Privacy policy
Privacy Policy
Last updated: September 2026
This Privacy Policy explains how we collect, hold, use, disclose and protect personal information in connection with our business, website, products and services.
We are committed to handling personal information in accordance with the Privacy Act 2020 and applicable New Zealand privacy requirements.
1. Who we are
For the purposes of this Privacy Policy, “we”, “us” and “our” means the business operating this website and providing the relevant products and services.
We operate as a franchise business and have contractual obligations to our franchisor. This means that, in certain circumstances, personal information collected through our business may be accessible to or shared with our franchisor or other parties involved in operating and supporting the franchise.
2. What is personal information?
Personal information is information about an identifiable individual.
Depending on how you interact with us, this may include:
- Name
- Email address
- Phone number
- Billing or delivery address
- Order and transaction information
- Payment-related information
- Account or registration information
- Communications and enquiries you send to us
- Information provided when entering a promotion, competition or survey
- Preferences and information relating to your interactions with our website
- Any other information you voluntarily provide to us
We only seek to collect information that is reasonably necessary for our business functions and activities.
3. How we collect personal information
We may collect personal information when you:
- Visit or use our website
- Register for an account
- Place an order
- Make an enquiry
- Subscribe to our mailing list
- Enter a promotion, competition or survey
- Complete an online form
- Communicate with us by email, phone, social media or other channels
- Interact with us in person
- Otherwise provide information to us in the course of doing business with us
Where reasonably practicable, we collect personal information directly from the individual concerned.
In some circumstances, we may receive personal information from another person or organisation, such as our franchisor, a service provider, a delivery provider, payment provider, business partner, or another person acting on your behalf.
Where we collect personal information indirectly, we will take reasonable steps to ensure that you are made aware of the relevant information about that collection, where required by the Privacy Act 2020.
4. Why we collect personal information
We collect and use personal information for purposes including:
Providing products and services
To process and fulfil orders, provide products and services, arrange delivery or collection, process payments, and provide customer support.
Customer service
To respond to enquiries, complaints, requests and other communications.
Business administration
To administer accounts, maintain business records, manage our operations, maintain appropriate records and comply with our legal and contractual obligations.
Marketing
Where permitted by law and, where required, with your consent, we may use your contact details to send information about products, services, promotions and other relevant offers.
You may unsubscribe from marketing communications at any time using the unsubscribe facility provided or by contacting us.
Website and service improvement
To understand how our website and services are used, improve functionality and customer experience, and conduct analytics.
Promotions and surveys
To administer competitions, promotions, surveys and other activities you choose to participate in.
Legal and regulatory purposes
To comply with legal obligations, respond to lawful requests, enforce our terms and conditions, protect our rights and property, and prevent or investigate fraud or other unlawful activity.
5. Franchise relationship
We operate under a franchise arrangement and have contractual obligations to our franchisor.
As part of that relationship, personal information collected through our business may be accessible to or shared with our franchisor where this is reasonably necessary for purposes such as:
- Administering the franchise relationship
- Operating shared business systems
- Providing or supporting products and services
- Customer service and support
- Business administration
- Training and quality assurance
- Reporting and record keeping
- Maintaining franchise standards
- Compliance with the franchise agreement
- Supporting the operation, management or development of the franchise network
The franchisor may have its own legal obligations, rights or responsibilities in relation to personal information under the franchise agreement or applicable law.
Where the franchisor independently collects, holds or uses personal information, its own privacy policy may also apply.
6. Disclosure of personal information
We do not sell, trade or rent personal information.
We may disclose personal information where permitted or required by the Privacy Act 2020 or another applicable law.
This may include disclosure to trusted third parties that assist us with:
- Payment processing
- Website hosting and operation
- IT and technology services
- Order processing and fulfilment
- Delivery services
- Customer service
- Marketing and communications
- Business administration
- Data storage and management
- Analytics
- Franchise operations and support
We may also disclose information:
- With your authorisation
- For the purpose for which it was collected
- For a directly related purpose where permitted by law
- Where necessary to comply with a legal obligation
- Where necessary to protect someone's health or safety
- To prevent or investigate suspected fraud, unlawful activity or serious misconduct
- Where otherwise permitted under the Privacy Act 2020
We take reasonable steps to ensure that information disclosed to third parties is handled appropriately.
7. Business sale, transfer or restructuring
If our business, or part of our business, is sold, transferred, merged, restructured or otherwise disposed of, personal information held by us may be transferred as part of that transaction where permitted by the Privacy Act 2020.
This may include the transfer of customer, supplier, account, order or other business records to a purchaser, successor or other relevant party where reasonably necessary to facilitate the sale or transfer of the business.
Where personal information is transferred in these circumstances, it will continue to be subject to applicable privacy obligations.
A purchaser or successor may use transferred personal information only in accordance with the Privacy Act 2020 and other applicable legal requirements.
