your information to:

  • Process and deliver your orders 
  • Communicate with you about orders or service updates 
  • Provide customer support 
  • Improve our website, products, and services 
  • Send marketing communications (where you have consented or where permitted by law) 
  • Maintain security, prevent fraud, and meet legal obligations 

You can unsubscribe from marketing communications at any time using the link provided in our emails.


Sharing your information

We share personal information only where necessary to operate our business, including with trusted service providers such as:

  • Ecommerce and hosting platforms (e.g. Shopify) 
  • Payment providers and gateways 
  • Shipping and fulfilment providers (e.g. Zappy)
  • Email and marketing platforms 
  • Analytics and performance tools 
  • Advertising platforms (including Meta) 

These providers are required to use your information only for the services they provide to us, or as otherwise permitted by law.


Meta (Facebook and Instagram)

We may use Meta platforms to run and measure advertising.

If you interact with our content or advertisements on Facebook or Instagram, Meta may collect and process information about your activity in accordance with its own privacy policies and settings.

Where tracking tools (such as pixels) are used on our website, they may collect information about your browsing activity to help us measure performance and improve relevance.


Cookies and tracking

We use cookies and similar technologies to:

  • Understand how our website is used 
  • Improve functionality and performance 
  • Provide a more relevant experience 

You can manage cookie preferences through your browser settings. Some features of the site may not function fully if cookies are disabled.


Storage and international transfers

Some of our service providers may store or process your information outside New Zealand.

Where this occurs, we take reasonable steps to ensure appropriate safeguards are in place.


How long we keep your information

We retain personal information only as long as necessary to:

  • provide our services 
  • meet legal and tax obligations 
  • support legitimate business operations 


How we protect your information

We take reasonable steps to protect your personal information from loss, misuse, and unauthorised access or disclosure.

Where we disclose information to international service providers, we ensure they are subject to privacy obligations that provide comparable safeguards to those under the New Zealand Privacy Act 2020

In the event of a privacy breach that we believe has caused (or is likely to cause) serious harm, we will notify the Office of the Privacy Commissioner and affected individuals in accordance with our legal obligations.


Your rights

You may have rights to:

  • Access your personal information 
  • Request correction of inaccurate information 
  • Withdraw consent for marketing communications 
  • Request deletion or restriction of data (where applicable) 

To exercise these rights, please contact us using the details below.


Children’s privacy

Our website is not intended for children under 16, and we do not knowingly collect personal information from children.


Changes to this policy

We may update this Privacy Policy from time to time.
The latest version will always be available on our website.


Contact

If you have any questions about this Privacy Policy or your personal information, please contact:

support@tatawaibotanicals.co.nz