Cookie Time Limited – Privacy Policy
Cookie Time Limited (“Cookie Time,” “we,” “us,” or “our”) respects your privacy and is committed to protecting your personal information in accordance with the Privacy Act 2020 (NZ). This Privacy Policy explains how we collect, use, store, and disclose personal information when you interact with us, including through our website(s), mobile apps, social media channels, promotions, and in-store or customer service interactions.
By using our website, purchasing our products, entering a promotion, or otherwise engaging with Cookie Time, you agree to the terms of this Privacy Policy.
1. What Personal Information We Collect
We may collect the following types of personal information:
Contact details — name, email address, phone number, postal address
Account information — usernames, passwords, and preferences if you create an account with us
Transaction information — purchase history, payment details (processed securely by third-party payment providers), delivery addresses
Promotion and competition entries — entry details, codes, proof of purchase, and other information required to participate
Communications — records of correspondence when you contact our customer service team, including via email, phone, social media, or web forms
Technical and usage information — IP address, browser type, device information, pages visited, and cookies (see Section 6)
Marketing preferences — your choices regarding newsletters, promotions, and communications
Feedback and survey responses
We collect personal information directly from you wherever possible. We may also collect information from third parties, such as our marketing partners, retailers, or service providers, where relevant to a specific campaign or transaction.
2. How We Use Your Personal Information
We use personal information for purposes including:
– Fulfilling orders, processing payments, and arranging delivery
– Administering promotions, competitions, and giveaways, including verifying eligibility and delivering prizes
– Responding to enquiries and providing customer support
– Sending marketing communications, where you have opted in (you may opt out at any time)
– Improving our products, website, and services
– Conducting market research and analytics
– Meeting our legal, regulatory, and contractual obligations
– Protecting the security and integrity of our systems and preventing fraud
We will only use personal information for the purpose it was collected, or for a directly related purpose, unless we have your consent or are otherwise permitted or required by law.
3. Disclosure of Personal Information
We may disclose personal information to:
– Service providers who assist us with IT hosting, payment processing, delivery/courier services, marketing, and customer support, under obligations of confidentiality
– Marketing and agency partners engaged to run specific campaigns or promotions on our behalf
– Professional advisors, such as lawyers, auditors, and insurers, where necessary
– Regulatory bodies or law enforcement, where required by law
– A new owner, in the event of a sale, merger, or restructure of our business
We do not sell personal information to third parties.
Where a service provider is based overseas (for example, a cloud hosting or marketing platform), we take reasonable steps to ensure that entity is subject to privacy standards comparable to those under the Privacy Act 2020, in accordance with Information Privacy Principle 12.
## 4. Storage and Security
We take reasonable steps to protect personal information from loss, misuse, unauthorised access, disclosure, alteration, or destruction. This includes secure storage systems, access controls, and staff training. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
We retain personal information only for as long as necessary to fulfil the purposes described in this policy, or as required by law.
5. Your Rights
Under the Privacy Act 2020, you have the right to:
– Access the personal information we hold about you
– Request correction of any information you believe is inaccurate, incomplete, or out of date
– Withdraw consent to marketing communications at any time
To exercise these rights, contact us using the details in Section 8. We will respond within the timeframes required by law and may need to verify your identity before actioning a request.
If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner (www.privacy.org.nz).
6. Cookies and Online Tracking
Our website uses cookies and similar technologies to improve your browsing experience, remember your preferences, and analyse site traffic. You can manage or disable cookies through your browser settings, though this may affect site functionality.
We may use third-party analytics and advertising tools (such as Google Analytics or Meta Pixel) that collect information about your interactions with our site for the purposes described above.
7. Children’s Information
Our products and promotions are generally intended for a general audience. Where a promotion requires entrants to be over a certain age, we will state this in the specific terms and conditions. We do not knowingly collect personal information from children without appropriate parental or guardian consent where required.
8. Contact Us
If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact:
Cookie Time Limited
789 Main South Road, Templeton, Christchurch 8042
Email: cookiemuncher@cookietime.co.nz
Phone: +64 3-349 6141
9. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated version will be posted on our website with a revised “Last updated” date. We encourage you to review this policy periodically.
—
*This document is a general template based on New Zealand’s Privacy Act 2020 and is provided for guidance only. It does not constitute legal advice. We recommend having it reviewed by a lawyer before publishing, particularly to confirm accuracy around your specific data practices, third-party processors, and any industry-specific obligations.*