New or materially different uses of personal information will not be authorised simply because the information was transferred as part of a business sale.
The Privacy Commissioner recognises that disclosure of personal information can, in appropriate circumstances, be permitted where it is necessary to facilitate the sale or disposition of a business as a going concern.
8. Overseas disclosure and service providers
Some service providers we use may store or process information outside New Zealand.
Where personal information is disclosed to an organisation outside New Zealand, we will take reasonable steps to ensure that the disclosure complies with Information Privacy Principle 12 of the Privacy Act 2020.
This may include ensuring that the recipient is subject to the New Zealand Privacy Act, is required to provide comparable privacy safeguards, or has appropriate contractual protections in place.
Where required by law, we will obtain appropriate authorisation before making an overseas disclosure.
The Privacy Act's overseas disclosure requirements are intended to ensure that personal information continues to receive appropriate protection when transferred outside New Zealand.
9. Payment information
Payments may be processed through third-party payment providers.
We do not generally store full credit card or payment-card details on our own servers after a transaction has been completed.
Payment information may be handled directly by our payment providers in accordance with their own privacy and security policies.
10. Cookies and website analytics
Our website may use cookies and similar technologies to improve functionality and user experience.
Cookies may be used to:
- Remember shopping cart contents
- Remember preferences
- Maintain website functionality
- Understand website traffic
- Analyse interactions with our website
- Improve our services and website
- Support marketing or advertising activities where applicable
You may disable cookies through your browser settings. However, doing so may affect the functionality of some parts of our website.
11. Security of personal information
We take reasonable steps to protect personal information we hold against:
- Loss
- Unauthorised access
- Unauthorised disclosure
- Misuse
- Modification
- Destruction
Security measures may include access controls, passwords, encryption, secure payment systems, restricted access to information and other appropriate technical and organisational safeguards.
No electronic transmission or storage system can be guaranteed to be completely secure.
12. Accuracy of information
We take reasonable steps to ensure that personal information we hold is accurate, complete, relevant and up to date for the purposes for which it is used.
You may ask us to correct personal information we hold about you if you believe it is inaccurate or incomplete.
13. How long we keep personal information
We will not keep personal information for longer than is required for the purposes for which it may lawfully be used, unless we are required or authorised by law to retain it for longer.
The appropriate retention period may depend on the nature of the information and our legal, accounting, tax, contractual, operational and business requirements.
When personal information is no longer required, we will take reasonable steps to securely delete it or otherwise dispose of it.
14. Your right to access your information
You have the right to request access to personal information we hold about you, subject to the exceptions and requirements of the Privacy Act 2020.
You may ask us:
- Whether we hold personal information about you
- For access to that information
- About how your information is being used or disclosed, where applicable
We will respond to requests in accordance with the Privacy Act 2020.
15. Your right to request correction
You may ask us to correct personal information we hold about you if you believe it is inaccurate, incomplete or misleading.
If we do not agree to make the requested correction, we will provide you with information about your rights under the Privacy Act 2020 and, where appropriate, may attach a statement noting the requested correction.
16. How to make a privacy request
To request access to or correction of your personal information, contact us using the details below.
Please provide enough information for us to identify the information or request you are referring to.
We may need to take reasonable steps to confirm your identity before providing access to personal information.
17. Privacy breaches
We take reasonable steps to prevent privacy breaches.
If we become aware of a privacy breach, we will assess the breach and take appropriate steps to contain, investigate and remedy it.
Where a privacy breach has caused or is reasonably likely to cause serious harm, we will notify the Privacy Commissioner and affected individuals as required by the Privacy Act 2020.
18. Marketing communications
If you have subscribed to receive marketing communications, we may use your contact details to send you information about our products, services, promotions and offers.
You can unsubscribe at any time by:
- Using the unsubscribe link in the relevant communication; or
- Contacting us directly.
Unsubscribing from marketing communications will not prevent us from sending essential communications relating to orders, transactions, accounts, services or other matters where we are legally entitled or required to contact you.
19. Children
Our website, products and services are intended for people aged 18 years or older.
We do not knowingly seek to collect personal information from children for purposes that are not appropriate or permitted by law.
20. Third-party websites
Our website may contain links to websites or services operated by third parties.
We are not responsible for the privacy practices, content or security of third-party websites.
We recommend reviewing the privacy policy of any third-party website before providing personal information.
21. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our business, services, technology, legal requirements or privacy practices.
The updated version will be published on this website with an updated revision date.
22. Privacy Officer
Not Applicable
23. Contact us
If you have a question about this Privacy Policy, wish to make a privacy request, or have a concern about how your personal information has been handled, please contact:
Email: orders@thirstyliqourtauranga.co.nz
We will make reasonable efforts to respond promptly and will handle privacy requests in accordance with the Privacy Act 2020.
If you are not satisfied with how we have handled a privacy matter, you may also contact the Office of the Privacy Commissioner.