Privacy Policy

Privacy Policy Allen and Co Last updated: January 2026

Allen and Co ("we", "us", "our") is committed to protecting your privacy and handling your personal information in accordance with the Privacy Act 2020 and the Information Privacy Principles (IPPs).

This Privacy Policy explains how we collect, use, store, disclose, and protect personal information when you visit our website and make purchases, create an account, sign up for newsletters, contact us, or otherwise interact with our e-commerce services.

1. Who we are Allen and Co 6 Cleghorn Street Blenheim, New Zealand

We act as the "agency" responsible for personal information under the Privacy Act 2020.

2. What personal information we collect We may collect the following types of personal information:

  • Contact and identity information: name, billing/shipping address, email address, phone number
  • Transaction information: products purchased, order details, payment information (we do not store full credit card details — these are handled securely by our payment processor)
  • Account information: username, password (stored encrypted), order history
  • Communication information: messages or enquiries you send us, newsletter subscription details
  • Technical and usage information: IP address, browser type, device information, pages visited, time/date of visits, referring/exit pages, cookies and similar tracking technologies
  • Marketing and preference information: marketing preferences, responses to promotions

We only collect personal information that is necessary for the purposes described in this policy (IPP 1).

3. How we collect your personal information We collect personal information:

  • Directly from you (when you place an order, create an account, subscribe to updates, contact us, or fill in forms)
  • Automatically through your use of the website (via cookies, server logs, analytics tools)
  • From third parties in some cases (e.g. shipping carriers providing delivery updates, fraud prevention services)

Where possible, we collect information directly from you (IPP 2).

4. Why we collect, use and hold your personal information We collect and use your personal information for the following purposes:

  • To process and fulfil your orders, including payment processing, shipping, and delivery
  • To create and manage your customer account
  • To communicate with you about your orders, enquiries, returns, refunds, or service updates
  • To provide customer support
  • To send marketing communications (only if you have consented or where permitted under New Zealand law)
  • To improve our website, products, and services (e.g. through analytics)
  • To detect and prevent fraud, security issues, or misuse of our services
  • To comply with legal obligations (e.g. tax, consumer protection laws)

We only use personal information for the purpose for which it was collected (or a directly related purpose) unless we have your consent or another legal basis (IPP 10 & 11).

5. Cookies and tracking technologies Our website uses cookies and similar technologies to enhance functionality, analyse usage, and deliver personalised content/ads.

  • Essential cookies: required for the site to function (e.g. cart, checkout)
  • Analytics cookies: to understand how visitors use the site (e.g. Google Analytics)
  • Marketing cookies: for relevant advertising (where applicable)

You can manage cookie preferences via your browser settings or our cookie banner (where implemented). For more details, see our [Cookie Policy – link if separate].

6. Sharing / disclosing your personal information We may disclose your personal information to:

  • Payment processors (e.g. Stripe, PayPal) to process transactions
  • Shipping/delivery companies (e.g. NZ Post, Courier companies) to fulfil orders
  • IT/service providers (e.g. hosting, email service providers, website analytics)
  • Professional advisers (e.g. accountants, lawyers) where required
  • Government/regulatory bodies if legally required

Some of these recipients may be located overseas (e.g. cloud servers in Australia, USA, or elsewhere). Where personal information is transferred overseas, we take reasonable steps to ensure it receives comparable protection to that required under New Zealand law (IPP 12).

We do not sell your personal information to third parties.

7. How we protect your personal information We take reasonable steps to protect personal information from loss, misuse, unauthorised access, modification, or disclosure (IPP 5). This includes technical measures (encryption, secure servers, access controls) and organisational safeguards.

8. How long we keep your personal information We retain personal information only for as long as necessary to fulfil the purposes outlined in this policy, or as required by law (e.g. tax records for 7 years). After that time, we securely destroy or de-identify it (IPP 9).

9. Access, correction and other rights You have the right to:

  • Access your personal information we hold (IPP 6)
  • Request correction if it is inaccurate (IPP 7)
  • Request that we stop using it for marketing
  • Make a complaint about our handling of your information

To exercise these rights, contact our Privacy Officer at [insert email]. We may ask you to verify your identity. Most requests are free, but we may charge for unreasonable or repeated requests.

10. Complaints If you are unhappy with how we have handled your personal information, please contact us first. If we cannot resolve your complaint, you may contact the Office of the Privacy Commissioner: https://www.privacy.org.nz Freephone: 0800 803 909

11. Changes to this Privacy Policy We may update this policy from time to time. The updated version will be posted on our website with the revised "Last updated" date.

12. Contact us If you have any questions about this Privacy Policy or our privacy practices, please contact: Allen and Co 6 Cleghorn Street Blenheim, New Zealand newzealandwines@outlook.com